Create a database account (PostgreSQL engine) - PolarDB - Alibaba Cloud Documentation Center

This topic explains how to create a database account and the differences between a privileged account and a standard account.

Background information

PolarDB supports two types of database accounts: privileged accounts and standard accounts. You can manage all accounts in the console.

Type	Description
Privileged Account	Can be created and managed only in the console or via an API. You can create multiple privileged accounts for a cluster. A privileged account can manage all standard accounts and databases. Offers extended permissions to support custom and fine-grained permission management, such as granting query permissions on different tables to specific users. Has all permissions on all databases within the cluster. Can terminate any other account's connection.
Standard Account	Can be created and managed in the console or by running SQL statements. You can create multiple standard accounts for a cluster. The maximum number of accounts varies by database engine. You must manually grant permissions on specific databases to a standard account. A standard account cannot create or manage other accounts, nor can it terminate other accounts' connections.

Log on to the PolarDB console.
In the upper-left corner of the page, select a region.
Click the target cluster's ID.
In the left-side navigation pane, click Configuration and Management > Accounts.
Click Create Account.

Configure the following parameters:

Parameter	Description
Account Name	The name must meet the following requirements: Start with a lowercase letter and end with a letter or a digit. Contain only lowercase letters, digits, and underscores (_). Be 2 to 16 characters in length. Cannot be a reserved username, such as `root` or `admin`.
Account Type	Select Privileged Account to create a privileged account. Select Standard Account to create a standard account.
Password	The password must meet the following requirements: Contain characters from at least three of the following categories: uppercase letters, lowercase letters, digits, and special characters. Be 8 to 32 characters in length. The supported special characters are: ! @ # $ % ^ & * ( ) _ + - =
Confirm Password	Enter the password again.
Description	Enter a description to simplify future account management. The description must meet the following requirements: Cannot start with `http://` or `https://`. Be 2 to 256 characters in length.

API	Description
CreateAccount	Creates an account.
DescribeAccounts	Queries a list of accounts.
ModifyAccountDescription	Modifies the description of an account.
ModifyAccountPassword	Modifies the password of an account.
DeleteAccount	Deletes an account.