Engine administrator privileges are required for operations such as managing engine users, privileges, and SQL objects owned by other identities.Other cloud roles do not automatically grant permissions inside the engine, even if they permit SQL Workspace management.Assign and remove the Organization Admin role through StreamNative Cloud role bindings. Do not change a cloud user’s administrator privileges directly in the engine.
Cloud users can submit SQL through SQL Studio. If a cloud user connects through the native PostgreSQL endpoint, the engine evaluates the supplied SQL username and password with the same engine permissions.For applications and automation, create a separate engine identity instead of sharing a human administrator’s credentials. See Machine-to-Machine Access.
Was this page helpful?
⌘I
{"docsConfig":{"theme":"luma","$schema":"https://mintlify.com/docs.json","name":"StreamNative Documentation","colors":{"primary":"#177bed","light":"#B9D7FA","dark":"#0e4a8e"},"logo":{"light":"https://mintcdn.com/streamnative/SC0zqekRwf8nvf5H/logo/light.svg?fit=max\u0026auto=format\u0026n=SC0zqekRwf8nvf5H\u0026q=85\u0026s=a0e61dd3a50e9c0288bf4e3ea0a398be","dark":"https://mintcdn.com/streamnative/SC0zqekRwf8nvf5H/logo/dark.svg?fit=max\u0026auto=format\u0026n=SC0zqekRwf8nvf5H\u0026q=85\u0026s=7f1091351e4896879ce3b26d2363e4f4"},"favicon":"https://mintcdn.com/streamnative/_E3AfN6vzMatrPox/favicon.svg?fit=max\u0026auto=format\u0026n=_E3AfN6vzMatrPox\u0026q=85\u0026s=dac7639f549cf27f910111f7ac2d02dd","background":{"color":{"dark":"#0A0B0D"}},"navbar":{"links":[{"href":"/support/get-support","label":"Support"}],"primary":{"type":"button","label":"Console","href":"https://console.streamnative.cloud"}},"footer":{"socials":{"x":"https://x.com/streamnative.io","github":"https://github.com/streamnative","linkedin":"https://linkedin.com/company/streamnative"}},"seo":{"metatags":{"canonical":"https://docs.streamnative.io","og:site_name":"StreamNative Documentation","og:type":"website","og:image":"https://docs.streamnative.io/logo/light.svg","twitter:card":"summary_large_image","twitter:site":"@streamnativeio"},"indexing":"all"},"fonts":{"heading":{"family":"Funnel Display","weight":500},"body":{"family":"Funnel Sans","weight":400}},"contextual":{"options":["copy","view","chatgpt","claude"],"display":"header"},"styling":{"latex":true},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"streamnative","hasAudioNarration":false,"actualSubdomain":"streamnative","customDomains":["docs.streamnative.io"],"gitSource":{"type":"github","owner":"streamnative","repo":"sn-docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"feedback":{"thumbs":true},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"REMOVE_BRANDING":{"status":"DISABLED"},"CONTEXTUAL_FEEDBACK":{"status":"DISABLED"},"CODE_SNIPPET_FEEDBACK":{"status":"DISABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6af36d08ebad3a5810f9b645","clientVersion":"0.0.4124","searchFilterCounts":[{"language":"default","tag":"StreamNative Cloud","count":818},{"language":"default","tag":"Pulsar","count":669},{"language":"default","tag":"StreamNative Private Cloud","count":300},{"language":"default","tag":"Pulsar Changelogs","count":277},{"language":"default","tag":"Kafka","count":163},{"language":"default","tag":"References","count":150},{"language":"default","tag":"Resources","count":146},{"language":"default","tag":"Streamnative Pulsar Changelogs","count":117},{"language":"default","tag":"Kafka Clients","count":97},{"language":"default","tag":"Guides","count":83}]},"assistantConfig":{"deflection":{"enabled":true,"email":"support@streamnative.io","showHelpButton":true}},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-rbac-roles","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":true},"customCss":[{"filePath":"style.css","content":"/* latin-ext */\n@font-face {\n