When you seek help from Alibaba Cloud technical support to locate problems that occurred on your ApsaraDB RDS for MySQL instance, you may need to grant permissions to the service account of your instance. The service account is used by Alibaba Cloud technical support to perform operations on the databases of your instance. After the specified expiration time, the service account is automatically deleted.
Prerequisites
The RDS instance runs one of the following MySQL versions and RDS editions:- MySQL 8.0 on RDS High-availability Edition (with local SSDs) or Enterprise Edition
- MySQL 5.7 on RDS High-availability Edition (with local SSDs) or Enterprise Edition
- MySQL 5.6 on RDS High-availability Edition
- MySQL 5.5 on RDS High-availability Edition
Procedure
- Log on to the ApsaraDB for RDS console.
- In the top navigation bar, select the region where the target RDS instance resides.
- Find the target RDS instance and click its ID.
- In the left-side navigation pane, click Accounts.
- Click the Service Account Permissions tab, find the permissions that you want to grant to the service account, and turn
on the switches in the Permission Status column.
- For issues with IP address whitelists or database parameters, you can grant only the Configuration Permission to the service account.
- For database performance deterioration caused by application defects, you must grant the Data Permission to the service account.
- In the dialog box that appears, specify an expiration time and click OK.
Revoke the permissions or change the expiration time of the service account
After you grant permissions to the service account, you can revoke the permissions or change the account expiration time on the Service Account Permissions tab.
