- Release Notes and Announcements
- Release Notes
- Announcements
- Announcement on Changing External Network Links
- Interface Authentication Upgrade Announcement
- Maintenance Time Change from Local Time to Beijing Time
- Account Type and Permission Changes
- Product Architecture Name Change
- Disk Storage Space Composition Change
- Ending Support for Classic Network [2022.12.31]
- Backup Billing Start [2022.07.10]
- Ending Sale for Basic Edition 1-Core Specification [2022.03.07]
- User Guide
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Constraints and Limits
- Usage Specifications and Suggestions
- Maintaining Instance
- Renaming Instance
- Setting Instance Remarks
- Setting Instance Tag
- Setting Instance Project
- Modify Instance-level Character Set Collation
- Modify System Time Zone
- Setting Instance Maintenance Information
- Multi-AZ Disaster Recovery
- Restarting Instance
- Terminating Instance
- Migrating Across AZs
- Manual Primary-Secondary Switching
- Recycle Bin
- Adjusting Instance Configuration
- Read-Only Instance
- Network and Security
- Account Management
- Database Management
- Data Security
- Parameter Configuration
- Monitoring and Alarms
- Backup and Restoration
- Log Management
- Publish-Subscribe
- SSIS
- Data Migration (New)
- Data Migration (Legacy)
- Practical Tutorial
- API Documentation
- History
- Introduction
- API Category
- Sales and fee related APIs
- Network management related APIs
- Account management related APIs
- Instance Management APIs
- Data security encryption related APIs
- Parameter configuration related APIs
- Log management related APIs
- Extended Event APIs
- Read only instance management related APIs
- Backup APIs
- Rollback APIs
- Data migration (cold standby migration) related APIs
- CreateBackupMigration
- ModifyBackupMigration
- StartBackupMigration
- DescribeBackupMigration
- DeleteBackupMigration
- DescribeUploadBackupInfo
- CreateIncrementalMigration
- ModifyIncrementalMigration
- StartIncrementalMigration
- DescribeIncrementalMigration
- DescribeBackupCommand
- DescribeBackupUploadSize
- DeleteIncrementalMigration
- Data migration (DTS old version) related APIs
- Making API Requests
- Database APIs
- Other APIs
- Data Types
- Error Codes
- FAQs
- Overview
- Model Selection
- Pricing and Selection
- Connection and Network
- Account and Permission
- Backup and Rollback
- Data Migration
- Publish/Subscribe
- Read-Only Instance
- Version and Architecture Upgrade
- Disk Space and Specification Adjustment
- Monitoring and Alarms
- Log
- Parameter Modification
- Features
- Performance/Space/Memory
- Service Agreement
- Performance Evaluation
- Glossary
- Contact Us
- Release Notes and Announcements
- Release Notes
- Announcements
- Announcement on Changing External Network Links
- Interface Authentication Upgrade Announcement
- Maintenance Time Change from Local Time to Beijing Time
- Account Type and Permission Changes
- Product Architecture Name Change
- Disk Storage Space Composition Change
- Ending Support for Classic Network [2022.12.31]
- Backup Billing Start [2022.07.10]
- Ending Sale for Basic Edition 1-Core Specification [2022.03.07]
- User Guide
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Constraints and Limits
- Usage Specifications and Suggestions
- Maintaining Instance
- Renaming Instance
- Setting Instance Remarks
- Setting Instance Tag
- Setting Instance Project
- Modify Instance-level Character Set Collation
- Modify System Time Zone
- Setting Instance Maintenance Information
- Multi-AZ Disaster Recovery
- Restarting Instance
- Terminating Instance
- Migrating Across AZs
- Manual Primary-Secondary Switching
- Recycle Bin
- Adjusting Instance Configuration
- Read-Only Instance
- Network and Security
- Account Management
- Database Management
- Data Security
- Parameter Configuration
- Monitoring and Alarms
- Backup and Restoration
- Log Management
- Publish-Subscribe
- SSIS
- Data Migration (New)
- Data Migration (Legacy)
- Practical Tutorial
- API Documentation
- History
- Introduction
- API Category
- Sales and fee related APIs
- Network management related APIs
- Account management related APIs
- Instance Management APIs
- Data security encryption related APIs
- Parameter configuration related APIs
- Log management related APIs
- Extended Event APIs
- Read only instance management related APIs
- Backup APIs
- Rollback APIs
- Data migration (cold standby migration) related APIs
- CreateBackupMigration
- ModifyBackupMigration
- StartBackupMigration
- DescribeBackupMigration
- DeleteBackupMigration
- DescribeUploadBackupInfo
- CreateIncrementalMigration
- ModifyIncrementalMigration
- StartIncrementalMigration
- DescribeIncrementalMigration
- DescribeBackupCommand
- DescribeBackupUploadSize
- DeleteIncrementalMigration
- Data migration (DTS old version) related APIs
- Making API Requests
- Database APIs
- Other APIs
- Data Types
