> ## Documentation Index
> Fetch the complete documentation index at: https://clickhouse.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# 配置 SQL 控制台角色分配

> 介绍如何管理 SQL 控制台角色分配的指南

export const Image = ({img, alt, size = "lg"}) => {
  const normalizedSize = ["sm", "md", "lg"].includes(size) ? size : "lg";
  return <div className={`ch-image-${normalizedSize}`}>
      <Frame>
        <img src={img} alt={alt} />
      </Frame>
    </div>;
};

<Warning>
  此设置已弃用。对于已迁移到自定义角色的组织，此设置已由角色创建页面上的新设置取代。有关更多信息，请参阅 [管理 Cloud 用户](/docs/zh/products/cloud/guides/security/cloud-access-management/manage-cloud-users)。
</Warning>

> 本指南介绍如何配置 SQL 控制台角色分配，它决定了整个控制台的访问权限，以及用户在 Cloud 控制台中可使用的功能。

<Steps>
  <Step title="访问服务设置" id="access-service-settings">
    在服务页面上，点击您要调整 SQL 控制台访问设置的服务右上角菜单。

    <Image img="https://mintcdn.com/private-7c7dfe99/flZ-Iruiim7eBp5N/images/cloud/guides/sql_console/service_level_access/1_service_settings.webp?fit=max&auto=format&n=flZ-Iruiim7eBp5N&q=85&s=49fce29989aa2d2fde2d8486900547ea" size="lg" width="4032" height="876" data-path="images/cloud/guides/sql_console/service_level_access/1_service_settings.webp" />

    在弹出菜单中选择 `settings`。

    <Image img="https://mintcdn.com/private-7c7dfe99/flZ-Iruiim7eBp5N/images/cloud/guides/sql_console/service_level_access/2_service_settings.webp?fit=max&auto=format&n=flZ-Iruiim7eBp5N&q=85&s=61bf0784e09b947a94655b33c64a59a7" size="lg" width="2600" height="1060" data-path="images/cloud/guides/sql_console/service_level_access/2_service_settings.webp" />
  </Step>

  <Step title="调整 SQL 控制台访问权限" id="adjust-sql-console-access">
    在“安全”部分下，找到“SQL 控制台访问”区域：

    <Image img="https://mintcdn.com/private-7c7dfe99/flZ-Iruiim7eBp5N/images/cloud/guides/sql_console/service_level_access/3_service_settings.webp?fit=max&auto=format&n=flZ-Iruiim7eBp5N&q=85&s=b5a4e426a49c22195ac13a0a6c347505" size="md" width="2304" height="620" data-path="images/cloud/guides/sql_console/service_level_access/3_service_settings.webp" />
  </Step>

  <Step title="更新 Service Admin 的设置" id="update-settings-for-service-admin">
    选择 Service Admin 的下拉菜单，以更改 Service Admin 角色的访问控制设置：

    <Image img="https://mintcdn.com/private-7c7dfe99/flZ-Iruiim7eBp5N/images/cloud/guides/sql_console/service_level_access/4_service_settings.webp?fit=max&auto=format&n=flZ-Iruiim7eBp5N&q=85&s=38792ab3f34327cbbc5835039da1f80f" size="md" width="2304" height="620" data-path="images/cloud/guides/sql_console/service_level_access/4_service_settings.webp" />

    您可以从以下角色中选择：

    | 角色            |
    | ------------- |
    | `No access`   |
    | `Read only`   |
    | `Full access` |
  </Step>

  <Step title="更新 Service Read Only 的设置" id="update-settings-for-service-read-only">
    选择 Service Read Only 的下拉菜单，以更改 Service Read Only 角色的访问控制设置：

    <Image img="https://mintcdn.com/private-7c7dfe99/flZ-Iruiim7eBp5N/images/cloud/guides/sql_console/service_level_access/5_service_settings.webp?fit=max&auto=format&n=flZ-Iruiim7eBp5N&q=85&s=daeb0709afc94c0a0e1b428188a32406" size="md" width="2304" height="620" data-path="images/cloud/guides/sql_console/service_level_access/5_service_settings.webp" />

    您可以从以下角色中选择：

    | 角色            |
    | ------------- |
    | `No access`   |
    | `Read only`   |
    | `Full access` |
  </Step>

  <Step title="查看有权访问的用户" id="review-users-with-access">
    点击用户数量即可查看该服务的用户概览：

    <Image img="https://mintcdn.com/private-7c7dfe99/flZ-Iruiim7eBp5N/images/cloud/guides/sql_console/service_level_access/6_service_settings.webp?fit=max&auto=format&n=flZ-Iruiim7eBp5N&q=85&s=722c5c2d898484db297de13910c24b9f" size="md" width="2304" height="620" data-path="images/cloud/guides/sql_console/service_level_access/6_service_settings.webp" />

    页面右侧会打开一个标签页，显示用户总数及其角色：

    <Image img="https://mintcdn.com/private-7c7dfe99/flZ-Iruiim7eBp5N/images/cloud/guides/sql_console/service_level_access/7_service_settings.webp?fit=max&auto=format&n=flZ-Iruiim7eBp5N&q=85&s=3df1c39e59e9a573460803c6fcbf22b7" size="md" width="4040" height="2338" data-path="images/cloud/guides/sql_console/service_level_access/7_service_settings.webp" />
  </Step>
</Steps>
