tencent cloud

Cloud Access Management

Product Introduction
CAM Overview
Features
Scenarios
Basic Concepts
Use Limits
User Types
Purchase Guide
Getting Started
Creating Admin User
Creating and Authorizing Sub-account
Logging In to Console with Sub-account
User Guide
Overview
Users
Access Key
User Groups
Role
Identity Provider
Policies
Permissions Boundary
Troubleshooting
Downloading Security Analysis Report
CAM-Enabled Role
Overview
Compute
Container
Microservice
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Database SaaS Service
Networking
CDN and Acceleration
Network Security
Data Security
Application Security
Domains & Websites
Big Data
Middleware
Interactive Video Services
Real-Time Interaction
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
CAM-Enabled API
Overview
Compute
Edge Computing
Container
Distributed cloud
Microservice
Serverless
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Networking
CDN and Acceleration
Network Security
Endpoint Security
Data Security
Business Security
Application Security
Domains & Websites
Office Collaboration
Big Data
Voice Technology
Image Creation
Tencent Big Model
AI Platform Service
Natural Language Processing
Optical Character Recognition
Middleware
Communication
Interactive Video Services
Real-Time Interaction
Stream Services
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Education Sevices
Medical Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
Use Cases
Security Practical Tutorial
Multi-Identity Personnel Permission Management
Authorizing Certain Operations by Tag
Supporting Isolated Resource Access for Employees
Enterprise Multi-Account Permissions Management
Reviewing Employee Operation Records on Tencent Cloud
Implementing Attribute-Based Access Control for Employee Resource Permissions Management
During tag-based authentication, only tag key matching is supported
Business Use Cases
TencentDB for MySQL
CLB
CMQ
COS
CVM
VPC
VOD
Others
API Documentation
History
Introduction
API Category
Making API Requests
User APIs
Policy APIs
Role APIs
Identity Provider APIs
Data Types
Error Codes
FAQs
Role
Key
Others
CAM Users and Permissions
Glossary

Cloud Application Rendering

PDF
Focus Mode
Font Size
Last updated: 2026-04-03 09:40:36

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
Cloud Application Rendering car Supported not supported Operation level Partially supported

Note:

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
ActivateService Activate cloud application renderer service Operation level * Supported
ApplyConcurrent try to acquire concurrent runtime for cloud application Operation level * Supported
AssumeRole assume role Operation level * Supported
BindConcurrentPackagesToProject bind concurrent packages to project Resource level qcs::car::uin/:concurrent/${ConcurrentId} Supported
BindProjectToConcurrentPackages bind concurrent package for cloud application project Operation level * not supported
CreateApplication create a cloud applicaiton Resource level qcs::car::uin/:application/* Supported
CreateApplicationProject create project for cloud application Resource level qcs::car::uin/:project/${ProjectId} Supported
CreateApplicationSnapshot create cloud application screen snapshot Resource level qcs::car::uin/:application/${ApplicationId} Supported
CreateApplicationVersion create new version for cloud application Resource level qcs::car::uin/:application/${ApplicationId} Supported
CreateExperienceCode CreateExperienceCode Operation level * Supported
CreateExperienceResource create experience resource Operation level * Supported
CreateMobileProject CreateMobileProject Operation level * not supported
CreateSampleApplication CreateSampleApplication Operation level * Supported
CreateSession create cloud application connection Operation level * Supported
DeleteApplication delete cloud application Resource level qcs::car::uin/:application/${ApplicationId} Supported
DeleteApplicationProjects delete cloud application project Resource level qcs::car::uin/:project/${ProjectIds} Supported
DeleteApplicationVersion delete cloud application version Resource level qcs::car::uin/:application/${ApplicationId} Supported
DeleteMobileProjects DeleteMobileProjects Operation level * not supported
DestroySession destroy cloud application connection Operation level * Supported
ModifyApplicationBaseInfo modify cloud application info Resource level qcs::car::uin/:application/${ApplicationId} Supported
ModifyApplicationProject modify cloud application project Resource level qcs::car::uin/:project/${ProjectId} Supported
ModifyApplicationVersion modify cloud application version Resource level qcs::car::uin/:application/${ApplicationId} Supported
ModifyConcurrentPackage modify concurrent package Resource level qcs::car::uin/:concurrent/${ConcurrentId} Supported
ModifyMobileApplicationInfo modify mobile application info Resource level qcs::car::uin/:application/${ApplicationId} Supported
ModifyMobileProject ModifyMobileProject Operation level * not supported
ResetConcurrentPackages reset concurrent packages Resource level qcs::car::uin/:concurrent/${ConcurrentId} Supported
SetApplicationVersionOnline set online version for cloud application Resource level qcs::car::uin/:application/${ApplicationId} Supported
UnbindConcurrentPackagesFromProject unbind concurrent packages from project Resource level qcs::car::uin/:concurrent/${ConcurrentId} Supported
UnbindProjectToConcurrentPackages bind concurrent packages for cloud application project Operation level * not supported

