tencent cloud

Cloud Access Management

Product Introduction
CAM Overview
Features
Scenarios
Basic Concepts
Use Limits
User Types
Purchase Guide
Getting Started
Creating Admin User
Creating and Authorizing Sub-account
Logging In to Console with Sub-account
User Guide
Overview
Users
Access Key
User Groups
Role
Identity Provider
Policies
Permissions Boundary
Troubleshooting
Downloading Security Analysis Report
CAM-Enabled Role
Overview
Compute
Container
Microservice
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Database SaaS Service
Networking
CDN and Acceleration
Network Security
Data Security
Application Security
Domains & Websites
Big Data
Middleware
Interactive Video Services
Real-Time Interaction
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
CAM-Enabled API
Overview
Compute
Edge Computing
Container
Distributed cloud
Microservice
Serverless
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Networking
CDN and Acceleration
Network Security
Endpoint Security
Data Security
Business Security
Application Security
Domains & Websites
Office Collaboration
Big Data
Voice Technology
Image Creation
Tencent Big Model
AI Platform Service
Natural Language Processing
Optical Character Recognition
Middleware
Communication
Interactive Video Services
Real-Time Interaction
Stream Services
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Education Sevices
Medical Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
Use Cases
Security Practical Tutorial
Multi-Identity Personnel Permission Management
Authorizing Certain Operations by Tag
Supporting Isolated Resource Access for Employees
Enterprise Multi-Account Permissions Management
Reviewing Employee Operation Records on Tencent Cloud
Implementing Attribute-Based Access Control for Employee Resource Permissions Management
During tag-based authentication, only tag key matching is supported
Business Use Cases
TencentDB for MySQL
CLB
CMQ
COS
CVM
VPC
VOD
Others
API Documentation
History
Introduction
API Category
Making API Requests
User APIs
Policy APIs
Role APIs
Identity Provider APIs
Data Types
Error Codes
FAQs
Role
Key
Others
CAM Users and Permissions
Glossary

TencentDB for TcaplusDB

PDF
Modo Foco
Tamanho da Fonte
Última atualização: 2026-04-03 09:46:40

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
TencentDB for TcaplusDB tcaplusdb Supported Supported Resource level Partially supported

Note:

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
AddSyncDBInstance Add the cdb instance for sync table Operation level * Supported
ClearTables Truncate table Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
CompareIdlFiles Upload and verify the file Operation level * Supported
CreateBackup Create backup Operation level * Supported
CreateCluster Create cluster Operation level * Supported
CreateSnapshots Create Snapshot Operation level * Supported
CreateTableGroup Create table Group Resource level qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/* Supported
CreateTables Create tables in batches Resource level qcs::tcaplusdb:$region:$account:cluster/$clusterId/tablegroup/$tablegroupId/* Supported
DeleteBackupRecords DeleteBackupRecords Operation level * Supported
DeleteCluster Delete cluster Resource level qcs::tcaplusdb:$region:$account:cluster/$clusterId Supported
DeleteIdlFiles Delete IDL description file Operation level * Supported
DeleteSnapshots Delete Snapshot Operation level * Supported
DeleteSyncDBInstance Delete the sync database instance in tcaplusdb cluster Operation level * Supported
DeleteTableDataFlow DeleteTableDataFlow Operation level * Supported
DeleteTableGroup Delete table group Resource level qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/$tablegroupId Supported
DeleteTableIndex delete TcaplusDB global distributed index Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
DeleteTables Delete table Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
DisableRestProxy disable restful api Operation level * Supported
EnableRestProxy enable restful api Operation level * Supported
ImportSnapshots Import Snapshot Operation level * Supported
MergeTablesData MergeTablesData Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
ModifyCensorship ModifyCensorship Resource level qcs::tcaplusdb:$region:$account:cluster/$clusterId Supported
ModifyClusterMachine ModifyClusterMachine Operation level * Supported
ModifyClusterName Modify the cluster name Resource level qcs::tcaplusdb:$region:$account:cluster/$clusterId Supported
ModifyClusterPassword Change the cluster password Resource level qcs::tcaplusdb:$region:$account:cluster/$clusterId Supported
ModifyClusterTags Modify tags of cluster Resource level qcs::tcaplusdb:$region:$account:cluster/$clusterId Supported
ModifySnapshots Modify Snapshot Operation level * Supported
ModifyTableGroupName Modify table group name Resource level qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/$tablegroupId Supported
ModifyTableGroupTags Modify tags of table group Resource level qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/$tablegroupId Supported
ModifyTableMemos Modify note of table Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
ModifyTableQuotas Table expansion and reduction Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
ModifyTableTags Modify tags of table Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
ModifyTables Modify table structure in batch Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
RecoverRecycleTables Recovering tables from Recycle Bin Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
RollbackTables Form data rollback Resource level qcs::tcaplusdb:$region:$account:table/$tableId not supported
SetBackupExpireRule SetBackupExpireRule Operation level * Supported
SetSyncTable Set the info for sync data of tcaplus table to cdb Operation level * Supported
SetSyncTableStatus Set the status for sync table, 1 for on processing, 2 for close, -1 for delete Operation level * Supported
SetTableDataFlow SetTableDataFlow Operation level * Supported
SetTableIndex create and modify TcaplusDB global distributed index Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
UpdateApply UpdateApply Operation level * Supported
VerifyIdlFiles Upload and verify creation form file Operation level * Supported

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeApplications DescribeApplications Operation level * Supported
DescribeBackupRecords DescribeBackupRecords Operation level * Supported
DescribeClusterTags Querying tags of cluster Resource level qcs::tcaplusdb:$region:$account:cluster/$clusterId Supported
DescribeClusters Querying Cluster Information Resource level qcs::tcaplusdb:$region:$account:cluster/$clusterId Supported
DescribeIdlFileInfos Querying table description file details Operation level * Supported
DescribeMachine DescribeMachine Operation level * Supported
DescribeRegions Query the list of regions Operation level * Supported
DescribeSnapshots Describe Snapshot Operation level * Supported
DescribeSyncDBInstances Query the sync database instances in tcaplusdb cluster Resource level qcs::tcaplusdb:${region}:uin/${uin}:cluster/$clusterId Supported
DescribeTableGroupTags Querying tags of table group Resource level qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/$tablegroupId Supported
DescribeTableGroups Query table Group List Resource level qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/$tablegroupId Supported
DescribeTableTags Querying tags of table Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
DescribeTables Querying table details Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
DescribeTablesInRecycle Querying Table in the Recycle Bin Resource level qcs::tcaplusdb:$region:$account:table/$tableId Supported
DescribeTasks Query task list Operation level * Supported
DescribeUinInWhitelist Check if this user is in the white list Operation level * Supported

Ajuda e Suporte

Esta página foi útil?

comentários