Creating a Database Account Using Commands

Scenarios

This section describes how to create a database account and change the account password using commands after the DDS DB instances are created.

When creating a database account for a specified DB instance, you are advised to enable the SSL connection to improve data security.

Prerequisites

Account Description

To manage DDS DB instances, users root, monitor, and backup are automatically created when you create a DDS DB instance. Attempting to delete, rename, change the passwords, or change privileges for these accounts will result in errors.

You can change the password of the database administrator rwuser and any accounts you create.

Setting Password Strength for Database Accounts

• The administrator password must meet the following password policy:
  • Contains 8 to 32 characters.
  • Must be a combination of uppercase letters, lowercase letters, digits, and special characters: ~!@#%^*-_=+?
• The database user created on the client must meet the following password policy:
  • Contains 8 to 32 characters.
  • Must be a combination of uppercase letters, lowercase letters, digits, and special characters: ~@#%-_!*+=^?

When you create a DB instance, DDS automatically checks your password strength. You can change the password as user rwuser. For security reasons, you are advised to set up a strong password.

Creating an Account

1. Log in to the DDS.
2. Run the following command to select the admin database:

   use admin

3. Run the following command to create a database account (user1 as an example):

   db.createUser({user: "user1", pwd: "**********", passwordDigestor:"server", roles:[{role: "root", db: "admin"}]})

   • server: indicates that the password is encrypted on the server.
   • roles restrict the rights of the account. If an empty array is specified, the account does not have any permission.

4. Check the result:

   The account is successfully created if the following information is displayed:

   Successfully added user: {
           "user" : "user1",
           "passwordDigestor" : "server",
           "roles" : [
                   {
                           "role" : "root",
                           "db" : "admin"
                   }
           ]
   }

Changing a Password

1. Log in to the DDS.
2. Run the following command to select the admin database:

   use admin

3. Uses user user1 as an example. Run the following command to change its password:

   db.updateUser("user1", {passwordDigestor:"server",pwd:"**********"})

   server: indicates that the password is encrypted on the server.

4. Check the setting result. The password is successfully changed if the following information is displayed:
   • Cluster

     mongos>

   • Replica set

     replica:PRIMARY>

   • Single node

     replica:PRIMARY>