All Products
Search
Document Center

Lindorm:Unified user authentication and permission management

Last Updated:Jun 17, 2026

Manage users and their permissions in the Lindorm console, including creating and deleting users, granting read and write permissions, and revoking permissions.

Limitations

This feature is available only for Lindorm instances. For a Lindorm V1 instance, use the User Management system.

Manage users

Create a user

  1. Log on to the Lindorm console. In the upper-left corner of the page, select the region of the instance. On the Instances page, click the ID of the target instance or click View Instance Details in the Actions column for the instance.

  2. In the left-side navigation pane, choose User Management.

  3. Click Create User. In the Create User dialog box, enter a username and password for the new user. Click Create User.

    Important

    The username and password must meet the following requirements:

    • username: Must be 2 to 30 characters long and can contain only digits, uppercase letters, lowercase letters, underscores (_), and hyphens (-).

    • password: Must be at least 8 characters long and must contain a character from each of the following categories: uppercase letters, lowercase letters, digits, and special characters (for example, @, #, and $).

Delete a user

  1. In the Actions column of the target user, click Delete User.

  2. Click Determine.

Change a user's password

  1. In the Actions column of the target user, click Reset Password.

  2. In the Change Password dialog box, enter the new password.

  3. Click Determine.

Permission management

Use Permission Management to grant or revoke permissions for Lindorm users.

Note

Permission changes take effect immediately. However, a short synchronization delay may occur.

Engine categories

Lindorm supports engine-level permission management. You can grant a user permissions to one or more engines: wide column, time series, search, vector, AI, and columnar storage.

Permission levels

Lindorm supports three hierarchical permission levels, from highest to lowest: Global, Database (also known as Namespace), and Table. A user with Global permissions for an engine automatically has the same permissions for all databases and tables within it.

For example, granting user1 Global read and write permissions for the wide column engine gives user1 read and write access to all tables in all databases within that engine.

Permission categories

The supported operation permissions are WRITE, READ, ADMIN, TRASH, and SYSTEM.

For detailed descriptions of permissions for each engine, see Wide column engine permissions and Time series engine permissions.

Grant and revoke permissions

  1. In the Actions column of the target user, click Permission Management.

  2. From the drop-down list, select the desired action:

    • Grant Permissions: Grants permissions at the Global, Database, or Table level.

    • Revoke Permissions: Revokes permissions at the Global, Database, or Table level.

  3. In the dialog box, select the engine, database or table, and Permission Type.

    Note

    You can click image to grant or revoke permissions for multiple engines, databases, and tables at once.

  4. Click Determine.