Docs

Database Workshop

Enterprise security management

Granting operation permissions for system roles

Database Workshop (DBW) supports unified management of database instances and collaborative management through multiple roles, such as system roles and ticket approval roles. This simplifies and standardizes database management and improves enterprise security efficiency. This topic describes how to grant operation permissions for DBW system roles on the Database Workshop (DBW) console.

Prerequisites

The instance has enabled security control. For detailed steps, refer to Enabling security control.

Procedure

Log on to the DBW console.

On the top menu bar, select the region.

On the left navigation bar, select Corporate security > User management.

On the User management page, select the authorization target as needed:

Authorize personal users

Authorize permissions for specified users:

On the User management page, click Personal user management.

On the Personal user management sub-tab, click Permission management in the Actions column of the target user, and select the permissions to be granted.

Batch authorize user permissions:

On the User management page, click Personal user management.

On the Personal user management sub-tab, select the users to be authorized as needed. Click Batch Authorize in the bottom menu bar, and select the permissions to be authorized.

Authorize user groups

On the User management page, click User group management.

On the User group management sub-tab, click Permission management in the Actions column of the target user group, and select the permissions to be granted.

In the displayed control panel, configure the following information.

tip

Document Database for MongoDB currently only supports Authorize instance.

Authorization type	Parameter	Description
Authorize instance	Database instance	Select Document Database for MongoDB.
		Authorization method	Select an authorization method as required. You can select instances to be authorized by Directly select or Select based on the project it belongs to.
		Authorize instance	Check the instance to be authorized from the drop-down list. Multiple selections are supported.
		Permission type	Check the permission type as needed. Currently, the following options are supported. SQL change: Refers to operations that add, modify, and delete data in the database. SQL query: Refers to the operation of retrieving the required data from the database. Structural change: Represents operations that can modify, add, or delete a database structure. Operation and maintenance read-only: Refers to read-only permissions for operation and maintenance management capabilities, such as viewing real-time sessions and database audit logs. Operation and maintenance read/write: Refers to full permissions for operation and maintenance management capabilities, such as Kill sessions.
		Effective time	Select the validity period of the authorization from the drop-down list, with options including 1 month (default), 3 months, 6 months, and 1 year. Additionally, custom days can be set as the validity period, with a default of 1 day and a range of [1, 365].

Click OK.

Last updated: 2025.10.11 11:06:13