- Release Notes and Announcements
- Release Notes
- Announcements
- Announcement on Release of New Upgrade Mechanism for Kernel Minor Version
- Announcement on Optimization of Instance Storage Capacity, IOPS, and I/O Bandwidth
- Announcement on Some APIs with CAM Authentication Integrated
- Announcement on Sales Suspension of Some General Specifications
- Announcement on Some APIs Integrated with CAM Authentication
- Announcement on Some APIs with CAM Authentication Integrated
- Announcement on Change of Part of Parameters
- Announcement on Update of Database Audit Feature
- Announcement on Authentication of a Newly Added API Interface of Database Audit
- Announcement on Change of Public Network Linkage
- TDSQL-C for MySQL Audit Service Update
- Announcement on Supplementary Charge for Clusters with Pay-as-You-Go Storage Billing Mode
- Announcement on New APIs Integrated with CAM Permissions
- Announcement on the Release of New Version of Database Proxy
- Emergency Fix for Certain Monitoring Metrics
- Monitoring Metric Optimization
- Change to Database Audit Resource ID
- Ops Change
- Storage Price Adjustment Notification
- Beginner's Guide
- Product Introduction
- Kernel Features
- Kernel Overview
- Kernel Version Release Notes
- Optimized Kernel Version
- Functionality Features
- Performance Features
- Columns Syntax
- Correlated Subquery Result Cache
- Global Index
- Binlog Write Optimization
- Large Transaction Binlog Optimization
- Binlog Purging Performance Optimization
- Optimization of Plan Caching Point Query
- Auto-Increment Column Persistence
- Invisible Index
- Computation Pushdown
- Parallel Initialization of InnoDB Buffer Pool
- Security Features
- Stability Feature
- Analysis Engine Features
- Purchase Guide
- Getting Started
- Database Audit
- Serverless Service
- Operation Guide
- Switching Cluster Page View in Console
- Database Connection
- Instance Management
- Configuration Adjustment
- Cluster Management
- Scaling Instance
- Database Proxy
- Database Proxy Overview
- Use Limits
- Database Proxy Kernel Features
- Managing Database Proxy
- Enabling Database Proxy
- Setting Database Proxy Address
- Modifying or Deleting Connection Addresses
- Viewing and Changing the Access Policy
- Rebalancing the Load
- Transaction Split Feature
- Access Mode
- Adjusting Database Proxy Configuration
- Switching Database Proxy Network
- Viewing Database Proxy Monitoring Data
- Disabling Database Proxy
- Automatic Read/Write Separation
- Connection Pool Feature
- Other Features
- Account Management
- Database Management
- Database Management Tool
- Columnar Storage Index (CSI)
- Read-Only Analysis Engine
- Parameter Configuration
- Multi-AZ Deployment
- Backup and Restoration
- Operation Log
- Data Migration
- Parallel Query
- Database Security and Encryption
- Monitoring and Alarms
- Basic SQL Operations
- Connecting to TDSQL-C for MySQL Through SCF
- Tag
- Practical Tutorial
- Classified Protection Practice for Database Audit of TDSQL-C for MySQL
- Upgrading Database Version from MySQL 5.7 to 8.0 Through DTS
- Usage Instructions for TDSQL-C MySQL
- New Version of Console
- Implementing Multiple RO Groups with Multiple Database Proxy Connection Addresses
- Strengths of Database Proxy
- Selecting Billing Mode for Storage Space
- Creating Remote Disaster Recovery by DTS
- Creating VPC for Cluster
- Data Rollback
- Solution to High CPU Utilization
- How to Authorize Sub-Users to View Monitoring Data
- White Paper
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Billing APIs
- Instance APIs
- CloseClusterPasswordComplexity
- CopyClusterPasswordComplexity
- DescribeClusterDetail
- DescribeClusterPasswordComplexity
- ModifyClusterPasswordComplexity
- OpenClusterPasswordComplexity
- UpgradeClusterVersion
- UpgradeInstance
- SetRenewFlag
- OfflineCluster
- ModifyMaintainPeriodConfig
- IsolateInstance
- IsolateCluster
- DescribeMaintainPeriod
- DescribeInstanceSpecs
- DescribeClusters
- CreateClusters
- AddInstances
- OfflineInstance
- DescribeInstanceDetail
- DescribeClusterInstanceGrps
- DescribeInstances
- ActivateInstance
- ModifyInstanceName
- ModifyClusterName
- SearchClusterTables
- SearchClusterDatabases
- RestartInstance
- Multi-AZ APIs
- Account APIs
- Audit APIs
- Database Proxy APIs
- Backup and Restoration APIs
- Parameter Management APIs
- Performance Analysis APIs
- Serverless APIs
- ResourcePackage APIs
- Other APIs
- CloseWan
- CreateClusterDatabase
- DeleteClusterDatabase
- DescribeClusterDetailDatabases
- ModifyClusterDatabase
- OpenWan
- SwitchClusterVpc