font-family: 'DM Mono';\n font-style: normal;\n font-weight: 400;\n font-display: swap;\n src: url(/_mintlify/assets/fonts/google/s/dmmono/v16/aFTU7PB1QTsUX8KYthSQBLyM.woff2) format('woff2');\n unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;\n}\n/* latin */\n@font-face {\n font-family: 'DM Mono';\n font-style: normal;\n font-weight: 400;\n font-display: swap;\n src: url(/_mintlify/assets/fonts/google/s/dmmono/v16/aFTU7PB1QTsUX8KYthqQBA.woff2) format('woff2');\n unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;\n}\n/* latin-ext */\n@font-face {\n font-family: 'Funnel Sans';\n font-style: normal;\n font-weight: 500;\n font-display: swap;\n src: url(/_mintlify/assets/fonts/google/s/funnelsans/v3/OpNfno8Dg9bX6Bsp3Wq69RB-VukSVv3aISFAp3m0d2VMrDw.woff2) format('woff2');\n unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;\n}\n/* latin */\n@font-face {\n font-family: 'Funnel Sans';\n font-style: normal;\n font-weight: 500;\n font-display: swap;\n src: url(/_mintlify/assets/fonts/google/s/funnelsans/v3/OpNfno8Dg9bX6Bsp3Wq69RB-VukSVv3aISFAp3m0eWVM.woff2) format('woff2');\n unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;\n}\ncode,pre,kbd,samp{font-family:'DM Mono', ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, 'Liberation Mono', 'Courier New', monospace;font-size:0.875rem;line-height:1.6;letter-spacing:0}h1{font-family:'Funnel Display', sans-serif;font-weight:500;font-size:2rem;line-height:1.2;letter-spacing:-0.02em}h2{font-family:'Funnel Sans', sans-serif;font-weight:500;font-size:1.5rem;line-height:1.2;letter-spacing:-0.01em}h3{font-family:'Funnel Sans', sans-serif;font-weight:500;font-size:1.25rem;line-height:1.3;letter-spacing:0}h4{font-family:'Funnel Sans', sans-serif;font-weight:500;font-size:1.125rem;line-height:1.4;letter-spacing:0}body{color:#485565}h2,h3{margin-top:2rem;margin-bottom:1rem}.dark body,.dark main{color:#9AA4B2}.dark h1,.dark h2,.dark h3,.dark h4{color:#FFFFFF}div:has(>.nav-dropdown-products-selector-trigger)>:nth-child(2){order:1}"}],"page":{"pagePath":"sql/access-control/cloud-user-access","slug":"/sql/access-control/cloud-user-access","pageMetadata":{"title":"Cloud User Access","id":"sql-workspace-cloud-user-access","description":"Understand how StreamNative Cloud users become SQL Workspace engine administrators.","category":"security","tags":["cloud","sql","risingwave","access-control"],"sidebarTitle":"Cloud User Access","href":"/sql/access-control/cloud-user-access"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Understand how StreamNative Cloud users become SQL Workspace engine administrators.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,p:`p`,..._provideComponents(),...props.components},{Heading}=_components;if(!Heading)_missingMdxReference(`Heading`,true);return _jsxs(_Fragment,{children:[_jsx(_components.p,{children:`During Private Preview, Organization Admin users can administer a SQL Workspace engine.`}),`\n`,_jsx(Heading,{level:`2`,id:`administrator-access`,children:`Administrator access`}),`\n`,_jsx(_components.p,{children:`Engine administrator privileges are required for operations such as managing engine users, privileges, and SQL objects owned by other identities.`}),`\n`,_jsx(_components.p,{children:`Other cloud roles do not automatically grant permissions inside the engine, even if they permit SQL Workspace management.`}),`\n`,_jsx(_components.p,{children:`Assign and remove the Organization Admin role through StreamNative Cloud role bindings. Do not change a cloud user’s administrator privileges directly in the engine.`}),`\n`,_jsx(Heading,{level:`2`,id:`query-access`,children:`Query access`}),`\n`,_jsx(_components.p,{children:`Cloud users can submit SQL through SQL Studio. If a cloud user connects through the native PostgreSQL endpoint, the engine evaluates the supplied SQL username and password with the same engine permissions.