Overview of console and database account types - PolarDB - Alibaba Cloud - PolarDB

This topic describes the Alibaba Cloud console account and the PolarDB database account.

Console account

You can use the following accounts to log on to the console:

Alibaba Cloud account: This account allows flexible control over all your Alibaba Cloud resources and is used for billing purposes. You must create an Alibaba Cloud account before you purchase Alibaba Cloud services.
RAM user account: Optional. You can create and manage RAM user accounts in the Resource Access Management (RAM) console to share resources to multiple users. A RAM user account does not own resources. Alibaba Cloud accounts are charged for all fees.

You can use the following accounts to log on to databases in the cluster. For more information, see Create a database account.

Type	Description
Privileged Account	Can be created and managed only in the console or via an API. You can create multiple privileged accounts for a cluster. A privileged account can manage all standard accounts and databases. Offers extended permissions to support custom and fine-grained permission management, such as granting query permissions on different tables to specific users. Has all permissions on all databases within the cluster. Can terminate any other account's connection.
Standard Account	Can be created and managed in the console or by running SQL statements. You can create multiple standard accounts for a cluster. The maximum number of accounts varies by database engine. You must manually grant permissions on specific databases to a standard account. A standard account cannot create or manage other accounts, nor can it terminate other accounts' connections.

API	Description
CreateAccount	Creates an account.
DescribeAccounts	Queries the accounts of a specified cluster.
ModifyAccountDescription	Modifies the description of a database account for a PolarDB cluster.
ModifyAccountPassword	Changes the password of a database account.
DeleteAccount	Deletes an account.