Configuring Permissions of Database Accounts

Function

This API is used to configure permissions of database accounts for a specified DB instance. Before calling this API:

Learn how to authenticate this API.
Obtain the required region and endpoint.

Constraints

This operation cannot be performed when the instance is in any of the following statuses: creating, changing instance specifications, frozen, or abnormal.
By default, read-only users have the create and usage permissions on the public schemas.
You can only authorize one schema to one user at a time.

URI

POST /v3/{project_id}/instances/{instance_id}/db-privilege

**Table 1** Parameter description
Parameter	Mandatory	Description
project_id	Yes	Definition Project ID of a tenant in a region. To obtain the value, see Obtaining a Project ID. Constraints N/A Range The value can contain 32 characters. Only letters and digits are allowed. Default Value N/A
instance_id	Yes	Definition Instance ID, which uniquely identifies an instance. Constraints N/A Range The value can contain 36 characters. Only letters and digits are allowed. Default Value N/A

Request Parameters

**Table 2** Parameter description
Parameter	Mandatory	Type	Description
db_name	Yes	String	Definition Database name. Constraints The name cannot be a template database and must be an existing database name. Template databases include postgres, template0, template1. Range N/A Default Value N/A
users	Yes	Array of objects	Definition Database accounts. Each element is a database account. For details, see Table 3. Constraints A single request supports a maximum of 50 elements.

**Table 3** users field data structure description
Parameter	Mandatory	Type	Description
name	Yes	String	Definition Database account. Constraints The value cannot be a system user and must be an existing account. System users: rdsAdmin, rdsMetric, rdsBackup, rdsRepl, and root. Range N/A Default Value N/A
readonly	Yes	Boolean	Definition Permission of the database account. Constraints N/A Range true: read only false: read and write Default Value N/A
schema_name	Yes	String	Definition Schema name. Constraints The name cannot be public or information_schema, and must be an existing schema name. Range N/A Default Value N/A

Example Request

Configuring permissions for multiple accounts of the gaussdb_test database

POST https://gaussdb-opengauss.ap-southeast-1.myhuaweicloud.com/v3/0483b6b16e954cb88930a360d2c4e663/instances/{instance_id}/db-privilege
{ 
  "db_name" : "gaussdb_test", 
  "users" : [ { 
    "name" : "rds", 
    "readonly" : false, 
    "schema_name" : "teste123" 
  }, { 
    "name" : "rds001", 
    "readonly" : true, 
    "schema_name" : "teste134" 
  }, { 
    "name" : "rds002", 
    "readonly" : false, 
    "schema_name" : "teste135" 
  } ] 
}