`}),`\n`,_jsxs(_components.p,{children:[`For applications and automation, create a separate engine identity instead of sharing a human administrator’s credentials. See `,_jsx(_components.a,{href:`/sql/access-control/machine-to-machine-access`,children:`Machine-to-Machine Access`}),`.`]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Cloud User Access","id":"sql-workspace-cloud-user-access","description":"Understand how StreamNative Cloud users become SQL Workspace engine administrators.","category":"security","tags":["cloud","sql","risingwave","access-control"],"sidebarTitle":"Cloud User Access","href":"/sql/access-control/cloud-user-access"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"Administrator access","slug":"administrator-access","depth":2,"children":[]},{"title":"Query access","slug":"query-access","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":["/_mintlify/custom/streamnative/9e165e8cbf8e8808/scripts/fix-hub-meta.js","/_mintlify/custom/streamnative/c2d281dc3d246a54/scripts/fix-hub-note.js","/_mintlify/custom/streamnative/5855b8c91ee0723b/scripts/fix-hub-tab.js","/_mintlify/custom/streamnative/2ae2ad30d0ad3c68/scripts/import/importDocs.js","/_mintlify/custom/streamnative/a68a187867c1e64a/scripts/hub/fix-hub-meta.js","/_mintlify/custom/streamnative/0f92aab004f53e53/scripts/hub/fix-hub-note.js","/_mintlify/custom/streamnative/ad536b8b4d2d9ba0/scripts/hub/fix-hub-tab.js","/_mintlify/custom/streamnative/d16acfa2fc71d4c8/connect/sync.js","/_mintlify/custom/streamnative/01a1b96abbfd1fe3/scripts/sync-pulsar-release-channels.js","/_mintlify/custom/streamnative/e81c5fd9954b02fe/scripts/validate-docs-nav.js"],"subdomain":"streamnative","siteName":"StreamNative Documentation","title":"Cloud User Access - StreamNative Documentation","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-08-25T00:32:55.545Z","originalFileLocation":"sql/access-control/cloud-user-access.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Understand how StreamNative Cloud users become SQL Workspace engine administrators.\">\u003cmeta data-mint-head name=\"application-name\" content=\"StreamNative Documentation\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/streamnative/jTGt9etb1f_opncu/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/streamnative/jTGt9etb1f_opncu/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/streamnative/jTGt9etb1f_opncu/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/streamnative/jTGt9etb1f_opncu/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/streamnative/jTGt9etb1f_opncu/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/streamnative/jTGt9etb1f_opncu/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/streamnative/jTGt9etb1f_opncu/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/streamnative/jTGt9etb1f_opncu/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/streamnative/jTGt9etb1f_opncu/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Cloud User Access - StreamNative Documentation\">\u003cmeta data-mint-head property=\"og:description\" content=\"Understand how StreamNative Cloud users become SQL Workspace engine administrators.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"StreamNative Documentation\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.streamnative.io/sql/access-control/cloud-user-access\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://docs.streamnative.io/logo/light.svg\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Cloud User Access - StreamNative Documentation\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Understand how StreamNative Cloud users become SQL Workspace engine administrators.