ApsaraDB RDS for MySQL provides various types of system accounts. You do not need to be concerned about the permissions and operations of these system accounts. This topic describes the system accounts of an ApsaraDB RDS for MySQL instance.

Account Description
root (aliyun_root in MySQL 5.7 and later) The local O&M account that you can use to manage the RDS instance. For example, you can use this account to reconfigure the parameters that are related to the database engine and query the status of the RDS instance.
aurora/rds_service The account that you can use to remotely access and manage the RDS instance. For example, you can use this account to perform a primary/secondary switchover and monitor the RDS instance.
aurora_proxy The account that you can use to forward requests after the database proxy feature is enabled for the RDS instance.
replicator The account that you can use to replicate data from the RDS instance to its secondary RDS instance. This account is available only in the RDS High-availability Edition.
Note All the IP addresses of the preceding system accounts are private IP addresses. You can run the SELECT user(); command to view the current logon account and its IP address. Example:
'aurora_proxy'@'%';
'replicator'@'11.195.143.24';
'replicator'@'11.196.207.107';
'replicator'@'11.195.208.36';
'replicator'@'11.199.40.156';
'aliyun_root'@'127.0.0.1';

In the preceding return results, the 11 CIDR block of the replicator system account is a private CIDR block of Alibaba Cloud.