This topic describes the system accounts that are provided in an ApsaraDB RDS for MySQL instance. In most cases, you do not need to consider the permissions and authorized operations of these system accounts.

Account Description
root (aliyun_root in MySQL 5.7 and later versions) The local O&M account that you can use to manage the RDS instance. For example, you can use this account to reconfigure the parameters that are related to the database engine and query the status of the RDS instance.
  • aurora
  • rds_service
The account that you can use to remotely manage the RDS instance. If the RDS instance is faulty, you can provide this account to an Alibaba Cloud engineer. The engineer can use this account to log on to and manage the RDS instance. For example, the engineer can perform a primary/secondary switchover and monitor the RDS instance.
aurora_proxy The account that you can use to forward connections after you enable the database proxy feature.
replicator The account that you can use to replicate data from the RDS instance to its secondary RDS instance. This account is available only in RDS High-availability Edition.
Note All IP addresses of the preceding system accounts are internal IP addresses. You can run the SELECT user(); command to view the current logon account and its IP address. Example:
'aurora_proxy'@'%';
'replicator'@'11.195.143.24';
'replicator'@'11.196.207.107';
'replicator'@'11.195.208.36';
'replicator'@'11.199.40.156';
'aliyun_root'@'127.0.0.1';
In the preceding return results, the 11 CIDR block of the replicator system account is a private CIDR block of Alibaba Cloud.