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeApplicationBaseInfoList get cloud application base info list Operation level * Supported
DescribeApplicationFileInfo DescribeApplicationFileInfo Resource level qcs::car::uin/:application/${ApplicationId} Supported
DescribeApplicationList get cloud application list Resource level qcs::car::uin/:application/* Supported
DescribeApplicationPathList get executor binary path of cloud application Resource level qcs::car::uin/:application/${ApplicationId} Supported
DescribeApplicationProjectAdvancedConfig DescribeApplicationProjectAdvancedConfig Resource level qcs::car::uin/:project/${ProjectId} Supported
DescribeApplicationProjects get cloud application project list Resource level qcs::car::uin/:project/* Supported
DescribeApplicationStatus get cloud application running status Operation level * Supported
DescribeApplicationVersion get cloud application versions Resource level qcs::car::uin/:application/${ApplicationId} Supported
DescribeBackgroundImageCOSCredential DescribeBackgroundImageCOSCredential Operation level * Supported
DescribeConcurrentCount describe concurrent count Operation level * Supported
DescribeConcurrentPackages get concurrent package list Resource level qcs::car::uin/:concurrent/${ConcurrentId} Supported
DescribeConcurrentRunningHistogram describe concurrent running histogram Operation level * Supported
DescribeConcurrentRunningMax describe concurrent running max Operation level * Supported
DescribeConcurrentSaleStatus DescribeConcurrentSaleStatus Operation level * Supported
DescribeConcurrentSummary describe concurrent summary Operation level * Supported
DescribeConcurrentUserIds describe concurrent UserId list Operation level * Supported
DescribeCosCredential DescribeCosCredential Resource level qcs::car::uin/:application/${ApplicationId} Supported
DescribeExperienceCodes DescribeExperienceCodes Operation level * Supported
DescribeHourlyConcurrentRunningHistogram describe hourly concurrent running histogram Operation level * Supported
DescribeMultiUserBitrateHistogram describe multi user bitrate histogram Operation level * Supported
DescribePublishStreamStatus describe publish stream status Operation level * Supported
DescribePushBitrateHistogram describe push bitrate histogram Operation level * Supported
DescribeServiceStatus describe service status Operation level * Supported
DescribeUserDeviceLoadHistogram DescribeUserDeviceLoadHistogram Operation level * Supported
DescribeUserDurationTotal describe user duration total Operation level * Supported
DescribeUserFPSHistogram describe user FPS histogram Operation level * Supported
DescribeUserNetRTTHistogram DescribeUserNetRTTHistogram Operation level * Supported
DescribeUserPushBitrateHistogram DescribeUserPushBitrateHistogram Operation level * Supported
DescribeUserStreamBitrateHistogram DescribeUserStreamBitrateHistogram Operation level * Supported
DescribeUserTotal describe user total Operation level * Supported

List Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeMobileProjects DescribeMobileProjects Operation level * not supported

Other Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
ForwardData forward data Operation level * Supported
ReloadApplication reload application Operation level * Supported
StartPublishStream start publish stream Operation level * Supported
StartPublishStreamToTRTC start publish stream to TRTC Operation level * Supported
StartPublishStreamWithURL start publish stream with URL Operation level * Supported
StopPublishStream stop publish stream Operation level * Supported

Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback