When you seek help from Alibaba Cloud technical support to locate issues that occurred on your ApsaraDB RDS for MySQL instance, you may need to grant permissions to the service account of your RDS instance. The service account is used by Alibaba Cloud technical support to perform operations on the databases of your RDS instance. When the service account expires, ApsaraDB RDS deletes the service account.
Prerequisites
Your RDS instance runs one of the following MySQL versions and RDS editions:- MySQL 8.0 on RDS High-availability Edition with local SSDs or RDS Enterprise Edition
- MySQL 5.7 on RDS High-availability Edition with local SSDs or RDS Enterprise Edition
- MySQL 5.6 on RDS High-availability Edition
- MySQL 5.5 on RDS High-availability Edition
Procedure
- Go to the Instances page. In the top navigation bar, select the region in which the RDS instance resides. Then, find the RDS instance and click the ID of the instance.
- In the left-side navigation pane, click Accounts.
- On the Service Account Permissions tab, find the permission that you want to grant to the service account and turn on the switch in the Permission Status column.
- For issues that are related to IP address whitelists or parameters, you can grant only the Configuration Permission to the service account.
- For performance issues that are caused by applications, you must grant the Data Permission to the service account.
- In the dialog box that appears, specify the expiration time of the service account and click OK.
Revoke the permissions or change the expiration time
After you grant permissions to the service account, you can revoke the permissions or change the expiration time on the Service Account Permissions tab at any time.