This topic describes how to authorize a service account for an RDS MySQL instance.

If you are seeking for technical support from Alibaba Cloud and if it is necessary to operate your DB instance during technical support, you must authorize a service account that is used by the technical support staff to provide technical support services.

Note This function is available only to the following DB engine versions and editions:
  • MySQL 8.0 High-availability Edition (with local SSDs)
  • MySQL 5.7 Enterprise Edition
  • MySQL 5.7 High-availability Edition (with local SSDs)
  • MySQL 5.6 High-availability Edition
  • MySQL 5.5 High-availability Edition


  1. Log on to the RDS console.
  2. In the left-side navigation pane, select the region where the target RDS instance is located.选择地域
  3. Find the target RDS instance and click the instance ID.
  4. In the left-side navigation pane, click Accounts.
  5. On the Service Account Permissions tab, select the permission to be authorized to the service account and in the Privilege Status column click the switch.
    • For troubleshooting of the IP address whitelists, database parameters, and other problems, you only need to authorize the Configuration Permission.
    • For the database performance problems caused by your application, you must authorize the Data Permission.
  6. In the Set Expiration Time dialog box, set the permission expiration time and click OK. 设置授权过期时间

What to do next

After you authorize permissions to a service account, you can cancel the authorization or change the authorization validity period on the Service Account Permissions tab.