Important

New database features are no longer connected to engine versions; features are now enabled independently during scheduled update windows, and “major” and “minor” releases no longer exist in Helios. Please visit the release notes to view the latest features available in your database clusters.

Predefined Roles for Cluster Groups in an Organization

Cluster Group Roles

Role	Description	Permissions
`Owner`	Owners are granted full access to the cluster group, including the ability to create and terminate clusters or terminate the cluster group. Users granted the Owner role in the organization inherit the Owner role on all cluster groups in the organization.	ACTIVATE SMARTDR CONFIGURE ALERTS CONFIGURE SMARTDR CONTROL ACCESS CREATE DATABASE CREATE WORKSPACE DROP DATABASE LOAD DATA MONITOR OPERATE TERMINATE USE VIEW VIEW SMARTDR Manage Delegated Entities
`Operator`	Operators are granted access to administrative actions for the cluster group including scale, suspend, resume, backup, recover, and configure network policies, passwords, update windows or certificates. Operators have some ability to access and modify data in cluster groups including creating or dropping databases. Users granted the Operator role in the organization inherit the Operator role on all cluster groups in the organization.	ACTIVATE SMARTDR CONFIGURE ALERTS CONFIGURE SMARTDR MONITOR OPERATE USE VIEW VIEW SMARTDR Manage Delegated Entities
`Observer`	Observers are granted the ability to view the monitoring details of the cluster group and inspect its configuration without granting access to the data. Users granted the Observer role in the organization inherit the Observer role on all cluster groups in the organization.	MONITOR VIEW VIEW SMARTDR
`Writer`	Writers are granted full access to data in the cluster group, including the ability to create and drop databases. Users granted the Writer role in the organization inherit the Writer role on all cluster groups in the organization.	CONFIGURE SMARTDR CREATE DATABASE DROP DATABASE LOAD DATA MONITOR USE VIEW VIEW SMARTDR
`Reader`	Readers are granted read access to all databases in the cluster group. Users granted the Reader role in the organization inherit the Reader role on all cluster groups in the organization.	MONITOR USE VIEW VIEW SMARTDR
`Limited Access`	The Limited Access role grants no specific access beyond the ability to see the cluster group and its member clusters. Users with the Limited Access role are synchronized to the cluster group where they may be granted access to specific databases or tables using database RBAC commands	VIEW
`All Roles`	Any user granted any role on a cluster group will be synchronized to that cluster group and added to a group granted a role with appropriate permissions. See the User Synchronization section below for more details.

Synchronization Between Cloud Roles and Database Engine Roles

When a user is added to a cluster group, that user is automatically assigned to the corresponding engine user group and role as per the following table. Refer to Cloud User and Role Synchronization with the Database Engine for a detailed explanation..

Cloud Role	Engine User Group	Engine Role	Engine Permissions
`Owner`	`CloudOwners`	`CloudOwner`	ALTER ALTER EVENT TRACE ALTER EXTENSION ALTER PIPELINE ALTER ROUTINE ALTER USER ALTER VIEW BACKUP CLUSTER CONNECTION_ADMIN CREATE CREATE DATABASE CREATE EXTENSION CREATE EXTERNAL CATALOG CREATE LINK CREATE PIPELINE CREATE POOL CREATE ROUTINE CREATE TEMPORARY TABLES CREATE USER CREATE VIEW DELETE DROP DROP DATABASE DROP EXTENSION DROP EXTERNAL CATALOG DROP LINK DROP PIPELINE DROP POOL DROP VIEW EXECUTE GRANT OPTION INDEX INSERT LOCK TABLES OUTBOUND PROCESS RELOAD SELECT SHOW EXTENSION SHOW EXTERNAL CATALOG SHOW LINK SHOW METADATA SHOW PIPELINE SHOW ROUTINE SHOW VIEW START PIPELINE SYSTEM_VARIABLES_ADMIN UPDATE
`Operator`	`CloudOperators`	`CloudOperator`	ALTER EXTENSION ALTER ROUTINE BACKUP CONNECTION_ADMIN CREATE CREATE DATABASE CREATE EXTENSION CREATE EXTERNAL CATALOG CREATE POOL CREATE ROUTINE CREATE TEMPORARY TABLES DROP DROP DATABASE DROP EXTENSION DROP EXTERNAL CATALOG DROP POOL INDEX OUTBOUND PROCESS RELOAD SELECT SHOW EXTENSION SHOW EXTERNAL CATALOG SHOW METADATA SHOW PIPELINE SHOW ROUTINE START PIPELINE SYSTEM_VARIABLES_ADMIN
`Writer`	`CloudWriters`	`CloudWriter`	ALTER ALTER PIPELINE ALTER ROUTINE ALTER VIEW CREATE CREATE DATABASE CREATE EXTENSION CREATE EXTERNAL CATALOG CREATE LINK CREATE PIPELINE CREATE ROUTINE CREATE TEMPORARY TABLES CREATE VIEW DELETE DROP DROP DATABASE DROP EXTENSION DROP EXTERNAL CATALOG DROP LINK DROP PIPELINE DROP VIEW INDEX INSERT LOCK TABLES EXECUTE SELECT SHOW EXTENSION SHOW EXTERNAL CATALOG SHOW LINK SHOW METADATA SHOW PIPELINE SHOW ROUTINE SHOW VIEW START PIPELINE UPDATE
`Reader`	`CloudReaders`	`CloudReader`	SELECT SHOW LINK SHOW EXTENSION SHOW EXTERNAL CATALOG SHOW METADATA SHOW ROUTINE SHOW VIEW
`Database User Administrator`	`DatabaseUserAdministrators`	`DatabaseUserAdministrator`	ALTER USER CREATE USER
`Observer`	`CloudObservers`	`None`	None
`Limited Access`	`CloudLimitedAccessUsers`	`None`	None
`All Roles`	`CloudUsers`	`None`	None