All Products
Search

This Product

    PolarDB:Manage system accounts in three-role mode

    Document Center

    PolarDB:Manage system accounts in three-role mode

    Last Updated:Mar 30, 2026

    After you enable three-role mode, you can view account information and reset passwords for the three system accounts in the PolarDB-X console.

    Role overview

    Three-role mode creates three dedicated system accounts. Each account has a fixed set of privileges that cannot be modified.

    Account Full name Responsibility
    DBA Database administrator Manages database objects and operations
    DSA Security administrator Manages security policies and configurations
    DAA Data audit administrator Audits data access and operations

    Limits

    The following restrictions apply to the DBA, DSA, and DAA accounts:

    • GRANT ROLE and REVOKE ROLE are not supported.

    • GRANT PRIVILEGES and REVOKE PRIVILEGES are not supported.

    • SET DEFAULT ROLE is not supported.

    • To change the password of a system account, you must be logged in to the database using that account. For example, to change the DBA account password, log in to the database as the DBA account first.

    Prerequisites

    Before you begin, make sure that:

    View account information

    Two navigation paths provide access to account information. Method 1 shows account names and descriptions. Method 2 shows full account details including account type, accessible databases, and granted permissions.

    Method 1: Safety management page

    1. In the top navigation bar, select the region where the instance is located.

    2. On the Instances page, click the PolarDB-X 2.0 tab.

    3. Find the instance and click its ID.

    4. In the left-side navigation pane, choose ConfigurationManagement > Safety management.

    5. Click the Account powers tab to view the names and descriptions of the DBA, DSA, and DAA accounts.

    Method 2: Account Management page

    1. In the top navigation bar, select the region where the instance is located.

    2. On the Instances page, click the PolarDB-X 2.0 tab.

    3. Find the instance and click its ID.

    4. In the left-side navigation pane, choose ConfigurationManagement > Account Management.

    5. On the Account Management page, view the DBA, DSA, and DAA accounts. For each account, the page shows the account type, accessible databases, and granted permissions. Standard accounts are also listed on this page.

    Reset a password

    Important

    You must be logged in to the database using the account whose password you want to reset before following these steps. For example, to reset the DBA password, log in to the database as the DBA account first.

    1. In the top navigation bar, select the region where the instance is located.

    2. On the Instances page, click the PolarDB-X 2.0 tab.

    3. Find the instance and click its ID.

    4. In the left-side navigation pane, choose ConfigurationManagement > Account Management.

    5. Click the Account powers tab.

    6. Find the account and click Change password in the Operation column.

    7. In the dialog box, enter and confirm the new password.

      Note

      The password must meet all of the following requirements:

      • 8 to 20 characters in length

      • At least three of the following character types: uppercase letters, lowercase letters, digits, and special characters

      • Supported special characters: @#$%^&+=

    8. Click OK.