Manage users

Users belong to an organization. System administrators can invite users, create SSO users, remove users, update account settings, configure query limits, and manage user permissions.

Account types

NineData provides two types of user accounts: General and SSO.

• General: Users who register with a phone number or email address can sign in with regular credentials or SSO. This account type supports all modes (Personal ModeAfter registering for a NineData account, users are usually in Personal Mode by default. This mode provides access to all four NineData modules. Personal Mode is suitable for individual developers, such as backing up, restoring, synchronizing, and comparing their own databases, as well as daily development work with SQL Console., Organization ModeOrganization Mode supports assigning different roles and resource management permissions to each user under an organization. It is suitable for multi-user collaborative development within the same organization, while ensuring data security and improving overall productivity.,SSO Organization ModeIn addition to the login method, it is consistent with Organization Mode.). Users are responsible for their own account security.
• SSO: Users created by an SSO organization Administrator can sign in only through SSO. After sign-in, they enter the corresponding SSO organization directly and cannot enter personal mode or non-SSO organization mode. SSO user account information is managed by the identity provider (IdP).

Account type comparison

Operation	General	SSO
Regular login method	✔️	❌
SSO login method	❌	✔️
Personal Mode	✔️	❌
Organization Mode (non-SSO)	✔️	❌
SSO Organization Mode	❌	✔️
Switch organization	✔️	❌
Modify username and password	✔️	❌
One-click login	❌	✔️

Procedure

Invite users

Before you begin

• Create or join an organization. For details, see Manage organizations.
• Make sure the NineData console is in regular organization mode, not SSO organization mode. To switch from personal mode to organization mode, see Switch to organization.
• Your role is Administrator. For details, see Roles.

Procedure

1. Sign in to the NineData Console.

2. Go to Account > Users.

   tip

   If Account is not displayed, make sure your console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.

3. On the Users page, click Invite.

4. In the Invite dialog, enter the email address of the member to invite, select the role assigned after the member joins the organization, and click OK. To invite multiple users, click Add and add more invitation records.

   tip

   To create a custom role, see Manage roles.

5. Click OK to send the invitation. NineData sends an invitation email to the user. The user can join the organization after accepting the invitation and completing registration or sign-in.

Add SSO users

Before you begin

• SSO login is enabled for the current organization. For details, see Enable SSO login.
• Your role is Administrator. For details, see Roles.
• The user account already exists in the identity provider (IdP) application. Otherwise, the user cannot sign in. The account in the IdP application usually corresponds to the SSO username that you create in NineData.

Procedure

See Create an SSO user.

View users

View all users in the current organization, and disable, enable, or remove users when membership changes.

Before you begin

• The NineData console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.
• Your role is Administrator. For details, see Roles.

Procedure

1. Sign in to the NineData Console.

2. Open Account > User.

   tip

   If Account is not displayed, make sure your console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.

3. On the User page, disable, enable, or remove target users.

   Disable/Enable

   Find the target user and turn the switch in the Enabled column on or off. After a user is disabled, the user cannot enter the organization. Re-enable the user to restore organization access.

   Remove User

   Find the user to remove and click Remove in the Actions column. In the confirmation window, click Remove.

   tip

   Filter by role category or search by username to find a user.

Configure user access limits

Configure Query per day Max Times and Query per day Max Rows for all users in the organization. The configured query limits apply to each user.

1. Sign in to the NineData Console.

2. Open Account > User.

   tip

   If Account is not displayed, make sure your console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.

3. On the User page, click the icon to the right of User.

4. In the User Access Managerment dialog, configure Query per day Max Times and Query per day Max Rows. The configured counts and row limits apply to each user in the organization.

   tip

   The configured counts and row limits apply to a single day. Unused quota is reset at the end of the day and does not carry over.

Edit users

Edit individual users in the organization. Editable fields include Login Name, Username, Query per day Max Times, and Query per day Max Rows.

Among these, Login Name and Username have different functions based on Account Type.

• General: Updating Login Name and Username changes only the display name in the NineData organization.
• SSO:
  • Login Name: Changes the login name of an SSO user. The new login name must match the full username of the target user in the IdP. After the change, the user must sign in to the IdP with the new IdP login information before signing in to the NineData Console.
  • Username: Changes the display name of the target user in the NineData organization.

Configure Query per day Max Times and Query per day Max Rows individually for users:

• Query per day Max Times: Sets the number of queries that the current user can run per day. The default is 2000 queries. The date on the right is the expiration date. Until midnight on that date, the user can run 2000 queries per day. Leave the date blank for no expiration.
• Query per day Max Rows: Sets the total number of rows that the current user can query per day. The default is 20000 rows. The date on the right is the expiration date. Until midnight on that date, the user can query 20000 rows per day. Leave the date blank for no expiration.

tip

• User-level Query per day Max Times and Query per day Max Rows settings take precedence over global user access limits.
• After user-level Query per day Max Times and Query per day Max Rows settings expire, the user must perform any SQL operation to refresh the quota data and switch back to the global user access limits.
• The configured counts and row limits apply to a single day. Unused quota is reset at the end of the day and does not carry over.

Before you begin

• The NineData console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.
• Your role is Administrator. For details, see Roles.

Procedure

1. Sign in to the NineData Console.

2. Open Account > User.

   tip

   If Account is not displayed, make sure your console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.

3. In the user list on the User page, find the user to edit, and click Edit in the Actions column for that user.

   tip

   Filter by role category or search by username to find a user.

4. Configure the user settings in the dialog, and then click OK.

Configure user permissions

Before you begin

• The NineData console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.
• Your role is Administrator. For details, see Roles.

Procedure

1. Sign in to the NineData Console.

2. Open Account > User.

   tip

   If Account is not displayed, make sure your console is in organization mode. To switch from personal mode to organization mode, see Switch to organization.

3. In the user list on the User page, click Authority in the Actions column for the target user.

   Authority has three sections: Application, Role Grant, and User Grant.

   • Application: Displays all permissions requested by the user, grouped by Datasource, Database, and Sensitive Column. To revoke an applied permission, click Revoke for the target permission.

   • Role Grant: Displays the roles assigned to the user and the permissions provided by each role. Click Edit Grant to assign a new role or remove an existing role.

   • User Grant: Displays individual permissions granted directly to the user. Individual permissions and permissions from Application or Role Grant are complementary and have no priority order. Grant or revoke individual permissions by turning the slider for the target permission on or off.

     tip

     For details about permission types, see Permissions.

4. Click Save.

Result

The user changes are saved in the current organization. Updated roles, permissions, access limits, or account status take effect based on the selected user settings.