This topic describes how to modify the system privileges and role of a user, and add objects.
Applicability
This topic applies only to OceanBase Cloud Platform (OCP) Enterprise Edition. OCP Community Edition supports only MySQL tenants.
Prerequisites
Make sure that you have the following permissions:
-
Resource Permissions : Cluster Maintenance or Tenant Maintenance permission -
Menu Permissions : Permission on theUser Management menu ofTenants
-
Only a primary tenant has the user management permissions.
Operations such as modifying system permissions, modifying roles, and adding objects for the SYS user are not supported.
Procedure
Log on to the OCP console.
In the left-side navigation pane, select
Tenants . TheTenants tab automatically appears.On the
Tenants tab, find the target Oracle tenant and click its name to go to theOverview page of the tenant.In the left-side navigation pane, click
User Management .On the
Users page, click the username of the target user to go to its details page.
On this page, you can perform the following operations:
Modify the system privileges of the user: Click Modify System Privileges. In the dialog box that appears, select privileges from the drop-down list or remove existing privileges.
Change the user role: Click Change Role. In the dialog box that appears, select roles from the drop-down list.
Add objects that are accessible to the user: Click Add Objects. In the dialog box that appears, specify parameters described in the following table.
Parameter Description Object Type Available options: Table ,View , and Stored Procedure. Note that you can add only one type of objects at a time. To add different types of objects, you need to add them separately.Object Select objects of other users so that you can access these objects. You can paste one or more objects into the field in the format of username.object name, such asschemaname.tablename. Separate objects with commas (,).
When you select objects, the access objects that have been added are filtered out. You can select only those that have not been added.Grant Permission Select the privileges to be granted as needed. For more information, see System privileges. 
After the accessible objects are added, the user can access and perform operations on these objects within the granted privileges.
Delete objects:
Delete an object: In the
Accessible Objects list, locate the row that contains the target object, and clickDelete in theActions column.Batch delete objects: In the
Accessible Objects list, select the target objects, and click theBatch Delete button.
After an accessible object is deleted, the user can no longer access the object.
Modify object privileges:
Modify the privileges on an object: In the
Accessible Objects list, locate the row that contains the target object, and click Modify Privilege in theActions column.Batch modify privileges on objects: In the
Accessible Objects list, select the target objects, and click the Batch Modify Privileges button.