You can manage the permissions of existing database accounts in the console. Specifically, you can grant or revoke global/object-level privileges for those accounts.
Account Permission Description
Permission
Description
ALTER
Permission for modifying structure of the database table, including modifying/adding/deleting table fields, and adding/deleting the table index
ALTER ROUTINE
Permission for modifying a stored process and function
CREATE
Permission for creating a database, table, view, stored procedure, and function
CREATE ROUTINE
Creates routine objects such as stored procedures and functions
CREATE TEMPORARY TABLES
Permission for creating a temp table
CREATE USER
Permission for creating a user and assigning permission for it
CREATE VIEW
Permission for creating a view
DELETE
Permission for deleting data from the specified table
DROP
Permission for deleting a database, table, view, stored procedure, and function
EVENT
Permission for creating, modifying, and deleting an event
EXECUTE
Permission for executing the stored procedure and function
GRANT OPTION
Permission for granting a permission to the specified user.
INDEX
Permission for creating and deleting an index
INSERT
Permission for inserting or writing new data into the table
LOCK TABLES
Permission for locking the specified data table for read and write operations
PROCESS
Permission for viewing information of all executing threads and processes
REFERENCES
Permission for creating or deleting foreign key constraint in the current database
RELOAD
Permission for reloading system configuration files, restarting or shutting down a database
REPLICATION CLIENT
Permission for viewing and managing replication process status and parameters
REPLICATION SLAVE
Permission for replicating data from the primary database
SELECT
Permission for viewing data in the specified table
SHOW DATABASES
Permission for displaying all databases in the current server
SHOW VIEW
Permission for displaying views
TRIGGER
Permission for creating and managing a trigger
UPDATE
Permission for updating data in the specified table
2. Select a region at the top and proceed according to the actually used view mode:
Tab view
List view
Click Target Cluster in the cluster list on the left to enter the cluster management page.
Find the target cluster in the cluster list and click the Cluster ID or Manage in the Operation column to enter the cluster management page.
3. On the cluster management page, select the Account Management tab and click Modify Permissions in the Operation column.
4. In the pop-up dialog box, select or deselect permissions and click OK to complete the modification.
Global Privileges: Grant permissions to all databases in the instance.
Object-Level Privileges: Grant permissions to certain databases in the instance.
Note：
To batch grant or revoke table permissions, click Batch Grant/Revoke Table Permissions, select Authorize or Revoke in the pop-up window, select multiple target tables and permissions for authorization, and click OK.
To preview account permission modification, you can click Preview.
