This topic describes how to create an account on an ApsaraDB RDS for PostgreSQL instance.
Account types
ApsaraDB RDS for PostgreSQL instances support two types of accounts: privileged accounts and standard accounts. The following table describes these types of accounts.
Account type | Description |
---|---|
Privileged account |
Note
|
Standard account |
|
Precautions
- You can create multiple privileged accounts and standard accounts in the ApsaraDB RDS console. You can also create and manage standard accounts by using SQL statements.
- Before you can migrate data from an on-premises database to an RDS instance, you must create a database and an account on the RDS instance. Make sure that the created database has the same properties as the on-premises database. In addition, make sure that the created account has the same permissions on the created database as the account that is authorized to manage the on-premises database.
- We recommend that you follow the principle of least privilege (PoLP) and grant the read and write permissions to accounts based on your business requirements. You can create multiple accounts and grant each account only the permissions to access the data of specified databases. If an account does not need to write data to a database, we recommend that you grant only the read permissions on the database to the account.
- For security purposes, we recommend that you specify strong passwords for accounts and change the passwords on a regular basis.
Procedure
Related operations
Operation | Description |
---|---|
CreateAccount | Creates an account that is used to manage the databases of an ApsaraDB RDS instance. |