In enterprise collaboration mode, databases are added to data sources, and control and secure release status are enabled. This ensures security control for controlled instance changes, rule management, and process approvals, improving database security and compliance.
Control Instances also supports one-click login, viewing instance details, modifying execution accounts, granting or revoking user operation permissions, changing instance rule templates, enabling or disabling the secure release status, and exporting the controlled instance list.
Prerequisites
The sub-account has the necessary access permissions for DMC-related feature pages. For details and operations, see DMC User Permission Settings. The root account has full permissions by default.
The instance to be managed should have been added to the data source. For details, see Create Data Source.
Apply for Database and Table Operation Permissions: Click More > Grant Permissions. For details, see Permission Application.
Delete Controlled Instance: Click More > Delete, and then click OK. After deletion, the data source will no longer appear on the control instance page. It will still be displayed on the data source page, but will have control disabled. Control can be re-enabled later as needed.
2. In the left sidebar, select Secure Release > Instance Control > Control Instances.
3. Select the Instance List tab.
4. In the Operation column for the target instance, click View or click Data Source ID.
5. Viewing Instance Details
Basic Info
You can view details such as the data source ID/name, tag, instance source, database type, source instance ID, region, connection address, billing mode, and source instance tag.
Executing User and Status
View the instance's execution account, status, and secure release status, and enable or disable the secure release status as needed.
Rule Overview
Check the bound rule template and its configurations, including SQL window, SQL change rules, and approvers.
Click Edit in the upper-right corner to modify the rule template. For details, see Create Rule Template.
Note:
If the control instance is bound to a system default template, editing is not supported.
Click Change Template in the upper-right corner of the page to update the bound rule template. For details, see Change an Instance Rule Template.
Authorization Information
Select the Authorization Information tab to view authorized users and their permissions and authorize user permissions or revoke existing permissions.
2. In the left sidebar, select Secure Release > Instance Control > Control Instances.
3. Select the Instance List tab.
4. Click More > Modify Execute Account in the Operation column for the target instance.
5. In the pop-up dialog box, modify the execution account and the execution account password, click Test Connectivity, and after the test passes, click OK.
Authorizing and Revoking User Operation Permissions for an Instance
2. In the left sidebar, select Secure Release > Instance Control > Control Instances.
3. Go to the authorization page using one of the following methods:
Method 1: Select the User Authorization Management tab and choose Authorized users at the top of the page.
Method 2: Select the Instance List tab, and in the Operation column corresponding to the control instance, click More > Grant Permissions.
Method 3: Select the Instance List tab, click View or Data Source ID in the Operation column corresponding to the managed instance, select the Authorization Information tab, and click Authorized users.
4. In the right panel, select the instance, user, database, permissions, and validity period, and click OK.
To revoke a user's operation permissions, either click Revoke in the corresponding Operation column of the user list, or select multiple users and click Revock at the top of the page, and then click OK in the pop-up dialog box.
Note:
The primary account can revoke all account permissions.
Sub-accounts with administrator permissions can revoke permissions of other sub-accounts under the same primary account.
Sub-accounts without administrator permissions can only revoke their own permissions.
2. In the left sidebar, select Secure Release > Instance Control > Control Instances.
3. Select the Instance List tab, in the Operation column corresponding to the control instance, click View or click Data Source ID, and select the Rule Overview tab.
4. Click Change Template at the top of the page.
5. In the pop-up dialog box, select a replacement mode.
Replace rule template: Select an existing rule template and click OK.
Create and bind a template: Enter a template name and click OK. After creation, you can click Edit in the upper-right corner of the page to define specific template rules. For details, see Create Rule Template.
