Docs

Database Workshop

Security rules

Security rule set management

Security control refers to the rules and measures established to protect data and resources in the database system. Security rule sets enable you to implement fine-grained control over database instances in DBW, such as password-free login, ticket management, and security rule management. This topic describes how to manage security rule sets.

Precautions

The system provides a default security rule set named mongo default. For default security rules included in the security rule sets, refer to Security rule management.

The default security rule set can not be deleted and can only be viewed. Custom security rule sets can not be recovered after deletion. Proceed with caution.

Advantages

Enhanced control: Security rule sets allow database administrators to refine control over user activities, such as setting rules that only allow specific users to access the database on specific platforms.

Implement the Principle of Least Privilege (PoLP): With security rule sets, you can implement the PoLP by assigning users only the minimum permissions required for the target instance, thereby reducing the risk of users performing high-risk operations through permissions.

Improved standardization: A clearly defined security rule set helps build and maintain good database access and usage specifications, and improves the professionalism and security of the database system.

Prerequisites

An instance for Document Database for MongoDB has been created. For detailed steps, refer to Creating an instance.

Your account has been added as an administrator of DBW. For detailed steps, refer to Adding a user.

Create a security rule set

Log on to the DBW console.

On the top menu bar, select the region.

On the left navigation bar, select Corporate security > Security rule.

On the Security rule set page, click Create security rule sets.

In the Create security rule sets dialog box, configure the following parameters:

Rule set name: Customize the security rule set name. The security rule set name can not exceed 128 characters, and must not contain spaces.

Database type: Select the database type as required. Document Database for MongoDB is supported.

Click OK.

Apply a security rule set

Log on to the DBW console.

On the top menu bar, select the region.

On the left navigation bar, click Instance list.

In the upper-left corner of the Instance list page, switch the database type to Document Database for MongoDB.

On the Instance list page, find the target instance and click the pen icon in the Security control column.

In the Set security control dialog box, turn on the switch for the security control mode, select a security rule set from the Security rule set drop-down list, and then configure other parameters.

Click OK.

Delete a security rule set

A deleted security rule set cannot be recovered. Proceed with caution.

Log on to the DBW console.

On the top menu bar, select the region.

On the left navigation bar, select Corporate security > Security rule.

On the Security rule set page, click Delete in the Actions column of the target security rule set.

In the Are you sure to delete? dialog box, click OK.

Edit a security rule set

Currently, only modification of the security rule set name is supported.

Log on to the DBW console.

On the top menu bar, select the region.

On the left navigation bar, select Corporate security > Security rule.

On the Security rule set page, click the pen icon in the Security rule set name column of the target security rule set to modify its name.

The security rule set name can not exceed 128 characters, and must not contain spaces.

Click OK.

Next steps

To enable, disable, add, or edit security rules in the security rule set, refer to .

Last updated: 2025.10.11 11:06:13