tencent cloud

All product documents
Cloud Access Management
Application Performance Management
Last updated: 2025-03-26 09:55:01
Application Performance Management
Last updated: 2025-03-26 09:55:01

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
Application Performance Management apm Supported Supported Resource level Supported

Note:

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
CheckRoleNameExist CheckRoleNameExist Operation level * Supported
CheckServiceDashboardConfig CheckServiceDashboardConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeAgentInfo query service agent information Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeAgentList DescribeAgentList Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeAllQueryViews DescribeAllQueryViews Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeApmAgent DescribeApmAgent Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeApmAllVulCount return user\'s all vul count Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeApmApplicationConfig DescribeApmApplicationConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmAssociation DescribeApmAssociation Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmComboInfo DescribeApmComboInfo Operation level * Supported
DescribeApmConsumption consumption Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeApmDefaultInstance get default instance Operation level * Supported
DescribeApmInfoByAppId return appId infomation Operation level * Supported
DescribeApmInstanceOverview Querying APM instance summary inform Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeApmInstances DescribeApmInstances Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeApmPrometheusRule DescribeApmPrometheusRule Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmRegions DescribeApmRegions Operation level * Supported
DescribeApmSQLInjectionDetail DescribeApmSQLInjectionDetail Resource level qcs::apm::uin/${uin}:DescribeApmSQLInjectionDetail Supported
DescribeApmSampleConfig DescribeApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmService get apm service information Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId}
qcs::apm:${region}:uin/${uin}:apm-service/${ServiceID}
Supported
DescribeApmServiceBrief get service list Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId}
qcs::apm:${region}:uin/${uin}:apm-service/${ServiceID}
Supported
DescribeApmServiceMetric get apm service metric Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId}
qcs::apm:${region}:uin/${uin}:apm-service/${ServiceID}
Supported
DescribeApmSupportView get applicaton support views Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmVulnerabilityCount DescribeApmVulnerabilityCount Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeApmVulnerabilityDetail DescribeApmVulnerabilityDetail Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeDBTagValues Get the database tag value Operation level * Supported
DescribeEventData Get instance gcLog log or thread deadlock related information Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeExistInstances Query whether there is an APM instance being reported by the user Operation level * Supported
DescribeFlameGraphData Get flame graph data Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeGeneralApmApplicationConfig DescribeGeneralApmApplicationConfig Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeGeneralMetricData Get the general interface for indicator data. The user uploads the request parameters as needed, and the corresponding indicator data is returned. Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeGeneralOTSpanList DescribeGeneralOTSpanList Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeGeneralSpanList DescribeGeneralSpanList Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeGrafanaMetricData DescribeGrafanaMetricData Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeHistoryFlameGraphList DescribeHistoryFlameGraphList Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeInstanceBriefs DescribeInstanceBriefs Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeMetricLineData DescribeMetricLineData Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeMetricPointData Describe metric point data Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeMetricRecords DescribeMetricRecords Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeOPRAllVulCount Query the number of vulnerabilities under the user. Operation level * Supported
DescribeProfileDetail DescribeProfileDetail Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeProfileTasks DescribeProfileTasks Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeQueryView DescribeQueryView Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeResources Query user available prepaid resource packs Operation level * Supported
DescribeService DescribeService Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeServiceDashboardConfig DescribeServiceDashboardConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeServiceLink Query service upstream and downstream Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeServiceNodes DescribeServiceNodes Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeServiceOverview DescribeServiceOverview Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeSpanTagList DescribeSpanTagList Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeSpanThreadAnatomyList Query thread profiling information Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeSpanTreeByID DescribeSpanTreeByID Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeSqlMetricData Get the database-related indicator interface. The user uploads the request parameters as needed, and the corresponding indicator data is returned. Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeTKEService get TKE reporting service information Operation level * Supported
DescribeTagCountValues DescribeTagCountValues Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeTagValues DescribeTagValues Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeThreadDump Get thread detail information Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DescribeTopology DescribeTopology Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeTopologyMetricLineData DescribeTopologyMetricLineData Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeTopologyNew DescribeTopologyNew Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeTopologyView get topology view Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeTraceAnalyzeSpanList Query trace time-consuming analysis information Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeTraceList DescribeTraceList Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
CreateApmInstance CreateApmInstance Operation level * Supported
CreateApmPrometheusRule CreateApmPrometheusRule Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
CreateApmSampleConfig CreateApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
CreateEventTask Create event task Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
CreateProfileTask CreateProfileTask Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
CreateQueryView CreateQueryView Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DeleteApmSampleConfig DeleteApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DeleteQueryView DeleteQueryView Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
DeleteTopologyView delete topology view Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
ModifyApmApplicationConfig ModifyApmApplicationConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId}
qcs::apm:${Region}:uin/:apm-service/${ServiceID}
Supported
ModifyApmAssociation ModifyApmAssociation Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyApmDefaultInstance modify default instance Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
ModifyApmInstance ModifyApmInstance Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
ModifyApmPrometheusRule ModifyApmPrometheusRule Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyApmSampleConfig ModifyApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyApmService modify service information Operation level * Supported
ModifyEventSuggestion ModifyEventSuggestion Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
ModifyEventTask Modify Event Task Result Operation level * Supported
ModifyGeneralApmApplicationConfig Modify application configuration information Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
ModifyInstanceAssociation modify instance association Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
ModifyProfileTask ModifyProfileTask Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
ModifyQueryView ModifyQueryView Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
ModifyRenewalResource Enable/disable auto-renewal for APM prepaid resources Operation level * Supported
ModifyTopologyView modify topology view Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
OpenApmPaidVersion OpenApmPaidVersion Operation level * Supported
TerminateApmInstance TerminateApmInstance Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
TerminateApmService TerminateApmService Operation level * Supported

Other Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DeleteExpiredApplicationConfig DeleteExpiredApplicationConfig Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

7x24 Phone Support
Hong Kong, China
+852 800 906 020 (Toll Free)
United States
+1 844 606 0804 (Toll Free)
United Kingdom
+44 808 196 4551 (Toll Free)
Canada
+1 888 605 7930 (Toll Free)
Australia
+61 1300 986 386 (Toll Free)
EdgeOne hotline
+852 300 80699
More local hotlines coming soon