Add database users

Create database users to provide clients access to the cluster's YugabyteDB database. A database user's access is determined by the roles assigned to the user. YugabyteDB uses role-based access control (RBAC) to manage authorization.

Once you have added a user to the database, send them the credentials.

You will also have to authorize their network so that they can access the cluster. Refer to Assign IP allow lists.

Create a database user

When creating a YugabyteDB cluster in Yugabyte Cloud, you set up the credentials for your admin user. To allow other team members to access the database, you can add additional database users.

To add a database user:

1. Connect to the cluster via Cloud Shell using ysqlsh or ycqlsh.

2. Add a user using the CREATE ROLE statement.

   yugabyte=# CREATE ROLE <username> WITH LOGIN PASSWORD '<password>';
   

   admin@ycqlsh> CREATE ROLE <username> WITH PASSWORD = '<password>' AND LOGIN = true;
   

To add or change a password for a user, use the ALTER ROLE statement.

Learn more

• Manage Users and Roles in YugabyteDB

• Database authorization in Yugabyte Cloud clusters

Next steps

• Connect an application