Users and roles

Background information

OceanBase Developer Center (ODC) lets you view and edit user permissions and grant permissions through roles. After users are added, they can log on to ODC with their configured accounts and passwords.

A role is an object that grants various permissions to users. It is a collection of multiple permissions. You can use roles to organize users with the same set of permissions into a group. To easily grant and manage permissions in ODC, you can create custom roles and assign them to users.

This document describes how to create and manage users and roles in ODC.

How it works

The relationship between users, roles, projects, and system permissions is as follows:

1. A user with the permission to create roles can create roles on the User Permissions page.

2. A user with the permission to edit users can view users on the User Permissions page and assign roles to them.

3. A user with the permission to manage approval flows can select a project role as an approval node when creating an approval flow on the Security Specifications page.

4. A user with the permission to manage threat levels can select a created approval flow when editing a threat level on the Security Specifications page.

5. A user with the permission to manage threat detection rules can set threat detection rules for a threat level on the Security Specifications page.

Notes

• ODC has a built-in administrator user named admin. This account is automatically assigned the system_admin administrator role. By default, the account can perform all system-related operations and access all public resources. You cannot edit, delete, or disable this account.

• A role is an object used to grant various permissions to users. It functions as a collection of multiple permissions. You can use roles to organize users who require the same set of permissions into a group. To simplify permission granting and management in OceanBase Developer Center (ODC), you can create custom roles and assign them to users.

User management

User list

The following table describes the basic information in the user list.

Item	Description
Name	The name of the user.
Account	Displays the specified account information.
Role	Displays information about the role.
Last Updated	The time when the user information was last updated. Click Last Updated to sort the list in ascending or descending order.
Last Logon	The time when the user last logged on to ODC. Click Last Logon to sort the list in ascending or descending order.
Enabled	The status of the user, which can be Enabled or Disabled. Click the filter icon to filter by status.
Actions	The View, Edit, and Disable/Enable buttons. Click the Disable/Enable button to directly change the user's status. Note You cannot edit or disable your own account.

View a user

1. On the user list page, click View in the Actions column.

2. In the User Information panel that appears, you can view User Details and Related Resources.

Item	Description
User Details	User information: Displays user information such as Account, Name, Password, Role, and Description. The password is encrypted. A Reset Password button is available to change the user's logon password. Operation information: Displays information such as Created By, Created At, and Last Updated.
Related Resources	Displays the names of data sources that the current user can access and their permission information.
Edit	In the User Information panel, click Edit in the lower-right corner to open the Edit User panel.

Edit a user

1. On the user list page, click Edit in the Actions column.

2. The Edit User panel displays all the information that you specified when you created the user. After a user is created, you cannot change the Account. However, you can change the Name, Status, Role, and Description.

Role management

Create a role

Example: An administrator creates a role named odc_project in ODC. This role has the permissions to edit the mysql_4.2.0 data source and manage the ODCUSER1 user.

1. In the project collaboration window, choose User Permissions > Role > Create Role from the navigation pane on the left.

   

2. In the Create Role panel that appears, specify the following information.

   

   Permission type	Description
   Role Name	Specify a name for the new role. The role name is required and can be up to 48 characters long.
   Role Status	A new role is Enabled by default. You can manually select Disabled. The permissions of a disabled role do not take effect.
   Permission Type	Select the permission types to grant to the role. ODC supports resource management permissions and system operation permissions. After you select the required permissions, the Permission Settings section appears. When you create a role, you must specify and configure at least one permission type. Resource management permissions: Include permissions to manage (create, manage, edit, or view) data sources, projects, roles, and users. System operation permissions: Include permissions to view or manage operation records, automatic authorization, approval flows, threat detection rules, development specifications, and system integrations.
   Note:	Enter a description in the text box. This is optional and can be up to 140 characters long.

3. After you specify the information, click Create in the lower-right corner of the panel to create the role.

4. After the role is created, you can view it on the role list page.

   

Role list

The following describes the basic information in the role list.

Item	Description
Role Name	The name of the role.
Permission Type	The permission types granted to the role.
Last Updated	The time when the role information was last updated.
Status	The status of the role, which can be Enabled or Disabled.
Actions	Lets you View and Edit the role.

View a role

1. On the role list page, click View in the Actions column.

2. In the Role Information panel that appears, you can view Role Details and Related Users.

   

   Item	Description
   Role Details	Creation information: Displays the information specified when the role was created, such as Role Name, Permission Type, and Description. Operation information: Displays information such as Created By, Created At, and Last Updated.
   Related Users	The Related Users tab displays a list of users who are assigned the current role. The list shows information such as the user's Name, Role, and Status.

3. In the Role Information panel, click Edit in the lower-right corner to open the Edit Role panel.

4. Click Copy Role to open the Create Role panel. The panel is automatically populated with the information from the current role.

Edit a role

1. On the role list page, click Edit in the Actions column.

2. Modify the role information.

3. After you finish modifying the information, click Save in the lower-right corner of the Edit Role panel.

References

• Automatic authorization