Docs

Database Workshop

Enterprise security management

Granting operation permissions for system roles

Database Workshop (DBW) supports unified management of database instances and collaborative management through multiple roles, such as system roles and ticket approval roles. This simplifies and standardizes database management and improves data management efficiency. This topic describes how to grant operation permissions for DBW system roles on the Database Workshop (DBW) console.

Prerequisites

The instance has enabled security control. For detailed steps, refer to Enabling security control.

Procedure

Log on to the DBW console.

On the left navigation bar, select Corporate security > User management.

On the top menu bar, select the region.

On the User management page, select the authorization target as needed:

Authorize personal users

Authorize permissions for specified users:

On the User management page, click Personal user management.

On the Personal user management sub-tab, click Permission management in the Actions column of the target user, and select the permissions to be granted.

Batch authorize user permissions:

On the User management page, click Personal user management.

On the Personal user management sub-tab, select the users to be authorized as needed. Click Batch Authorize in the bottom menu bar, and select the permissions to be authorized.

Authorize user groups

On the User management page, click User group management.

On the User group management sub-tab, click Permission management in the Actions column of the target user group, and select the permissions to be granted.

In the displayed control panel, configure the following information.

Permission level

Description

Authorize instance

Database type: Select RDS for SQL Server.

Authorization method: Select an authorization method as required. You can select instances to be authorized by Directly select or Select based on the project it belongs to.

Authorize instance: Check the instance to be authorized from the drop-down list. Multiple selections are supported.

Permission type: Check the permission type as needed. Currently, the following options are supported.

SQLchange: Refers to operations that add, modify, or delete data in the database. SQL statement types include CREATE, ALTER, DROP, UPDATE, INSERTand DELETE.

SQL query: Refers to the operation of retrieving the required data from the database. SQL statement types include SELECT, and SHOW .

Structural change: Represents operations that can modify, add, or delete a database structure. SQL statement types include ALTER TABLE, CREATE INDEX, and DROP INDEX.

Operation and maintenance read-only: Refers to read-only permissions for operation and maintenance management capabilities, such as viewing real-time sessions and slow SQL analysis lists.

Operation and maintenance read/write: Refers to full permissions for operation and maintenance management capabilities, such as Kill sessions and creating SQL rate limiting tasks.

Effective time: Select the validity period of the authorization from the drop-down list, with options including 1 month, 3 months, 6 months and 1 year. Additionally, custom days can be set as the validity period, with a default of 1 day and a range of [1, 365].

Click OK.

View user permissions

Log on to the DBW console.

On the left navigation bar, select Corporate security > User management.

On the top menu bar, select the region.

On the User management page, choose ... in the operation column of the target user. > Permission details.

In the upper-right corner of the Permission details dialog box, switch the database type to RDS for SQL Server as needed to view all instance permissions that the target user has.

tip

You can also select unnecessary permissions on the target permission tab to release them.

Last updated: 2026.07.03 10:09:12