All Products
Search
Document Center

Database Autonomy Service:FAQ about instance connection to DAS

Last Updated:Mar 28, 2026

Answers to common questions about connecting database instances to Database Autonomy Service (DAS).

FAQ

How do I connect an instance to DAS and authorize access?

See Connect an Alibaba Cloud database instance to DAS.

What are the minimum permissions required for database accounts?

Requirements vary by database engine. See Permissions for the full list.

Can I use the root account to connect a self-managed MySQL database to DAS?

No. DBGateway requires that the IP address used to access the database matches the host IP address. Because the root account of a self-managed MySQL database typically allows connections only from localhost or 127.0.0.1, it cannot be used for DAS access.

Use a separate account to access self-managed MySQL databases from DAS. This follows the least privilege principle and keeps accounts isolated.

Can I access a self-managed Redis database without a password?

Yes. When DBGateway detects a database instance, it attempts to establish a connection. If the account has no password, the instance state changes to Accessed.

Why does authentication fail when I authorize a RAM user to access a database instance?

Authentication failures are usually caused by one of the following:

  • Account not found. When granting permissions in the DAS console, use the account used to log in to the database — not the Alibaba Cloud account.

  • Wrong password. Enter the password for the database login account, not the Alibaba Cloud account password.

  • Access blocked by access control settings. Check the database's access control configuration. For example, verify that the connecting IP address is added to the database whitelist.