PolarDB:Account management

Account type

Description

Privileged Account

• Can be created and managed only in the console.

• Each cluster can have only one privileged account. This account can manage all standard accounts and databases in the cluster.

• Can create databases and standard accounts. It can also grant a standard account permissions on a specific database, which allows the standard account to add, delete, modify, and query data in that database.

• Provides more permissions to meet custom and fine-grained permission management needs. For example, query permissions on different tables can be assigned to different users.

• Can disconnect any account.

Standard Account

• Can be created and managed in the console or using SQL statements.

• A cluster can have multiple standard accounts. The specific number depends on the database kernel.

• Does not have permissions to create databases or standard accounts. Can manage only authorized databases.

• Cannot manage other accounts or disconnect other accounts.

Global Read-only Account

• Can be created and managed in the console or using SQL statements.

• Cannot create or manage databases.

• Does not have permissions to create databases or standard accounts. Can only view databases.

• A cluster can have multiple global read-only accounts. By default, these accounts have read-only permissions on all data.

• Cannot manage other accounts or disconnect other accounts.