- Error Codes
- FAQs
- Overview
- Model Selection
- Pricing and Selection
- Connection and Network
- Account and Permission
- Backup and Rollback
- Data Migration
- Publish/Subscribe
- Read-Only Instance
- Version and Architecture Upgrade
- Disk Space and Specification Adjustment
- Monitoring and Alarms
- Log
- Parameter Modification
- Features
- Performance/Space/Memory
- Service Agreement
- Performance Evaluation
- Glossary
- Contact Us
Resource-level permission can be used to specify which resources a user can manipulate. TencentDB for SQL Server supports certain resource-level permissions. This means that for TencentDB for SQL Server operations that support resource-level permission, you can control the time when a user is allowed to perform operations or to use specified resources. The following table describes the types of resources that can be authorized in CAM.
Resource Type | Resource Description Method in Authorization Policy |
TencentDB instance-related resource | qcs::sqlserver:$region:$account:instance/*qcs::sqlserver:$region:$account:instance/$instanceId |
TencentDB for SQL Server supports resource-level authorization. You can allow a sub-account to have API permissions for specific resources. The table below lists the TencentDB API operations which currently support resource-level permission control as well as the resources and condition keys supported by each operation. When specifying a resource path, you can use the "*" wildcard in the path.
Any TencentDB API operation not listed in the table does not support resource-level permission. For such an operation, you can still authorize a user to perform it, but you must specify*as the resource element in the policy statement.
API Name | Description | Six-segment Example of Resource |
CreateAccount | Creates an account | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
CreateBackup | Creates a backup | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
CreateDB | Creates a database | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
DeleteAccount | Deletes an account | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
DeleteDB | Drops a database | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
DescribeAccounts | Queries the account list | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
DescribeBackups | Queries the backup list | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
DescribeDatabaseNames | Queries database names | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
DescribeDBInstances | Queries the instance list | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
DescribeDBs | Queries the database list | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
DescribeInstanceTasks | Queries instance tasks | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
DescribeRollbackTime | Queries the time range available for rollback | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
DescribeSlowlogs | Queries the slow log list | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
InquiryPriceRenewDBInstance | Queries the renewal price of an instance | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
InquiryPriceUpgradeDBInstance | Queries the upgrade price of an instance | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
ModifyAccountPrivilege | Modifies account permissions | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
ModifyAccountRemark | Modifies account remarks | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
ModifyBackupStrategy | Modifies the time for cold backup | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
ModifyDatabasePrivilege | Modifies database permissions | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
ModifyDBInstanceName | Renames an instance | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
ModifyDBInstanceProject | Modifies an instance project | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
ModifyDBName | Renames a database | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
ModifyDBRemark | Modifies database remarks | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
RenewDBInstance | Renews an instance | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
ResetAccountPassword | Resets an account password | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
RestartDBInstance | Restarts an instance | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
RestoreInstance | Restores a cold backup instance | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
RollbackInstance | Rolls back an instance | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
TerminateDBInstance | Terminates an instance | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
UpgradeDBInstance | Upgrades an instance | ``qcs::sqlserver:$region:$account:instance/$instanceId````qcs::sqlserver:$region:$account:instance/*`` |
Yes
No
Was this page helpful?