ApsaraDB RDS:Create and use a host account for logons

Usage notes

• RDS instances in CloudTmall system do not support host accounts.

• You can create only one host account that has the permissions of a system admin account for each RDS instance.

• The following usernames cannot be used for host accounts:

  root|admin|eagleye|master|aurora|sysadmin|administrator|mssqld|public|securityadmin|serveradmin|setupadmin|processadmin|diskadmin|dbcreator|bulkadmin|tempdb|msdb|model|distribution|mssqlsystemresource|guest|add|except|percent|all|exec|plan|alter|execute|precision|and|exists|primary|any|exit|print|as|fetch|proc|asc|file|procedure|authorization|fillfactor|public|backup|for|raiserror|begin|foreign|read|between|freetext|readtext|break|freetexttable|reconfigure|browse|from|references|bulk|full|replication|by|function|restore|cascade|goto|restrict|case|grant|return|check|group|revoke|checkpoint|having|right|close|holdlock|rollback|clustered|identity|rowcount|coalesce|identity_insert|rowguidcol|collate|identitycol|rule|column|if|save|commit|in|schema|compute|index|select|constraint|inner|session_user|contains|insert|set|containstable|intersect|setuser|continue|into|shutdown|convert|is|some|create|join|statistics|cross|key|system_user|current|kill|table|current_date|left|textsize|current_time|like|then|current_timestamp|lineno|to|current_user|load|top|cursor|national|tran|database|nocheck|transaction|dbcc|nonclustered|trigger|deallocate|not|truncate|declare|null|tsequal|default|nullif|union|delete|of|unique|deny|off|update|desc|offsets|updatetext|disk|on|use|distinct|open|user|distributed|opendatasource|values|double|openquery|varying|drop|openrowset|view|dummy|openxml|waitfor|dump|option|when|else|or|where|end|order|while|errlvl|outer|with|escape|over|writetext||dbo|login|sys|drc_rds

Impacts

A host account has the highest permissions on the host. The highest permissions are beyond the management scope of ApsaraDB RDS for SQL Server. If you create a host account for your RDS instance, the service availability that is specified in the service level agreement (SLA) is no longer guaranteed for the RDS instance. However, you can use the RDS instance and obtain after-sales service as expected. If you do not create a host account for your RDS instance, the service availability that is specified in the SLA is guaranteed for the RDS instance.

Suggestions

A host account has high permissions that are beyond the management scope of ApsaraDB RDS for SQL Server. If you use a host account, take note of the following items:

Procedure

Step 1: Create a host account

1. Go to the Instances page. In the top navigation bar, select the region in which the RDS instance resides. Then, find the RDS instance and click the ID of the instance.

2. In the left-side navigation pane, click Accounts.

3. On the Host Account tab, click Create Account and configure the following parameters.

   Parameter	Description
   Host Account Name	The username of the account. It must be 2 to 64 characters in length and can contain lowercase letters, digits, and underscores (_). The username must start with a lowercase letter and end with a lowercase letter or a digit.
   Account Type	Standard Account: Create a host account that has the permissions of a standard account. System Admin Account: Create a host account that has the permissions of a system admin account. You can create only one host account that has the permissions of a system admin account for each RDS instance. For more information about system admin accounts, see Create a system admin account.
   New Password	The password of the account. The password must meet the following requirements: It must be 8 to 32 characters in length. It can contain at least three types of the following characters: uppercase letters, lowercase letters, digits, and special characters. Special characters include ! @ # $ % ^ & * ( ) _ + - =
   Confirm Password	The password of the account.
   Description	The description of the account. The description can be up to 256 characters in length.

4. Read and select I have read and agree to the changes to the RDS Service Level Agreement caused by the creation of a host account.

5. Click OK.

6. Optional. Reset the password of the host account or delete the host account.

   You can click Reset Password or Delete in the Actions column to reset the password of the host account or delete the host account.

   

Step 2: Use the host account to log on to the host on which the RDS instance runs

1. Go to the Instances page. In the top navigation bar, select the region in which the RDS instance resides. Then, find the RDS instance and click the ID of the instance.

2. In the left-side navigation pane, click Accounts.

3. On the Host Account tab, find the required account and click Remote Connection (Primary) in the Actions column.

4. In the Remote Connection dialog box, enter the password of the host account.

   

5. Click OK.

   The system generates a webshell URL and automatically connects to the host on which the RDS instance runs by using the URL. The system displays a webshell page in a pop-up window. The page may be blocked by the browser. If the page is blocked, you can configure the browser to allow the appearance of the page. The following figure provides an example.

   

FAQ

Can I call operations to obtain the hostname of my RDS instance and the webshell URL to connect to the host of my RDS instance?

Yes, you can call the DescribeDBInstanceIpHostname operation to obtain the hostname of your RDS instance, and then the DescribeHostWebShell operation to obtain the webshell URL to connect to the host of your RDS instance. The hostname is specified by the IpHostnameInfos parameter, and the webshell URL is specified by the LoginUrl parameter.

Related operations

References

You can use SQL Server Reporting Services (SSRS) to manage an instance after you log on to the host on which the RDS instance resides. For more information, see Use a webshell to log on to the host on which an ApsaraDB RDS for SQL Server instance resides and use SSRS on the host.