Support access control

This topic describes how to grant access permissions to OceanBase Cloud support personnel for your instances.

Background information

When you need technical assistance from OceanBase Cloud support team, you can use the Support Access Control feature to grant specific permissions (such as configuration, query, and data access) to OceanBase Cloud support personnel. The support team can then operate on your instances within the allowed time frame and permission scope to provide technical support services.

Prerequisites

Support Access Control is available only when the instance status is Running.

Procedure

1. Log in to the OceanBase Cloud console.

2. On the instance list page, click your target instance to enter the Overview page of the instance.

3. In the left navigation pane, click Security.

4. On the Security page, click Support Access Control.

5. Grant permissions and set an expiration time. You can grant one or more of the following permissions based on your business needs: Object View Access, SQL Emergency Access, Data Access, Session Management Access, and Configuration Access.

   1. Click the toggle switch of a permission under Status.

      Access Type	Description
      Object View Access	After granted, OceanBase Cloud support personnel can view your database indexes and views.
      SQL Emergency Access	After granted, OceanBase Cloud support personnel can perform operations such as outline binding and throttling on SQL statements.
      Data Access	After granted, OceanBase Cloud support personnel can execute SELECT and other data query commands in all tenants of the instance.
      Session Management Access	After granted, OceanBase Cloud support personnel can terminate database sessions in emergency situations.
      Configuration Access	After granted, OceanBase Cloud support personnel can view and modify instance and tenant configuration information.

   2. In the Enable Access dialog box, set the expiration time for the permission.

      Note

      • When granting multiple access permissions, all permissions will share the same expiration time. The time you set during your first permission grant will serve as the unified expiration time for all permissions.
      • The current access control settings only apply to existing tenants. If new tenants need access in the future, you will need to perform the authorization process again.