tencent cloud

All product documents
Cloud Access Management
Cloud Data Warehouse for PostgreSQL
Last updated: 2025-03-26 09:56:27
Cloud Data Warehouse for PostgreSQL
Last updated: 2025-03-26 09:56:27

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
Cloud Data Warehouse PostgreSQL cdwpg Supported Supported Resource level Supported

Note:

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
AbortQuery AbortQuery Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
AdminClusterOutnetAddres AdminClusterOutnetAddress Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
AlterSuperUser altersuperuser Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
ChangeClusterResourceType ChangeClusterResourceType Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
CreateCluster CreateCluster Operation level * Supported
CreateClusterConfigs CreateClusterConfigs Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
CreateFdwAndGrant CreateFdwAndGrant Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
CreateInstanceByApi CreateInstance Operation level * Supported
CreateManualBackUp CreateManualBackUp Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
CreateOrEditAuditPrivileges CreateOrEditAuditPrivileges Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
CreateTableBackupTask CreateTableBackupTask Resource level qcs::cdwpg:${Region}:uin/:cdwpg-instance/${InstanceId} Supported
CreateVacuumTask CreateVacuumTask Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
CreateVpcLink CreateVpcLink Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DeleteBackupData DeleteBackupData Resource level qcs::cdwpg:${Region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
DeleteCluster DeleteCluster Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DeleteClusterConfig DeleteClusterConfig Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DeleteVacuumTask DeleteVacuumTask Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DeleteVpcLink DeleteVpcLink Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DestroyInstance DestroyInstance Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DestroyInstanceByApi DestroyInstanceByApi Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
ExpandClusterSize ExpandClusterSize Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
HandlerResourceQueue HandlerResourceQueue Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
ModifyClusterBasic ModifyClusterBasic Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
ModifyClusterConfig ModifyClusterConfig Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
ModifyClusterSize ModifyClusterSize Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
ModifyClusterSubnet ModifyClusterSubnet Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
ModifyClusterUserPassword ModifyClusterUserPassword Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
ModifyConcurrent ModifyConcurrent Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
ModifyDBParameters ModifyDBParameters Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
ModifyInstance ModifyInstance Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
ModifyInstanceSyncMode ModifyInstanceSyncMode Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
ModifyResourceManager ModifyResourceManager Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
ModifyTableBackupTask ModifyTableBackupTask Resource level qcs::cdwpg:${Region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
ModifyUserHba ModifyUserHba Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
ModifyVacuumTask ModifyVacuumTask Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
RebootCluster RebootCluster Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
RecoverInstanceByApi RecoverInstanceByApi Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
ReleaseReadOnly ReleaseReadOnly Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
ResetAccountPassword ResetAccountPassword Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
RestartInstance RestartInstance Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
ScaleOutInstance ScaleOutInstance Operation level * Supported
ScaleUpInstance ScaleUpInstance Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
SetBackUpRules SetBackUpRules Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
SetHbaConfigList SetHbaConfigList Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
SwitchNodeWithManual SwitchNodeWithManual Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
TurnOnKms TurnOnKms Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
TurnOnOrOffAudit TurnOnOrOffAudit Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
TurnOnOrOffLogToCos TurnOnOrOffLogToCos Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
TurnOnOrOffTableBackup TurnOnOrOffTableBackup Resource level qcs::cdwpg:${Region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
UpgradeDetail UpgradeDetail Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
UpgradeInstance UpgradeInstance Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
UpgradeRollback UpgradeRollback Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
CheckPermission CheckPermission Operation level * Supported
CheckWhiteList CheckWhiteList Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeAccounts DescribeAccounts Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeAssociatedHdfsList get HDFS authorization list Resource level qcs::cdwpg:${region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeAuditDBRole DescribeAuditDBRole Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeAuditPrivileges DescribeAuditPrivileges Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeAvailableRecoveryNodeSpec DescribeAvailableRecoveryNodeSpec Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeAvailableRecoveryTime DescribeAvailableRecoveryTime Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeAvailableRecoveryTimePoint DescribeAvailableRecoveryTimePoint Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeBackUpDetails DescribeBackUpDetails Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeBackUpList DescribeBackUpList Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeBackUpOpenStatus DescribeBackUpOpenStatus Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeBackUpRules DescribeBackUpRules Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeBillingParams DescribeBillingParams Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeClusterConfigs DescribeClusterConfigs Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeClusterExtend DescribeClusterExtend Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeClusterResourceQueueList DescribeClusterResourceQueueList Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeClusterStatus DescribeClusterStatus Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeClusters DescribeClusters Resource level qcs::cdwpg:${region}:uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeClustersForBalad DescribeClustersForBalad Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeClustersLimit DescribeClustersLimit Resource level qcs::cdwpg:${region}:uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeClustersNodesInfo DescribeClustersNodesInfo Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeClustersStatistics DescribeClustersStatistics Operation level * Supported
