Answer
The full application-owner schema account generally isn't provided on a Managed Cloud install, but a full read-only account can be requested through a support ticket; expect it to arrive through a secure/encrypted channel, and expect to need a VPN tunnel into the cloud environment first, since a Managed Cloud database isn't exposed directly to the internet.