After you enable the three-role mode, you can view the accounts for the three roles and change the passwords for the accounts in the PolarDB-X console. This topic describes how to manage the accounts.

Limits

Before you use the three-role mode, you must take note of the following limits:

  • You cannot run GRANT ROLE or REVOKE ROLE commands on the DBA, DSA, and DAA accounts.
  • You cannot run GRANT PRIVILEGES or REVOKE PRIVILEGES commands on the DBA, DSA, and DAA accounts.
  • You can change the password of a system account when you use the account to log on to the database. For example, if you want to change the password of the DBA account, you must log on to the database by using the DBA account.
  • You cannot run the SET DEFAULT ROLE command on the DBA, DSA, and DAA accounts.

View account information

  1. Log on to the PolarDB-X console.
  2. In the top navigation bar, select the region where the target instance is located.
  3. On the Instance List page, click the PolarDB-X 2.0 tab.
  4. Find the target instance and click its ID.
  5. You can use one of the following methods to view the information about the accounts:
    • Method 1: View account information on the Safety management page.
      1. In the left-side navigation pane, choose ConfigurationManagement > Safety management.
      2. Click the Account powers tab to view the names and descriptions of the database administrator (DBA) account, security administrator (DSA) account, and data audit administrator (DAA) account.
    • Method 2: View account information on the Account Management page.
      1. In the left-side navigation pane, choose ConfigurationManagement > Account Management.
      2. On the Account Management page, you can view information about the DBA account, DSA account, and DAA account, including the account type, databases that the account can access, and permissions that are granted to the account. On this page, you can also view information about standard accounts.

Reset the password of an account

  1. Log on to the PolarDB-X console.
  2. In the top navigation bar, select the region where the target instance is located.
  3. On the Instance List page, click the PolarDB-X 2.0 tab.
  4. Find the target instance and click its ID.
  5. Click the Account powers tab.
  6. Find the account for which you want to change the password and click Change password in the Operation column.
  7. In the dialog box that appears, specify and confirm the new password.
  8. Click OK.