EMQX Cloud

English

简体中文
日本語

English

简体中文
日本語

Appearance

Contact Us
Contact Us

User Management ​

EMQX Tables supports custom users for deployment-level access control. You can create users, assign database and table access, and use these users when connecting EMQX Broker or external clients to EMQX Tables.

User Management is available only for newer EMQX Tables deployments. Newer deployments do not return a default username or password in the deployment details, so you must create a user before connecting EMQX Broker or external clients. Older deployments do not support custom users or privilege configuration and may still use the default credentials shown in the deployment details.

Note

Each EMQX Tables deployment supports up to 10 users.

View Users ​

To view users:

  1. Log in to the EMQX Cloud Console and open your EMQX Tables deployment.
  2. Click User Management from the left menu.
  3. View existing users, their privileges, access control settings, and last update time.

emqx_tables_user_management

Add a User ​

  1. On the User Management page, click + Add User.
  2. Enter the following information:
    • Username: Enter a custom username.
    • Password: Enter the password for the user.
    • Privileges: Select one of the preset privilege groups, or select Custom to choose privileges manually from the privilege select dropdown.
    • Access Control: Grant database-level or table-pattern-level access.
  3. Click Confirm.

emqx_tables_add_user

When the deployment already has 10 users, + Add User is disabled. Hover over the button to view the limit reminder.

Edit a User ​

  1. On the User Management page, click the edit icon in the Actions column.
  2. Update the password, privileges, or access control settings.
  3. Click Confirm.

The username cannot be changed when editing a user. To keep the current password, leave the Password field empty.

Delete a User ​

On the User Management page, click the delete icon in the Actions column and confirm the operation.

Before deleting a user, make sure no active connector or external client depends on that username. Connections using a deleted user will fail authentication.

Privileges ​

Privileges define which operations the user can perform in EMQX Tables.

PrivilegeDescription
SqlSelectAllows the user to query data with SQL.
SqlInsertAllows the user to write data with SQL or Line Protocol.
SqlDeleteAllows the user to delete data with SQL.
DatabaseCreateAllows the user to create databases.
DatabaseAlterAllows the user to alter databases.
DatabaseDropAllows the user to delete databases.
TableCreateAllows the user to create tables.
TableDropAllows the user to delete tables.
TableAlterAllows the user to change table definitions.
TriggerCreateAllows the user to create triggers.
TriggerDropAllows the user to drop triggers.
TriggerAlterAllows the user to alter triggers.

EMQX Cloud does not support the Admin, FlowCreate, or FlowDrop privileges for EMQX Tables users.

The preset privilege groups are:

PresetIncluded privileges
Read OnlySqlSelect
Write OnlySqlInsert, SqlDelete, TableCreate, TableAlter, TableDrop, TriggerCreate, TriggerDrop, TriggerAlter, DatabaseCreate, DatabaseAlter, DatabaseDrop
Read & WriteRead Only + Write Only privileges
CustomSelect privileges manually.

When you select Custom, a privilege select dropdown appears. Select one or more privileges from the available groups, such as SQL privileges (SqlSelect, SqlInsert, SqlDelete), Table privileges (TableCreate, TableAlter, TableDrop), Database privileges (DatabaseCreate, DatabaseAlter, DatabaseDrop), and Trigger privileges (TriggerCreate, TriggerAlter, TriggerDrop).

emqx_tables_custom_privileges

TIP

To use an EMQX Tables user in an EMQX Broker data integration connector, the user must have at least the SqlInsert privilege.

Access Control ​

Access control defines which databases and tables the user can access. EMQX Tables supports two access control modes:

  • Select databases: Grants access to all tables in the selected databases.
  • Use pattern for each database: Grants access only to tables whose names match the regular expression pattern configured for each database. For example, ^tmp_.* matches tables whose names start with tmp_.

emqx_tables_use_pattern_for_each_database

ACL entries do not support mixed modes for the same user. Configure either database-level access or pattern-based access consistently.

When you use a user in an EMQX Broker data integration connector, the selected username must have access to the target Database Name. When you enter or change Database Name, EMQX Cloud validates it against the selected username and shows an error if the user does not have access to that database.

Use Users in Data Integration ​

When creating an EMQX Tables connector from an EMQX Broker deployment, select a username from the Username dropdown. The dropdown lists all users under the selected EMQX Tables deployment. The Console does not filter usernames by privilege or database access.

After selecting a user, enter the user's password and target database name. The connector validates whether:

  • The selected user has at least the SqlInsert privilege.
  • The selected user has access to the target database.

For detailed connector configuration steps, see Ingest MQTT Data into EMQX Tables.