User Management
MariaDB Enterprise Manager uses a Role-Based Access Control (RBAC) system to manage user permissions. This guide explains how to manage users and create custom roles to fit your organization's security needs.
Accessing User Management
Permissions, Roles & Users
In MariaDB Enterprise Manager, permissions, roles, and users are organized in a clear structure:
Permissions define specific actions a user can perform (viewing data, editing settings, accessing the SQL editor).
Roles are collections of one or more permissions grouped together. They can be pre-configured (for example
admin,monitoring-admin,viewer) or custom-defined.Users are assigned one or more roles and inherit the associated permissions.

This structure allows administrators to manage access by assigning roles to users rather than setting individual permissions per user.
The Admin Permission
Access to the User Management page is restricted based on a user's assigned permissions.
✅ Only users with
adminpermissions (assigned via a role) can add, modify, or remove other users and roles.❌ Non-admin users cannot access or change these settings, but they can update their own password via their Profile page.\

Default Roles
Enterprise Manager ships with three pre-configured roles:
admin: Has all permissions. Can do everything, including managing other users.monitoring-admin: Can manage databases and monitoring, but cannot manage users or roles.viewer: Has read-only access to monitoring data and can use the Workspace.
Create custom roles instead of editing pre-configured ones
While it's possible to edit or delete the pre-configured roles (admin, viewer, etc.), the recommended best practice is to create a new custom role to fit your specific permission requirements.
Leaving the pre-configured roles unmodified ensures you always have a known, baseline configuration to reference or fall back on.
Roles (pre-configured or custom) are built from combinations of the following base permissions:
Base Permission in MariaDB Enterprise Manager
admin
Can view and manage all users and roles.
edit
Can manage databases and monitoring settings. Requires the view permission to be selected as well.
view
Can view dashboards and monitoring data.
sql
Can access the Query Editor and ERD tools in the Workspace. Enabling this allows you to set a query row limit for the role.
Managing Roles
Only users with the admin permission can create or modify roles.
Creating a Custom Role
Modifying or Deleting a Role
Managing Users
Adding a User
Modifying or Deleting a User
Choose action
Select one of the following options:

Update: Opens the "Edit User" dialog where you can change the user's assigned role or update their password.
Delete: Permanently removes the user from MariaDB Enterprise Manager.
You cannot delete the user account that you are currently logged in with. To delete an administrator account, you must first log in with a different administrator account.
The Default Admin User
Upon installation of MariaDB Enterprise Manager, a default admin user is created with an automatically generated password.
This page is: Copyright © 2025 MariaDB. All rights reserved.
Last updated
Was this helpful?






