Manage roles
A role defines which resources and modules a user can access in an organization. NineData provides five preset roles. You can edit preset roles except system administrator, create custom roles, delete roles that are no longer needed, and assign roles to organization users.
Before you begin
- Create or join an organization. For details, see Manage organizations.
- Make sure the NineData console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.
- Your role is System Administrator. For details, see Roles.
Notes
- Among the preset roles, Administrator cannot be edited or deleted.
- When you create or rename a role, the role name must be unique in the current organization.
Procedure
View or add roles
Log in to the NineData Console.
Open Account > Roles. The role list shows all roles in the current organization.
tipIf Account is not displayed, make sure the console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.
Click Create Role in the lower-left corner of the page.
In the Create Role dialog box, enter a name for the new role. This name is used to identify the role, with a maximum of 16 characters.
Click OK to create the role. NineData opens the permission configuration page for the new role. Configure the role permissions based on your business needs.
tipFor details about permission types, see Permissions.
Edit an existing role
You can edit all roles except the system administrator. The editable content includes the role name and specific permissions.
Log in to the NineData Console.
Go to Account > Roles. You can rename the role or edit its permissions.
tipIf Account is not displayed, make sure your console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.
Rename a role: In the role list on the left side of the page, hover over the role, click the
icon, enter the new role name in the Edit role dialog, and click OK. Role names support up to 16 characters.
tipThis icon does not appear to the right of the Administrator role because it cannot be changed.
Edit role permissions: In the role list on the left side of the page, click the target role name, edit the role permissions on the permission configuration page, and click Save in the lower-left corner of the page.
tipFor details about permission types, see Permissions.
Delete a role
You can delete all roles except Administrator.
Log in to the NineData Console.
Go to Account > Roles.
tipIf Account is not displayed, make sure your console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.
In the role list on the left side of the page, hover over the role to delete, and click the
icon.
tipThis icon does not appear to the right of the Administrator role because it cannot be removed.
In the Edit role dialog, click Delete in the lower-left corner.
cautionAfter a role is deleted, users assigned to that role lose the role and all permissions provided by it. This operation is irreversible.
In the confirmation dialog, enter the role name and click Delete in the lower-right corner.
Assign roles to users
A role takes effect only after it is assigned to a user. Before assigning a role, make sure the target user has joined the organization. For details, see Invite users.
Log in to the NineData Console.
Go to Account > Roles.
tipIf Account is not displayed, make sure your console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.
In the role list on the left side of the page, click the target role name. In the Member list on the right side of the page, click Add.
In the Add dialog, select the target users in the Members list. You can select multiple users to assign the role in batches.
Click OK.
Result
The role configuration is saved for the organization. Users assigned to the role receive the permissions defined for that role.
Appendix: List of preset role permissions
- Admin Permissions
- Service Permissions
- Datasource Permissions (PROD)
- Datasource Permissions (DEV)
- Other Permissions
| Module | Category | System Administrator | Production Environment Administrator | Production Environment Read-only | Development Environment Administrator | Regular Member |
|---|---|---|---|---|---|---|
| User Management | Invite Users/Create SSO Users | ✔️ | ❌ | ❌ | ❌ | ❌ |