- OpenReadOnlyInstanceExclusiveAccess
- OpenClusterReadOnlyInstanceGroupAccess
- ModifyDBInstanceSecurityGroups
- DescribeProjectSecurityGroups
- DescribeDBSecurityGroups
- SwitchProxyVpc
- DescribeFlow
- DescribeZones
- ModifyVipVport
- Data Types
- Error Codes
- FAQs
- Service Agreement
- TDSQL-C Policy
- General References
- Glossary
- Contact Us
- Release Notes and Announcements
- Release Notes
- Announcements
- Announcement on Release of New Upgrade Mechanism for Kernel Minor Version
- Announcement on Optimization of Instance Storage Capacity, IOPS, and I/O Bandwidth
- Announcement on Some APIs with CAM Authentication Integrated
- Announcement on Sales Suspension of Some General Specifications
- Announcement on Some APIs Integrated with CAM Authentication
- Announcement on Some APIs with CAM Authentication Integrated
- Announcement on Change of Part of Parameters
- Announcement on Update of Database Audit Feature
- Announcement on Authentication of a Newly Added API Interface of Database Audit
- Announcement on Change of Public Network Linkage
- TDSQL-C for MySQL Audit Service Update
- Announcement on Supplementary Charge for Clusters with Pay-as-You-Go Storage Billing Mode
- Announcement on New APIs Integrated with CAM Permissions
- Announcement on the Release of New Version of Database Proxy
- Emergency Fix for Certain Monitoring Metrics
- Monitoring Metric Optimization
- Change to Database Audit Resource ID
- Ops Change
- Storage Price Adjustment Notification
- Beginner's Guide
- Product Introduction
- Kernel Features
- Kernel Overview
- Kernel Version Release Notes
- Optimized Kernel Version
- Functionality Features
- Performance Features
- Columns Syntax
- Correlated Subquery Result Cache
- Global Index
- Binlog Write Optimization
- Large Transaction Binlog Optimization
- Binlog Purging Performance Optimization
- Optimization of Plan Caching Point Query
- Auto-Increment Column Persistence
- Invisible Index
- Computation Pushdown
- Parallel Initialization of InnoDB Buffer Pool
- Security Features
- Stability Feature
- Analysis Engine Features
- Purchase Guide
- Getting Started
- Database Audit
- Serverless Service
- Operation Guide
- Switching Cluster Page View in Console
- Database Connection
- Instance Management
- Configuration Adjustment
- Cluster Management
- Scaling Instance
- Database Proxy
- Database Proxy Overview
- Use Limits
- Database Proxy Kernel Features
- Managing Database Proxy
- Enabling Database Proxy
- Setting Database Proxy Address
- Modifying or Deleting Connection Addresses
- Viewing and Changing the Access Policy
- Rebalancing the Load
- Transaction Split Feature
- Access Mode
- Adjusting Database Proxy Configuration
- Switching Database Proxy Network
- Viewing Database Proxy Monitoring Data
- Disabling Database Proxy
- Automatic Read/Write Separation
- Connection Pool Feature
- Other Features
- Account Management
- Database Management
- Database Management Tool
- Columnar Storage Index (CSI)
- Read-Only Analysis Engine
- Parameter Configuration
- Multi-AZ Deployment
- Backup and Restoration
- Operation Log
- Data Migration
- Parallel Query
- Database Security and Encryption
- Monitoring and Alarms
- Basic SQL Operations
- Connecting to TDSQL-C for MySQL Through SCF
- Tag
- Practical Tutorial
- Classified Protection Practice for Database Audit of TDSQL-C for MySQL
- Upgrading Database Version from MySQL 5.7 to 8.0 Through DTS
- Usage Instructions for TDSQL-C MySQL
- New Version of Console
- Implementing Multiple RO Groups with Multiple Database Proxy Connection Addresses
- Strengths of Database Proxy
- Selecting Billing Mode for Storage Space
- Creating Remote Disaster Recovery by DTS
- Creating VPC for Cluster
- Data Rollback
- Solution to High CPU Utilization
- How to Authorize Sub-Users to View Monitoring Data
- White Paper
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Billing APIs
- Instance APIs
- CloseClusterPasswordComplexity
- CopyClusterPasswordComplexity
- DescribeClusterDetail
- DescribeClusterPasswordComplexity
- ModifyClusterPasswordComplexity
- OpenClusterPasswordComplexity
- UpgradeClusterVersion
- UpgradeInstance
- SetRenewFlag
- OfflineCluster
- ModifyMaintainPeriodConfig
- IsolateInstance
- IsolateCluster
- DescribeMaintainPeriod
- DescribeInstanceSpecs
- DescribeClusters
- CreateClusters
- AddInstances
- OfflineInstance
- DescribeInstanceDetail
- DescribeClusterInstanceGrps
- DescribeInstances
- ActivateInstance
- ModifyInstanceName
- ModifyClusterName
- SearchClusterTables
- SearchClusterDatabases
- RestartInstance
- Multi-AZ APIs
- Account APIs
