Revoking Permissions of a Database Account

Function

This API is used to revoke permissions of a database account in a specified DB instance.

Before calling this API, learn how to authenticate it.
Before calling this API, learn about the request header parameters.

Authorization Information

Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.

If you are using role/policy-based authorization, see Permissions and Supported Actions for details on the required permissions.
If you are using identity policy-based authorization, the following identity policy-based permissions are required.

Action	Access Level	Resource Type (*: required)	Condition Key	Alias	Dependencies
rds:databasePrivilege:revoke	write	instance	g:EnterpriseProjectId g:ResourceTag/<tag-key>	-	-

Action

Access Level

Resource Type (*: required)

Condition Key

Alias

Dependencies

rds:databasePrivilege:revoke

write

instance

g:EnterpriseProjectId

g:ResourceTag/<tag-key>

Constraints

This operation cannot be performed when the DB instance is in any of the following statuses: creating, changing instance class, changing port, frozen, or abnormal.

For any database and account created using methods other than the RDS console and APIs, if the database name and account name do not meet the database naming rules (see Table 2) and account naming rules (see Table 2), for example, containing Chinese characters or unsupported special characters, the database and account cannot be managed through the RDS console or APIs.
In migration scenarios, if any database name and account name of the source database do not meet the database naming rules (see Table 2) and account naming rules (see Table 2), the database and account cannot be managed through the RDS console or APIs after being migrated to the destination RDS for MySQL database.

URI

URI format
DELETE /v3/{project_id}/instances/{instance_id}/db_privilege

Parameter description

**Table 1** Parameters
Parameter	Mandatory	Description
project_id	Yes	Definition Project ID of a tenant in a region. Constraints The value cannot be empty. Range To obtain the value, see Obtaining a Project ID. Default Value N/A
instance_id	Yes	Definition Instance ID. Constraints The value cannot be empty. Range You can obtain the value of this parameter from id in Table 4 by calling the API for querying DB instances. Default Value N/A

Request

**Table 2** Parameters
Parameter	Mandatory	Type	Description
db_name	Yes	String	Definition Database name. Constraints N/A Range You can obtain the value of this parameter from name in Table 3 by calling the API for querying databases. Default Value N/A
users	Yes	Array of objects	Definition Database accounts. Each element is a database account. For more information about the element structure, see Table 3. Constraints A single request supports a maximum of 50 elements.

**Table 3** users field data structure description
Parameter	Mandatory	Type	Description
name	Yes	String	Definition Username of the database account. Constraints N/A Range The username can consist of 1 to 32 characters. Only letters, digits, hyphens (-), and underscores (_) are allowed. If the database version is MySQL 5.6, the username consists of 1 to 16 characters. If the database version is MySQL 5.7 or 8.0, the username consists of 1 to 32 characters. Default Value N/A

Example Request

DELETE https://{endpoint}/v3/0483b6b16e954cb88930a360d2c4e663/instances/dsfae23fsfdsae3435in01/db_privilege

{
    "db_name": "rds-test",
    "users": [
        {
            "name": "rds"
        },
        {
            "name": "rds001"
        }
    ]
}