System accounts of an ApsaraDB RDS for PostgreSQL instance-ApsaraDB RDS(RDS)-阿里云帮助中心

ApsaraDB RDS for PostgreSQL instances include built-in system accounts for internal operations and management. In most cases, you do not need to consider the permissions and authorized operations of these system accounts.

System accounts

Account	Purpose
`alicloud_rds_admin`, `pg*********`	Local O&M accounts used to manage the instance directly on the host. Alibaba Cloud engineers use these accounts to initialize the instance (`initdb`), restart it, and query its status.
`aurora`	The remote management account used by the Alibaba Cloud management and control system to log on to and manage the instance — for example, to create databases and accounts, check instance status, and monitor performance.
`replicator`	The data replication account used to replicate data from the primary instance to its secondary instance. Available only in RDS High-availability Edition.

View active logon accounts

All system accounts connect from internal IP addresses. To see which accounts are currently logged on and their IP addresses, run:

SELECT usename, client_addr FROM pg_stat_activity;

Example output:

      usename         client_addr
--------------------+----------------
                    |
 alicloud_rds_admin
 replicator          172.21.XX.XX
 aurora              100.104.XX.XX
 aurora
 aurora              100.104.XX.XX
 aurora              100.104.XX.XX