Account and Permission
Last updated: 2025-08-27 17:43:12
How do I manage the account of a TencentDB for SQL Server instance?
We recommend that you manage accounts in the TencentDB for SQL Server console rather than on the SSMS client. Click the ID of the target instance to enter the instance management page. On the Account Management tab, you can create and delete accounts and modify account permissions.
How do I manage TencentDB for SQL Server databases?
We recommend that you manage databases in the TencentDB for SQL Server console rather than on the SSMS client. You can click the ID of the target instance to enter the instance management page. On the Database Management tab, you can perform the following operations: Creating Database, Deleting Database, and Setting Database Permissions.
How do I create an account in TencentDB for SQL Server?
We recommend that you create an account in the TencentDB for SQL Server console rather than on the SSMS client. For more information, see Creating Account.
How do I delete an account in TencentDB for SQL Server?
We recommend that you delete an account in the TencentDB for SQL Server console rather than on the SSMS client. For more information, see Deleting Account.
How do I modify account permissions in TencentDB for SQL Server?
We recommend that you modify account permissions in the TencentDB for SQL Server console rather than on the SSMS client. For more information, see Modifying Account Permissions.
How do I create a database in TencentDB for SQL Server?
We recommend that you create a database in the TencentDB for SQL Server console rather than on the SSMS client. For more information, see Creating Database.
How do I delete a database in TencentDB for SQL Server?
We recommend that you delete a database in the TencentDB for SQL Server console rather than on the SSMS client. For more information, see Deleting Database.
How do I modify database permissions in TencentDB for SQL Server?
We recommend that you modify database permissions in the TencentDB for SQL Server console rather than on the SSMS client. For more information, see Setting Database Permissions.
When managing a database with Microsoft SQL Server Management, I was prompted with the message "Login failed. The login is from an untrusted domain and cannot be used with Windows authentication." Why?
Change the authentication method to "SQL Server Authentication".
Does TencentDB for SQL Server support assigning the sysadmin role to users?
For dual-node (formerly HA Edition/Cluster Edition) and multi-node instances: Considering the potential risk of intrusion, the sysadmin role for users is not enabled by default. If your business needs to use the sysadmin role, submit a ticket to obtain a solution. When you manage databases through Microsoft SQL Server Management, the following prompt message may be displayed: "You should be a member of the sysadmin role to perform this operation".
Single-node (formerly Basic Edition) instances: The sysadmin role can be provided for users. Submit a ticket to apply to create an admin account with the sysadmin permission for authorization. Note that the admin account has the highest sysadmin management permission and has owner permissions for all databases. After an admin account is created, the product will no longer guarantee the instance SLA.
How do I create an account with SA permissions in TencentDB for SQL Server?
For TencentDB for SQL Server dual-node (formerly HA Edition/Cluster Edition) and multi-node instances, if your business needs to use the sysadmin role, submit a ticket to obtain a solution. For single-node (formerly Basic Edition) instances, you can submit a ticket to apply to create an admin account with the sysadmin permission for authorization. Note that the admin account has the highest sysadmin management permission and has owner permissions for all databases. After an admin account is created, the product will no longer guarantee the instance SLA.
Can I connect to TencentDB for SQL Server with a Windows system account?
You cannot connect to a TencentDB for SQL Server non-single-node instance with a Windows system account. To connect to a single-node instance with such account, submit a ticket for application.
What should I do if I forget the login password of TencentDB for SQL Server?
Log in to the TencentDB for SQL Server console and click the ID of the target instance to enter the instance management page. On the Account Management tab, select More > Reset Password in the Operation column to reset the password. For more information, see Resetting Password.
How do I reset the password of TencentDB for SQL Server?
Log in to the TencentDB for SQL Server console and click the ID of the target instance to enter the instance management page. On the Account Management tab, select More > Reset Password in the Operation column to reset the password. For more information, see Resetting Password.
What should I do if I cannot create any database or table?