| Remove Users | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Edit Users | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Disable/Enable Users | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Configure Permissions | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Role Management | Add New Role | ✔️ | ❌ | ❌ | ❌ | ❌ |
| Edit Role Permissions | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Edit User Roles | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Delete Role | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Organization Management | Change Organization Name|Logo | ✔️ | ❌ | ❌ | ❌ | ❌ |
| SSO Account Login Configuration | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Toggle Data Watermark | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Configure Session Timeout | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Delete Organization | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Audit Log | View Operation Logs | ✔️ | ❌ | ❌ | ❌ | ❌ |
| View SQL Execution Logs | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Message Center | Subscription Management | ✔️ | ❌ | ❌ | ❌ | ❌ |
| Module | Category | Administrator | Prod Admin | Prod Admin(RO) | Dev Admin | Common User |
|---|---|---|---|---|---|---|
| DevOps | SQL Console | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| SQL Task | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
| Archive & Clean | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
| Data Export | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
| Data Import | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
| SQL Code Review | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
| Slow Query | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
| DSQL | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
| Backup | Backup | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Restore | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
| Backup Set | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
| Backup Query | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
| Replication | Replication | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Comparison | Data | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Schema | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
| Datasource | Datasource | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Policy & Process | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Sensitive Data Management | ✔️ | ❌ | ❌ | ❌ | ❌ | |
| Alert | Alert | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Module | Category | Administrator | Prod Admin | Prod Admin(RO) | Dev Admin | Common User |
|---|---|---|---|---|---|---|
| SQL Dev | Read-only | ✔️ | ✔️ | ✔️ | ❌ | ❌ |
| DML | ✔️ | ✔️ | ❌ | ❌ | ❌ | |
| DDL | ✔️ | ✔️ | ❌ | ❌ | ❌ | |
| SQL Task - Submit | ✔️ | ✔️ | ❌ | ❌ | ❌ | |
| SQL Task - Execute | ✔️ | ✔️ | ❌ | ❌ | ❌ | |
| Data Export - Submit | ✔️ | ✔️ | ❌ | ❌ | ❌ | |
| Data Export - Execute | ✔️ | ✔️ | ❌ | ❌ | ❌ | |
| Data Import - Submit | ✔️ | ✔️ | ❌ | ❌ | ❌ | |
| Data Import - Execute | ✔️ | ✔️ | ❌ | ❌ | ❌ | |
| Backup | Backup | ✔️ | ✔️ | ❌ | ❌ | ❌ |
| Restore | ✔️ | ✔️ | ❌ | ❌ | ❌ | |
| Replication | Data Replication | ✔️ | ✔️ | ❌ | ❌ | ❌ |
| Comparison | Data | ✔️ | ✔️ | ❌ | ❌ | ❌ |
| Schema | ✔️ | ✔️ | ❌ | ❌ | ❌ | |
| Datasource | Datasource | ✔️ | ✔️ | ❌ | ❌ | ❌ |
| Module | Category | Administrator | Prod Admin | Prod Admin(RO) | Dev Admin | Common User |
|---|---|---|---|---|---|---|
| SQL Dev | Read-only | ✔️ | ❌ | ❌ | ✔️ | ❌ |
| DML | ✔️ | ❌ | ❌ | ✔️ | ❌ | |
| DDL | ✔️ | ❌ | ❌ | ✔️ | ❌ | |
| SQL Task - Submit | ✔️ | ❌ | ❌ | ✔️ | ❌ | |
| SQL Task - Execute | ✔️ | ❌ | ❌ | ✔️ | ❌ | |
| Data Export - Submit | ✔️ | ❌ | ❌ | ✔️ | ❌ | |
| Data Export - Execute | ✔️ | ❌ | ❌ | ✔️ | ❌ | |
| Data Import - Submit | ✔️ | ❌ | ❌ | ✔️ | ❌ | |
| Data Import - Execute | ✔️ | ❌ | ❌ | ✔️ | ❌ | |
| Backup | Backup | ✔️ | ❌ | ❌ | ✔️ | ❌ |
| Restore | ✔️ | ❌ | ❌ | ✔️ | ❌ | |
| Replication | Data Replication | ✔️ | ❌ | ❌ | ✔️ | ❌ |
| Comparison | Data | ✔️ | ❌ | ❌ | ✔️ | ❌ |
| Schema | ✔️ | ❌ | ❌ | ✔️ | ❌ | |
| Datasource | Datasource | ✔️ | ❌ | ❌ | ✔️ | ❌ |
| Module | Category | Administrator | Prod Admin | Prod Admin(RO) | Dev Admin | Common User |
|---|---|---|---|---|---|---|
| Alert Permissions | Alert Permissions | ✔️ | ✔️ | ❌ | ✔️ | ❌ |
| Sensitive Data Management | Sensitive Data Management | ✔️ | ❌ | ❌ | ❌ | ❌ |