Creating Designated Account
Last updated: 2025-08-07 18:08:04
This document describes how to create a designated account for a TencentDB for SQL Server instance in the console.
Designated account description
TencentDB for SQL Server supports creating one or more designated accounts for an instance. Attention needs to be paid to the following two points for designated accounts:
A designated account can only view and own the specified database. For example, account B is created in instance A and designated to have the owner permission of the database db1. Then, when logging in to instance A with designated account B, you can only view the database db1, but you can perform all operations on it.
A designated account can be authorized to multiple databases, but a database can be authorized to only one designated account. This means that a designated account can have the owner permissions of multiple databases, but a database with owner permission granted to a designated account cannot be authorized to other designated accounts.
Directions
1. Log in to the TencentDB for SQL Server console. Click an Instance ID or Manage in the Operation column to access the instance management page.
2. On the instance management page, select Account Management > Create Account and enter relevant information in the pop-up window. After confirming that everything is correct, click OK.
Parameter | Description |
Account Name | The account name must consist of 1 to 50 characters, comprising letters, numbers, or special symbols; it must begin with a letter, and the allowed special character is "_". The reserved keywords that cannot be included in the account name are: master，mssql，monitor，sys，dbo，dba，sysadmin，tencent_admin，public，securityadmin，serveradmin，setupadmin，processadmin，diskadmin，dbcreator，bulkadmin，administrator(case-insensitive)，guest(case-insensitive)。The account name must not contain the following sensitive characters: .|##|( | )|[ | ]|,|`|;|'|"|\\|--|xp_cmdshell|sp_addsrvrolemember. |
Account Type | Designated account description. Note: A designated account can only view and own the specified database. |
Database | In the list of unauthorized databases, select the target database. On the right side, the authorized databases section displays the selected databases along with their permissions. It supports the removal of selected databases and allows one-click selection of all databases by clicking Unauthorized Database. Support clicking  |
New Password | The password must contain 8–32 characters in at least two of the following types: letters, digits, and symbols _+-&=!@#$%^*()[]. |
Confirm Password | Enter the password again. |
Remarks | Optional. It can contain up to 256 characters. |
Related APIs
API | Description |
This API is used to create an instance account. |
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No
Feedback