# Database User’s Access Control (TiDB Serverless)
![`smart`](TiDBCloudServerelssUserAndRole_aa_001_20231030.png)
+ Authentication plugins
  + **`mysql_native_password`** 
+ Authorization by built-in roles
  + Database Admin
  + Database Read-Write
  + Database Read-Only

------------------------------------------------------------------------------
[no notes]