Skip to content

Commit c4ae266

Browse files
fix(sdb): add missing permissions set MTA-6105 (#5069)
1 parent e6aa889 commit c4ae266

File tree

3 files changed

+39
-25
lines changed

3 files changed

+39
-25
lines changed

pages/iam/reference-content/permission-sets.mdx

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -71,6 +71,7 @@ Below is a list of the permission sets available at Scaleway.
7171
| ServerlessJobsReadOnly | List and read access to job definition/run |
7272
| ServerlessSQLDatabaseReadOnly| List and read access to Serverless SQL Database |
7373
| ServerlessSQLDatabaseReadWrite| List, read and write access to Serverless SQL Database. Includes data and table structure edition. Does not include permissions to create databases or edit settings |
74+
| ServerlessSQLDatabaseDataReadWrite| Read, write, edit and delete data in Serverless SQL Database tables. Does not include data and table structure edition, creation of databases or settings edition |
7475
| ServerlessSQLDatabaseFullAccess| Full access to create, read, list, edit and delete Serverless SQL Database |
7576
| RelationalDatabasesReadOnly | List and read access to Managed Database for PostgreSQL and MySQL |
7677
| RelationalDatabasesFullAccess| Full access to create, read, list, edit and delete Managed Database for PostgreSQL and MySQL |

pages/serverless-sql-databases/how-to/manage-permissions.mdx

Lines changed: 34 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ Permissions define the actions a user or an application can perform on a databas
1919

2020
- A Scaleway account logged into the [console](https://console.scaleway.com)
2121
- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization
22+
- Created a [Serverless SQL Database](/serverless-sql-databases/how-to/create-a-database/)
2223

2324
1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays.
2425

@@ -28,17 +29,17 @@ Permissions define the actions a user or an application can perform on a databas
2829

2930
4. Complete the steps on the first page of the creation wizard:
3031

31-
- Enter a **name** for the policy.
32+
- Enter a **name** for the policy.
3233

33-
- Enter a **description** (optional).
34+
- Enter a **description** (optional).
3435

35-
- Select a **principal**, who will be the target of your policy. The [principal](/iam/concepts/#principal) should be the user, application, or group you want to grant access to your database.
36+
- Select a **principal**, who will be the target of your policy. The [principal](/iam/concepts/#principal) should be the user, application, or group you want to grant access to your database.
3637

37-
<Message type="important">
38-
- You can choose to create a policy without a principal for now, and attach the principal later.
39-
- The policy will have no effect until a principal is attached.
40-
- A policy can only be attached to one principal at a time.
41-
</Message>
38+
<Message type="important">
39+
- You can choose to create a policy without a principal for now and attach one later.
40+
- The policy will have no effect until a principal is attached.
41+
- A policy can only be attached to one principal at a time.
42+
</Message>
4243

4344
5. Click **Add rules**. The second screen of the policy creation wizard.
4445

@@ -48,28 +49,37 @@ Permissions define the actions a user or an application can perform on a databas
4849

4950
8. Select **Databases** in the left-hand **Products** list, then, tick the permissions set you want to add to the policy:
5051

51-
- **ServerlessSQLDatabaseFullAccess** allows the user to create and delete databases, edit their configuration, and use the following commands:
52+
- **ServerlessSQLDatabaseFullAccess** allows the user to create and delete databases, edit their configuration, and use the following commands:
5253

53-
- `SELECT`
54-
- `UPDATE`
55-
- `INSERT`
56-
- `DELETE`
57-
- `CREATE/ALTER/DROP TABLE`
58-
- `CREATE/DROP INDEX`
54+
- `SELECT`
55+
- `UPDATE`
56+
- `INSERT`
57+
- `DELETE`
58+
- `CREATE/ALTER/DROP TABLE`
59+
- `CREATE/DROP INDEX`
5960

60-
- **ServerlessSQLDatabaseReadWrite** allows the user to use the following commands:
61+
- **ServerlessSQLDatabaseReadWrite** allows the user to use the following commands:
6162

62-
- `SELECT`
63-
- `UPDATE`
64-
- `INSERT`
65-
- `DELETE`
66-
- `CREATE/ALTER/DROP TABLE`
67-
- `CREATE/DROP INDEX`
63+
- `SELECT`
64+
- `UPDATE`
65+
- `INSERT`
66+
- `DELETE`
67+
- `CREATE/ALTER/DROP TABLE`
68+
- `CREATE/DROP INDEX`
6869

69-
- **ServerlessSQLDatabaseReadOnly** allows the user to use the following commands:
70+
- **ServerlessSQLDatabaseReadOnly** allows the user to use the following commands:
7071

71-
- `SELECT`
72+
- `SELECT`
73+
74+
- **ServerlessSQLDatabaseDataReadWrite** allows the user to use the following commands:
75+
76+
- `SELECT`
77+
- `UPDATE`
78+
- `INSERT`
79+
- `DELETE`
7280

7381
9. Click **Validate**. The **scope** and the **permission sets** of your policy display.
7482

7583
10. Click **Create policy** to finish.
84+
85+
The user or application now has the selected permissions, and can perform the corresponding actions on the Serverless SQL Database.

pages/serverless-sql-databases/troubleshooting/connection-errors.mdx

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,11 +47,14 @@ The [IAM principal](/iam/concepts/#principal) (user or application) does not hav
4747

4848
### Solution
4949

50-
[Create a new IAM policy](/iam/how-to/create-policy/) or [update an existing one](/iam/how-to/manage-policies/#how-to-edit-a-policys-rules) to grant one of the following permissions sets to the user or application:
50+
[Grant one of the following permissions sets](/serverless-sql-databases/how-to/manage-permissions/) to the user or application:
5151
- `ServerlessSQLDatabaseReadOnly`
5252
- `ServerlessSQLDatabaseReadWrite`
53+
- `ServerlessSQLDatabaseDataReadWrite`
5354
- `ServerlessSQLDatabaseFullAccess`
5455

56+
Refer to the [dedicated documentation](/serverless-sql-databases/how-to/manage-permissions/) for more information on the SQL operations allowed by each permissions set.
57+
5558
## ERROR: permission denied to create temporary tables/subscription in database
5659

5760
### Problem

0 commit comments

Comments
 (0)