- Audit APIs
- Database Proxy APIs
- Backup and Restoration APIs
- Parameter Management APIs
- Performance Analysis APIs
- Serverless APIs
- ResourcePackage APIs
- Other APIs
- CloseWan
- CreateClusterDatabase
- DeleteClusterDatabase
- DescribeClusterDetailDatabases
- ModifyClusterDatabase
- OpenWan
- SwitchClusterVpc
- OpenReadOnlyInstanceExclusiveAccess
- OpenClusterReadOnlyInstanceGroupAccess
- ModifyDBInstanceSecurityGroups
- DescribeProjectSecurityGroups
- DescribeDBSecurityGroups
- SwitchProxyVpc
- DescribeFlow
- DescribeZones
- ModifyVipVport
- Data Types
- Error Codes
- FAQs
- Service Agreement
- TDSQL-C Policy
- General References
- Glossary
- Contact Us
Resource-level permission can be used to specify which resources a user can manipulate. TDSQL-C for MySQL supports certain resource-level permissions. This means that for TDSQL-C for MySQL operations with resource-level permissions, you can control the time when a user is allowed to perform operations or to use specified resources. The following table describes the types of resources that can be authorized in CAM.
Resource Type | Resource Description Method in Authorization Policy |
qcs::cynosdb:$region::instance/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
The table below lists the TDSQL-C for MySQL API operations which currently support resource-level permission control as well as the resources supported by each operation. When specifying a resource path, you can use the
* wildcard in the path.Note:
Any TencentDB API operation not listed in the table does not support resource-level permission. For such an operation, you can still authorize a user to perform it, but you must specify
* as the resource element in the policy statement.Cluster APIs
Cluster APIs
API Operation | Resource Path |
DescribeBackupConfig | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeBackupList | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeRollbackTimeRange | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeRollbackTimeValidity | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
ModifyBackupConfig | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
ActivateCluster | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeClusterDetail | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
IsolateCluster | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
ModifyClusterName | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
ModifyClusterProject | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
OfflineCluster | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DeleteAccounts | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeAccounts | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
ModifyAccountDescription | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
ResetAccountPassword | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeClusterInstanceGrps | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
ActivateInstance | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeInstanceDetail | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
IsolateInstance | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
UpgradeInstance | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
ModifyInstanceName | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
OfflineInstance | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeClusterAddr | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeClusterNetService | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeClusterParams | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeClusterServerInfo | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeErrorLogs | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeMaintainPeriod | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeSlowLogs | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
ModifyClusterParam | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
ModifyMaintainPeriodConfig | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeDBSecurityGroups | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
ModifyDBInstanceSecurityGroups | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
CloseWan | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
OpenWan | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeClusters | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeInstances | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
DescribeIsolatedInstances | qcs::cynosdb:$region:$account:instanceId/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
Yes
No
Was this page helpful?