tencent cloud

Resource-Level Permission Overview

Resource-level permission can be used to specify which resources a user can manipulate. TcaplusDB supports certain resource-level permissions, i.e., allowing the user to perform operations or use specified resources.

In Cloud Access Management (CAM), the types of TcaplusDB resources that can be authorized are as follows:

The TcaplusDB cluster APIs, TcaplusDB table group APIs, and TcaplusDB table APIs sections below describe the TcaplusDB API operations which currently support resource-level permission control as well as the resources and condition keys supported by each operation. When setting the resource path, you need to replace the variable parameters such as $region and $account with your real parameter information. You can also use the \* wildcard in the path. For related operation examples, please see TcaplusDB Access Control Examples.

For a TcaplusDB API operation that does not support authorization at the resource level, you can still authorize a user to perform it, but you must specify \* as the resource element in the policy statement.

List of APIs Not Supporting Resource-Level Permission

List of APIs Supporting Resource-Level Permission

TcaplusDB cluster APIs

TcaplusDB table group APIs

TcaplusDB table APIs