Docs

Database Workshop

User management

User role description

This article describes the user roles provided by DBW, including system roles and ticket approval roles.

Type	Role	Description	Privilege
System role	Administrator	The primary account of Volcengine is Defaulted as the Administrator of DBW, namely RootAccount. Sub-users can be set as administrators with no quantity limit.	The primary account has all permissions under the account by default. DBW administrators have default access to all DBW features. tip Only administrators can have permissions such as user management, security control, and security rules. For details, see User introduction.
System role		Normal user	Normal users are sub-users and a type of identity for access control, created by administrators with no quantity limit.	Normal users have partial DBW permissions. For details, see User introduction.
Resource role	Instance owner	Both administrator role and normal role can be set as the owner. It is suggested to set the administrator role as the instance owner. The instance owner is the default first-level ticket approver in the system default template. Each instance can have multiple owners. Only administrator role can modify the owner.	All read and write permissions under this database instance. Corresponds to the owner node in the default approval workflow.
		Instance DBA	Both administrator role and normal role can be set as DBA. It is suggested that you set the administrator role as instance DBA. Instance DBA will default to the second-level ticket approver in the system default template. Each instance can have multiple DBAs. Only the administrator role can modify the DBA.	All read and write permissions under this database instance. Corresponds to the DBA node in the default approval workflow.
		Instance Admin	The administrator role defaults to instance Admin. The administrator defaults to the approver of the three-level ticket approval in the system default template.	All read and write permissions under this database instance. Corresponds to the Admin node in the default approval workflow.

tip

Sub-users not added to DBW user management are not recognized as individual users or user groups within DBW. Therefore, they do not support instance security control, passwordless login for the Data Interaction Console, or platform features such as user management, security control, and ticket lists. To ensure a full feature experience, we recommend adding Volcano Engine sub-users to DBW's individual users or user groups.

View roles

Log on to the DBW console.

In the left-side navigation pane, select Corporate security > My permission.

On the My permission page, locate the Basic information section to view your DBW role.

If your account is the primary account, you can view the username and DBW role on this page.

If your account has a DBW system role (Normal user or Administrator), you can apply for additional permissions on this page.

If your account does not have a DBW system role, you can apply to become one on this page.

Last updated: 2026.07.01 16:40:37