Service Authorization
When Alibaba Cloud technical support needs to operate your ApsaraDB RDS instance to resolve an issue, you must grant access through service authorization. A temporary service account is created for the support session and automatically deleted when the authorization expires.
Without authorization, the Alibaba Cloud after-sales and DBA teams can only view read-only instance metadata:
Purchase time and expiration time
CPU, memory, and storage capacity and consumption
Backup space
Internet traffic
SQL Audit
To allow the support team to investigate beyond this baseline, grant one or both of the following permission types.
Permission types
Configure permissions
Grants the after-sales and DBA teams the ability to view and modify instance configuration within a time period you define. Configurable items include:
RDS whitelists
Data replication modes
Backup policies
Database parameters
Connection information — including IP addresses and database accounts — is never modified without your authorization.
Data permissions
Grants the after-sales and DBA teams read-only access to your instance data within a time period you define. Accessible items include:
Database and table structure
Index fields
Data samples
SQL History
Database structure, index fields, and data are never modified without your authorization.
Expires on
Set a validity period to automatically revoke permissions. You can also revoke the permissions at any time.