Skip to main content

CREATE USER

Introduced or updated: v1.2.30

Create a new user account in Databend, specifying the user's name, authentication type, password, and network policy.

See also:

Syntax​

CREATE USER <name> IDENTIFIED [WITH auth_type ] BY '<password>' [WITH SET NETWORK POLICY='<network_policy>']

auth_type can be double_sha1_password (default), sha256_password or no_password.

tip

In order to make MySQL client/drivers existing tools easy to connect to Databend, we support two authentication plugins which is same as MySQL server did:

  • double_sha1_password
    • mysql_native_password is one of MySQL authentication plugin(long time ago), this plugin uses double_sha1_password to store the password(SHA1(SHA1(password)).
  • sha256_password
    • caching_sha2_password is a new default authentication plugin starting with MySQL-8.0.4, it uses sha256 to transform the password.

For more information about MySQL authentication plugins, see A Tale of Two Password Authentication Plugins.

Examples​

Creating User with Default auth_type​

CREATE USER user1 IDENTIFIED BY 'abc123';

SHOW USERS;
+-----------+----------+----------------------+---------------+
| name      | hostname | auth_type            | is_configured |
+-----------+----------+----------------------+---------------+
| user1     | %        | double_sha1_password | NO            |
+-----------+----------+----------------------+---------------+

Creating User with sha256_password auth_type​

CREATE USER user1 IDENTIFIED WITH sha256_password BY 'abc123';

SHOW USERS;
+-----------+----------+----------------------+---------------+
| name      | hostname | auth_type            | is_configured |
+-----------+----------+----------------------+---------------+
| user1     | %        | sha256_password      | NO            |
+-----------+----------+----------------------+---------------+

Creating User with Network Policy​

CREATE USER user1 IDENTIFIED BY 'abc123' WITH SET NETWORK POLICY='test_policy';

SHOW USERS;
+-----------+----------+----------------------+---------------+
| name      | hostname | auth_type            | is_configured |
+-----------+----------+----------------------+---------------+
| user1     | %        | double_sha1_password | NO            |
+-----------+----------+----------------------+---------------+