Help Center/ TaurusDB/ User Guide/ Permissions Management/ Creating a User and Granting GaussDB(for MySQL) Permissions
Updated on 2025-03-28 GMT+08:00

Creating a User and Granting GaussDB(for MySQL) Permissions

This section describes how to use IAM for fine-grained permissions control over your GaussDB(for MySQL) resources. With IAM, you can:

  • Create IAM users for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for accessing GaussDB(for MySQL) resources.
  • Grant only the permissions required for users to perform specific tasks.
  • Entrust an account or cloud service to perform professional and efficient O&M on your GaussDB(for MySQL) resources.

If your account does not require individual IAM users, skip this section.

Figure 1 describes the procedure for granting permissions.

Prerequisites

Learn about the permissions supported by GaussDB(for MySQL) and choose policies or roles according to your requirements.

Process Flow

Figure 1 Process for granting GaussDB(for MySQL) permissions
  1. Create a user group and assign permissions to it.

    Create a user group on the IAM console, and attach the GaussDB FullAccess policy to the group.

  2. Create an IAM user and add it to a user group.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Log in and verify permissions.

    Log in to the GaussDB(for MySQL) console using the created user, and verify that the user only has read permissions for GaussDB(for MySQL).

    Under the service list, choose Databases > GaussDB(for MySQL). On the Instances page, click Buy DB Instance in the upper right corner. If the DB instance can be purchased, the required permissions policies have already been applied.