DescribeConcurrent get the concurrency of vacuum Resource level qcs::cdwpg:${region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeConfTemplates DescribeConfTemplates Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeDBConfigHistory DescribeDBConfigHistory Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeDBParams DescribeDBParams Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeDatabases DescribeDatabases Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeDbStatus DescribeDbStatus Resource level qcs::cdwpg:${region}:uin/${uin}:cdwpg-instance/${clusterIdentifier} Supported
DescribeErrorLog DescribeErrorLog Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeErrorLogList DescribeErrorLogList Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeEvents DescribeEvents Operation level * Supported
DescribeGoodsDetail DescribeGoodsDetail Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeGpStatus DescribeGpStatus Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeHbaConfigList DescribeHbaConfigList Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeHdfsItems DescribeHdfsItems Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeHdfsList DescribeHdfsList Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeHdfsNames DescribeHdfsNames Resource level qcs::cdwpg:${region}:uin/:cdwpg-instance/${InstanceId} Supported
DescribeHistoryQueries DescribeHistoryQueries Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeHistoryQuery DescribeHistoryQuery Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeInstance DescribeInstance Resource level qcs::cdwpg:${Region}:uin/:cdwpg-instance/${InstanceId} Supported
DescribeInstanceDetails DescribeInstanceDetails Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeInstanceInfo DescribeInstanceInfo Resource level qcs::cdwpg:${region}:uin/:cdwpg-instance/${InstanceId} Supported
DescribeInstanceMachinesForBarad DescribeInstanceMachinesForBarad Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeInstanceNodes DescribeInstanceNodes Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeInstanceNodesForBarad DescribeInstanceNodesForBarad Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeInstanceOperations DescribeInstanceOperations Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeInstanceState DescribeInstanceState Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeInstances DescribeInstances Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeInstancesBarad DescribeInstancesBarad Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeInstancesNew DescribeInstancesNew Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeKmsStatus get instance kms status Resource level qcs::cdwpg:${region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeLogToCosStatus DescribeLogToCosStatus Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeNodeConfigInfo DescribeNodeConfigInfo Operation level * Supported
DescribePermission DescribePermission Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeRealtimeQueries DescribeRealtimeQueries Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeRealtimeQuery DescribeRealtimeQuery Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeRegionEngineVersion DescribeRegionEngineVersion Resource level qcs::cdwpg:${region}:uin/:cdwpg-instance/${InstanceId} Supported
DescribeRegionZone DescribeRegionZone Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeResidual DescribeResidual Operation level * Supported
DescribeSegNodeMaxCount DescribeSegNodeMaxCount Operation level * Supported
DescribeSlowLog get instance slowlog Resource level qcs::cdwpg:${region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeSpec DescribeSpec Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeSpecResidual DescribeSpecResidual Operation level * Supported
DescribeSqueezeTasks DescribeSqueezeTasks Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeTableBackupStatus DescribeTableBackupStatus Resource level qcs::cdwpg:${Region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeTableBackupTask DescribeTableBackupTask Resource level qcs::cdwpg:${Region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeTableBackupTasks DescribeTableBackupTasks Resource level qcs::cdwpg:${Region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeTableCycleBackupTasks DescribeTableCycleBackupTasks Resource level qcs::cdwpg:${Region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeTables DescribeTables Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeUpgradeList DescribeUpgradeList Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeUserHba DescribeUserHba Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeUserHbaConfig DescribeUserHbaConfig Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeVacuumTaskDetails DescribeVacuumTaskDetails Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeVacuumTasks Get the vacuum task list Resource level qcs::cdwpg:${region}:uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeValidRegionAndZones DescribeValidRegionAndZones Operation level * Supported
DescribeVersionByRecoveryTime DescribeVersionByRecoveryTime Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeVpcLinks DescribeVpcLinks Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${ClusterIdentifier} Supported
DescribeWhiteList DescribeWhiteList Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
DescribeZones DescribeZones Operation level * Supported
DescribeZonesResource DescribeZonesResource Operation level * Supported
GetAccessGroupsAssociated GetAccessGroupsAssociated Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
GetAccessGroupsDisassociated GetAccessGroupsDisassociated Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
GetHdfsAssociated GetHdfsAssociated Resource level qcs::cdwpg:${region}:uin/:cdwpg-instance/${InstanceId} Supported
GetHdfsDisassociated cdwpg-instance/${InstanceId} Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
OpenOrCloseBackUpConfig OpenOrCloseBackUpConfig Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
SearchAuditLogs SearchAuditLogs Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
ShowTableBloat ShowTableBloat Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
SqueezeTableSpace SqueezeTableSpace Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
TerminateInstance TerminateInstance Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported

List Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeSimpleInstances Get a list of industry professional information Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported

Other Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
StartVacuumTask StartVacuumTask Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
StopVacuumTask StopVacuumTask Resource level qcs::cdwpg::uin/${uin}:cdwpg-instance/${InstanceId} Supported
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 available.

7x24 Phone Support