Create privileged and standard database accounts - PolarDB

PolarDB supports two types of database accounts: privileged and standard. This topic explains the difference between the two types and describes how to create an account in the PolarDB console.

Account types

PolarDB clusters use two account types with different permission scopes. You can create multiple accounts of either type per cluster. The type you choose determines what the account can do after creation.

Account type	Creation method	Permissions	Manage other accounts
Privileged account	Console or API	All permissions on all databases in the cluster, including fine-grained user permission control (e.g., grant different users access to different tables)	Yes — can manage and disconnect accounts
Standard account	Console, API, or SQL	Only the permissions explicitly granted; maximum number of standard accounts depends on the database engine	No

Note Root accounts cannot be created in PolarDB for security reasons.

Create an account

Log on to the PolarDB console.
In the upper-left corner, select the region where your cluster is deployed.
Find your cluster and click the cluster ID.
In the left-side navigation pane, choose Settings and Management > Accounts.
Click Create Account.

In the Create Account pane, configure the following parameters.

Parameter	Description
Account name	Enter an account name that meets these requirements: starts with a lowercase letter; ends with a letter or digit; contains only lowercase letters, digits, and underscores (`_`); is 2–16 characters long; is not a reserved name (e.g., `root` or `admin`).
Account type	Select Privileged Account or Standard Account.
Password	Enter a password that meets these requirements: contains at least three of the following character types — uppercase letters, lowercase letters, digits, and special characters (`!@#$%^&*()_+-=`); is 8–32 characters long.
Confirm password	Re-enter the password.
Description	(Optional) Enter a description to help identify this account. Must start with a letter; can contain letters, digits, underscores (`_`), and hyphens (`-`); cannot start with `http://` or `https://`; must be 2–256 characters long.

Click OK.

What's next

View or apply for an endpoint

API reference

API	Description
CreateAccount	Creates a database account for a specified PolarDB cluster.
DescribeAccounts	Queries the database accounts for a specified PolarDB cluster.
ModifyAccountDescription	Changes the description of a database account for a specified PolarDB cluster.
ModifyAccountPassword	Changes the password of a database account for a specified PolarDB cluster.