Your login account may be a business account without database/table creation permissions. In this case, grant the account the required permissions in the TencentDB for SQL Server console. For more information, see Setting Database Permissions.
Why do I lack permissions to modify database parameters such as blocked process threshold(s)?
You might be using a sub-account without parameter modification permissions. You can use the root account or grant the sub-account permissions as instructed in CAM > Overview.
Can I have the permission to access and create folders on the server in TencentDB for SQL Server?
Currently, TencentDB for SQL Server doesn't allow you to access and create folders on the instance server.
Can I view connection details in TencentDB for SQL Server?
You can view connection details after connecting to the instance through SSMS. If you don't have relevant permissions, submit a ticket for escalating your database account permissions.
Can I view the slow SQL table in TencentDB for SQL Server?
Log in to the TencentDB for SQL Server console, click the target instance ID in the instance list, and query and download slow query logs on the operation log page.
The slow SQL table of TencentDB for SQL Server is not displayed by default. You can view it after connecting to the instance through SSMS. If you don't have relevant permissions, submit a ticket for escalating your database account permissions.
Can I have the SQL trace permission in TencentDB for SQL Server?
Log in to the TencentDB for SQL Server console, and you can see that the SQL trace permission is granted to accounts created on the Account Management tab by default.
If your account is created manually through the SSMS client, it doesn't support SQL trace by default. You can run the following command to authorize it with the admin account as needed:
GRANT ALTER TRACE TO [$account];.Why does the system prompt that I don't have the permission to enable Profiler in TencentDB for SQL Server?
Accounts created on the Account Management tab in the TencentDB for SQL Server console have the Profiler permission by default. However, accounts manually created through SSMS don't have such permission. In this case, you can run the following command to authorize them:
GRANT ALTER TRACE TO [$account];.Can I use accounts created in the primary instance in read-only instances?
Accounts created in the primary instance will be synced to read-only instances but cannot be managed there. They only support read but not write operations in read-only instances.
Will permissions be synced to replica instances and read-only instances automatically after an account in the primary instance is deleted and created again?
After an account in the TencentDB for SQL Server primary instance is deleted and created again, the permissions and other modifications in the primary instance will be automatically synced to replica instances and read-only instances.
How do I sync account permissions on two-node (formerly High Availability/Cluster Edition) primary and replica instances to read-only instances?
Accounts created on the dual-node (formerly HA Edition/Cluster Edition) primary instances will be automatically synchronized to read-only instances. Dual-node instances with database versions SQL Server 2017/2019/2022 Enterprise use the Always On method for synchronization, while dual-node instances with database versions SQL Server 2008R2/2012/2014/2016 Enterprise use Publish/Subscribe feature for synchronization. Accounts created on the primary instances via the console will be automatically synchronized to read-only instances in real time. After synchronization, the created login name or password modification permission can be used on the read-only instance.
Can database accounts be managed at a finer granularity (such as limiting source addresses)?
You can use commands for authorization at a finer granularity after connecting to a database.
Which account permissions are granted by default in TencentDB for SQL Server?
The following account permissions are granted in TencentDB for SQL Server by default:
Server-level roles:
Processadmin: Manages SQL Server processes.
Dbcreator: Creates and modifies databases.
Database-level roles:
db_owner: Owns the database and performs all database operations.
db_datareader: Views the data in all user tables in a database.
db_reader: Reads data in the database.
db_writer: Writes data to the database.
Table-level permissions:
Permission | Description |
INSERT | Insert the data. |
UPDATE | Updating Data |
Update the data. | View the definition. |
VIEW CHANGE TRACKING | View change tracking records. |
UNMASK | Remove the mask. |
ALTER | Modify the table structure and attributes. |
TAKE OWNERSHIP | Take over the ownership. |
CONTROL | Full control permission for a table. |
DELETE | Delete the data. |
SELECT | Query the data. |
REFERENCES | Reference permission. A table should be referenced when a foreign key is created. |
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No
Feedback