Vultr DocsLatest Content

vultr_database_user

Updated on 15 September, 2025

Manages a database user within a Vultr Managed Database instance with configurable access privileges.

Provides a Vultr database user resource. This can be used to create, read, modify, and delete users for a managed database on your Vultr account.

Example Usage

Create a new database user:

hcl 
resource "vultr_database_user" "my_database_user" {
	database_id = vultr_database.my_database.id
	username = "my_database_user"
	password = "randomTestPW40298"
}

Argument Reference

Note
Updating the database ID will cause a force new. This behavior is in place because a database user cannot be moved from one managed database to another.

The following arguments are supported:

  • database_id - (Required) The managed database ID you want to attach this user to.
  • username - (Required) The username of the new managed database user.
  • password - (Required) The password of the new managed database user.
  • encryption - (Optional) The encryption type of the new managed database user's password (MySQL engine types only - caching_sha2_password, mysql_native_password).
  • permission - (Optional) The permission level for the database user (Kafka engine types only - admin, read, write, readwrite).

access_control - (Optional) The access control configuration for the new managed database user (Valkey engine types only). It supports the following fields:

  • acl_categories - (Required) The list of command category rules for this managed database user.
  • acl_channels - (Required) The list of publish/subscribe channel patterns for this managed database user.
  • acl_commands - (Required) The list of individual command rules for this managed database user.
  • acl_keys - (Required) The list of access rules for this managed database user.

Attributes Reference

The following attributes are exported:

  • database_id - The managed database ID.
  • username - The username of the managed database user.
  • password - The password of the managed database user.
  • encryption - The encryption type of the managed database user's password (MySQL engine types only).
  • permission - The permission level of the database user (Kafka engine types only).

access_control

  • acl_categories - List of command category rules for this managed database user (Valkey engine types only).
  • acl_channels - List of publish/subscribe channel patterns for this managed database user (Valkey engine types only).
  • acl_commands - List of individual command rules for this managed database user (Valkey engine types only).
  • acl_keys - List of access rules for this managed database user (Valkey engine types only).

Comments