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://docs.streamnative.io/logo/light.svg\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/streamnative/jTGt9etb1f_opncu/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"StreamNative Documentation\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#177bed\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.streamnative.io/sql/access-control/cloud-user-access\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/sql/access-control/cloud-user-access.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.streamnative.io/#organization\",\"name\":\"StreamNative Documentation\",\"url\":\"https://docs.streamnative.io\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/streamnative/SC0zqekRwf8nvf5H/logo/light.svg?fit=max\u0026auto=format\u0026n=SC0zqekRwf8nvf5H\u0026q=85\u0026s=a0e61dd3a50e9c0288bf4e3ea0a398be\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.streamnative.io#website\",\"name\":\"StreamNative Documentation\",\"url\":\"https://docs.streamnative.io\",\"publisher\":{\"@id\":\"https://docs.streamnative.io/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.streamnative.io/sql/access-control/cloud-user-access#webpage\",\"url\":\"https://docs.streamnative.io/sql/access-control/cloud-user-access\",\"name\":\"Cloud User Access\",\"description\":\"Understand how StreamNative Cloud users become SQL Workspace engine administrators.\",\"dateModified\":\"2026-08-25T00:32:55.545Z\",\"isPartOf\":{\"@id\":\"https://docs.streamnative.io#website\"},\"breadcrumb\":{\"@id\":\"https://docs.streamnative.io/sql/access-control/cloud-user-access#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.streamnative.io/sql/access-control/cloud-user-access#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Access Control\",\"item\":\"https://docs.streamnative.io/sql/access-control/access-control-overview\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SQL Workspace Engine Access\",\"item\":\"https://docs.streamnative.io/sql/access-control/sql-engine-access\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Cloud User Access\",\"item\":\"https://docs.streamnative.io/sql/access-control/cloud-user-access\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://docs.streamnative.io/sql/access-control/cloud-user-access#article\",\"headline\":\"Cloud User Access\",\"name\":\"Cloud User Access\",\"description\":\"Understand how StreamNative Cloud users become SQL Workspace engine administrators.\",\"url\":\"https://docs.streamnative.io/sql/access-control/cloud-user-access\",\"mainEntityOfPage\":{\"@id\":\"https://docs.streamnative.io/sql/access-control/cloud-user-access#webpage\"},\"image\":\"https://docs.streamnative.io/logo/light.svg\",\"dateModified\":\"2026-08-25T00:32:55.545Z\",\"publisher\":{\"@id\":\"https://docs.streamnative.io/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.streamnative.io#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"StreamNative Documentation\",\"publisher\":{\"@type\":\"Organization\",\"name\":\"StreamNative Documentation\"},\"provider\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","agentPointerHref":"/sql/access-control/cloud-user-access.md","siteName":"StreamNative Documentation","nav":{"global":null,"products":[{"product":"StreamNative Cloud","icon":"cloud","description":"Serverless, Dedicated, and BYOC","tabs":[{"tab":"Welcome","pages":[{"title":"Welcome","href":"/home"}]},{"tab":"Concepts","pages":[{"title":"Concepts","href":"/cloud/overview/cloud-overview"}]},{"tab":"Pulsar","pages":[{"title":"Pulsar","href":"/cloud/get-started/quickstart-console"}]},{"tab":"Kafka","pages":[{"title":"Kafka","href":"/kafka/overview"}]},{"tab":"SQL","groups":[{"group":"Overview","pages":[{"title":"SQL Workspaces Architecture (Private Preview)","sidebarTitle":"Architecture","href":"/sql/overview/architecture"},{"title":"SQL Workspace","sidebarTitle":"SQL Workspace","href":"/sql/overview/sqlworkspace"},{"group":"SQL Catalog","pages":[{"title":"SQL Catalog","sidebarTitle":"SQL Catalog","href":"/sql/overview/sqlcatalog"},{"title":"SQL Workspaces