---
title: How to manage user permissions for Serverless SQL Databases
description: Guide to manage permissions in Scaleway serverless SQL databases.
tags: sql-databases serverless database iam serverless-db serverless-database postgresql
dates:
  validation: 2025-09-17
  posted: 2023-08-11
---
import Requirements from '@macros/iam/requirements.mdx'


Permissions define the actions a user or an application can perform on a database. They are managed using Scaleway's [Identity and Access Management](/iam/quickstart/) interface.

<Requirements />

- A Scaleway account logged into the [console](https://console.scaleway.com)
- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization
- Created a [Serverless SQL Database](/serverless-sql-databases/how-to/create-a-database/)

1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays.

2. Click the **Policies** tab. A list of the Organization's existing policies displays.

3. Click **Create a policy**. The policy creation wizard displays.

4. Complete the steps on the first page of the creation wizard:

    - Enter a **name** for the policy.

    - Enter a **description** (optional).

    - Select a **principal**, who will be the target of your policy. The [principal](/iam/concepts/#principal) should be the user, application, or group you want to grant access to your database.

    <Message type="important">
      - You can choose to create a policy without a principal for now and attach one later.
      - The policy will have no effect until a principal is attached.
      - A policy can only be attached to one principal at a time.
    </Message>

5. Click **Add rules**. The second screen of the policy creation wizard.

6. Select **Access to resources**, then, select the [Project](/iam/concepts/#project) in which you want the permissions to apply.

7. Click **Validate** to continue.

8. Select **Databases** in the left-hand **Products** list, then, tick the permissions set you want to add to the policy:

    - **ServerlessSQLDatabaseFullAccess** allows the user to create and delete databases, edit their configuration, and use the following commands:

      - `SELECT`
      - `UPDATE`
      - `INSERT`
      - `DELETE`
      - `CREATE/ALTER/DROP TABLE`
      - `CREATE/DROP INDEX`

    - **ServerlessSQLDatabaseReadWrite** allows the user to use the following commands:

      - `SELECT`
      - `UPDATE`
      - `INSERT`
      - `DELETE`
      - `CREATE/ALTER/DROP TABLE`
      - `CREATE/DROP INDEX`

    - **ServerlessSQLDatabaseReadOnly** allows the user to use the following commands:

      - `SELECT`

    - **ServerlessSQLDatabaseDataReadWrite** allows the user to use the following commands:

      - `SELECT`
      - `UPDATE`
      - `INSERT`
      - `DELETE`

9. Click **Validate**. The **scope** and the **permission sets** of your policy display.

10. Click **Create policy** to finish.

The user or application now has the selected permissions, and can perform the corresponding actions on the Serverless SQL Database.