When troubleshooting an issue, an Alibaba Cloud support engineer may need to access your database instance. To grant this access, you must authorize a service account, which gives the engineer temporary, controlled access. The system automatically deletes the service account after the authorization expires.
Prerequisites
The instance must be one of the following versions:
MySQL 8.4 High-availability Edition (with local SSDs)
MySQL 8.0 High-availability Edition (with local SSDs) or 3-node Enterprise Edition
MySQL 5.7 High-availability Edition (with local SSDs) or 3-node Enterprise Edition
MySQL 5.6 High-availability Edition
MySQL 5.5 High-availability Edition
Procedure
Go to the Instances page. In the top navigation bar, select the region in which the RDS instance resides. Then, find the RDS instance and click the ID of the instance.
In the left-side navigation pane, click Accounts.
Click the Service Account tab. In the Permission Status column, enable the switch for the permission that you want to grant.
To troubleshoot issues related to an IP address whitelist or database parameters, grant only Configure Permissions.
To troubleshoot database performance issues that are caused by applications, grant Data Permissions.
In the dialog box that appears, set an expiration time for the authorization and click OK.
Revoke permissions or change the expiration time
After you grant permissions, you can revoke them or change their expiration time on the Service Account tab at any time.