Source Discovery","sidebarTitle":"Source Discovery","href":"/sql/overview/source-discovery"},{"title":"SQL Catalog Schema Support","sidebarTitle":"Schema Support","href":"/sql/overview/schema-support"},{"title":"SQL Workspaces Naming Rules","sidebarTitle":"Naming Rules","href":"/sql/overview/naming-rules"}]}]},{"group":"Get Started","pages":[{"title":"Get Started with SQL Workspaces (Private Preview)","sidebarTitle":"Get Started with SQL Workspaces","href":"/sql/get-started/get-started"},{"group":"Cloud Console","pages":[{"title":"Create a SQL Workspace in the Cloud Console","sidebarTitle":"Create a SQL Workspace","href":"/sql/get-started/console/create-sqlworkspace"},{"title":"Add a SQL Catalog in the Cloud Console","sidebarTitle":"Add a SQL Catalog","href":"/sql/get-started/console/add-sqlcatalog"},{"title":"Query with SQL Studio","sidebarTitle":"Query with SQL Studio","href":"/sql/get-started/console/query-sql-studio"},{"title":"Connect with a PostgreSQL Client","sidebarTitle":"Connect with a PostgreSQL Client","href":"/sql/get-started/console/connect-postgresql-client"}]},{"title":"Cloud CLI","sidebarTitle":"Cloud CLI","href":"/sql/get-started/cli/cloud-cli"}]},{"group":"Operations","pages":[{"title":"Manage SQL Workspaces","sidebarTitle":"Manage SQL Workspaces","href":"/sql/operations/manage-sqlworkspaces"},{"title":"Manage SQL Catalogs","sidebarTitle":"Manage SQL Catalogs","href":"/sql/operations/manage-sqlcatalogs"},{"title":"Data Retention","sidebarTitle":"Data Retention","href":"/sql/operations/data-retention"}]},{"group":"Access Control","pages":[{"title":"SQL Workspaces Access Control","sidebarTitle":"Access Control Overview","href":"/sql/access-control/access-control-overview"},{"title":"Cloud Resource Access","sidebarTitle":"Cloud Resource Access","href":"/sql/access-control/cloud-resource-access"},{"group":"SQL Workspace Engine Access","pages":[{"title":"SQL Workspace Engine Access","description":"Understand the cloud-user and machine-to-machine identity models for a SQL Workspace engine.","sidebarTitle":"Overview","href":"/sql/access-control/sql-engine-access"},{"title":"Cloud User Access","sidebarTitle":"Cloud User Access","href":"/sql/access-control/cloud-user-access"},{"title":"Machine-to-Machine Access","description":"Create a dedicated SQL Workspace engine identity for an application or automated workload.","sidebarTitle":"Machine-to-Machine Access","href":"/sql/access-control/machine-to-machine-access"}]}]}]},{"tab":"Agent Engine","pages":[{"title":"Agent Engine","href":"/agent-engine/agents-overview"}]},{"tab":"Admin","pages":[{"title":"Admin","href":"/cloud/clusters/byoc/byoc-overview"}]},{"tab":"Resources","icon":"book-open","menu":[{"item":"API References","icon":"code","pages":[{"title":"API References","href":"/api-references/cloudapi/cloud-api"}]},{"item":"Connectors (Hub)","icon":"puzzle-piece","pages":[{"title":"Connectors (Hub)","href":"/connect/overview"}]},{"item":"Universal Linking","icon":"link","pages":[{"title":"Universal Linking","href":"/cloud/universal-linking/unilink-overview"}]},{"item":"Cookbooks","icon":"utensils-crossed","pages":[{"title":"Cookbooks","href":"/cookbook"}]},{"item":"Release Notes","icon":"list-check","pages":[{"title":"Release Notes","href":"/release-notes/cloud/release-notes"}]},{"item":"Support","icon":"headset","pages":[{"title":"Support","href":"/support/get-support"}]}],"pages":[{"title":"Resources","href":"/api-references/cloudapi/cloud-api"}]}]},{"product":"StreamNative Private Cloud","icon":"server","description":"Self-managed on Kubernetes","pages":[{"title":"StreamNative Private Cloud","href":"/private-cloud/v2/overview/private-cloud-overview"}]}]},"basePath":"","title":"Cloud User Access - StreamNative Documentation","buildId":"dpl_8hoxaqFTU7hTr6A2fUraxAyjuiZo","deploymentId":"dpl_8hoxaqFTU7hTr6A2fUraxAyjuiZo","dynamics":[],"chunks":[]}