ApsaraDB for MongoDB:(Optional) Create a database account and grant permissions

Background information

We recommend that you do not use the root account to connect to the instance in the production environment. You can create another database account and grant permissions to connect to the instance.

If you use another database account to connect to the instance, you must grant the required permissions to the database account. If you use a database account to which you do not grant permissions, you cannot perform any database operations after you connect to the instance. In this case, error messages such as "Exception authenticating..." are returned.

Limits

• Database accounts created by using DMS are not listed on the Accounts page in the ApsaraDB for MongoDB console.

• A database account belongs to the database in which the account is created.

Prerequisites

Procedure

1. On the SQL Console tab of the DMS console, create a database account named test, set the password to 123456Aa, set the database to admin, and grant the account the read permission. You can run the following command:

   db.createUser({user: "test", pwd: "123456Aa", roles:[{role: "read", db: "admin"}]})

   Note

   For more information about permissions, see Roles of database accounts.

   If a value of 1.0 is returned for ok, the account is created. Otherwise, the account cannot be created.

2. After the database account is created, you can view it on the Account Management page in the DMS console.

   1. In the left-side navigation pane, choose Database instance > Instances Connected. Then, find the instance to which the database belongs and right-click its ID.

   2. Select Account Management from the shortcut menu.

   3. On the Account Management page, click Database Management, select the database, and then view the accounts created on the database.