If you are seeking for technical supports from Alibaba Cloud and if it is necessary to operate your database instance during technical support, you must authorize a service account that is used by the technical support staff to provide technical support services.

Background information

When you authorize the service account to view and modify configurations or view table structure, index, and SQL statements, the system generates a temporary service account and the corresponding permissions are given to this account according to your authorization information.

This temporary service account is automatically deleted after the validity period of authorization expires.


  1. Log on to the RDS console and select the target instance.
  2. Select Accounts in the left-side navigation pane.
  3. Select the Privilege account tab page.
  4. Select the permission to be authorized to the service account and click the button in the Privilege status column, as shown in the following figure.
    • For troubleshooting of the IP whitelists, database parameters, and other problems, you must authorize Control privilege only.
    • For the database performance problems caused by your application, you must authorize Data privilege.

  5. After setting the permission expiration time in the Setting expired time dialog box, click OK, as shown in the following figure.

Subsequent operations

After a service account is authorized, you may cancel the authorization or change the authorization validity period on the Privilege account tab page.