- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Overview
- Users
- Access Key
- User Groups
- Role
- Identity Provider
- SSO Overview
- Practical Scenarios for SSO
- User-Based SSO
- Role-Based SSO
- Overview
- Overview of SAML Role-Based SSO
- Overview of OIDC Role-Based Single Sign-On
- SAML 2.0-Based Federation
- Accessing Tencent Cloud Console as SAML 2.0 Federated Users
- Creating a SAML IdP
- Creating an OIDC Identity Provider
- Managing IdPs
- Azure Active Directory Single Sign-On
- OneLogin Single Sign-On
- Okta Single Sign-On
- ADFS SSO to Tencent Cloud
- Implementing OIDC-Based Role-Based SSO
- Policies
- Permissions Boundary
- Troubleshooting
- Downloading Security Analysis Report
- CAM-Enabled Role
- Overview
- Compute
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- CAM-Enabled API
- Overview
- Compute
- Edge Computing
- Container
- Distributed cloud
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Endpoint Security
- Data Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Image Creation
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Middleware
- Communication
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- More
- Practical Tutorial
- Security Practical Tutorial
- Multi-Identity Personnel Permission Management
- Authorizing Certain Operations by Tag
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Reviewing Employee Operation Records on Tencent Cloud
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- During tag-based authentication, only tag key matching is supported
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- Authorizing Sub-account Full Access to COS Resources under the Account
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- Authorizing Sub-account Read-only Access to VPCs
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- User APIs
- DescribeSafeAuthFlagColl
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- UpdateAccessKey
- DeleteAccessKey
- CreateAccessKey
- Role APIs
- GetRole
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- Data Types
- Error Codes
- FAQs
- Glossary
- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Overview
- Users
- Access Key
- User Groups
- Role
- Identity Provider
- SSO Overview
- Practical Scenarios for SSO
- User-Based SSO
- Role-Based SSO
- Overview
- Overview of SAML Role-Based SSO
- Overview of OIDC Role-Based Single Sign-On
- SAML 2.0-Based Federation
- Accessing Tencent Cloud Console as SAML 2.0 Federated Users
- Creating a SAML IdP
- Creating an OIDC Identity Provider
- Managing IdPs
- Azure Active Directory Single Sign-On
- OneLogin Single Sign-On
- Okta Single Sign-On
- ADFS SSO to Tencent Cloud
- Implementing OIDC-Based Role-Based SSO
- Policies
- Permissions Boundary
- Troubleshooting
- Downloading Security Analysis Report
- CAM-Enabled Role
- Overview
- Compute
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- CAM-Enabled API
- Overview
- Compute
- Edge Computing
- Container
- Distributed cloud
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Endpoint Security
- Data Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Image Creation
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Middleware
- Communication
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- More
- Practical Tutorial
- Security Practical Tutorial
- Multi-Identity Personnel Permission Management
- Authorizing Certain Operations by Tag
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Reviewing Employee Operation Records on Tencent Cloud
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- During tag-based authentication, only tag key matching is supported
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- Authorizing Sub-account Full Access to COS Resources under the Account
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- Authorizing Sub-account Read-only Access to VPCs
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- User APIs
- DescribeSafeAuthFlagColl
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- UpdateAccessKey
- DeleteAccessKey
- CreateAccessKey
- Role APIs
- GetRole
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- Data Types
- Error Codes
- FAQs
- Glossary
Fundamental information
| Product | Abbreviation in CAM | Console | Authorization by Tag | Authorization Granularity | IP Restriction |
|---|---|---|---|---|---|
| Database Management Console | dmc | Supported | not supported | Resource level | Partially supported |
Note：
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
API authorization granularity
Two authorization granularity levels of API are supported: resource level, and operation level.
- Resource level: It supports the authorization of a specific resource.
- Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.
Write operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| ApproveWorkOrder | Approve-Work-Order | Resource level | qcs::dmc::uin/${uin}:resource/${Resource} | Supported |
| BatchGrantPermissionsToUsers | BatchGrantPermissionsToUsers | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| BindRuleTemplate | BindRuleTemplate | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | not supported |
| CancelWorkOrder | Cancel-Work-Order | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| CheckWorkOrder | Check-Work-Order | Resource level | qcs::dmc::uin/${uin}:resource/${Resource} | Supported |
| ClearJoinSpace | ClearJoinSpace | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| CloseSql | CloseSql | Operation level | * | Supported |
| CreateAITaskFeedback | CreateAITaskFeedback | Operation level | * | Supported |
| CreateDBAIQATask | Create DB AI QA task | Operation level | * | Supported |
| CreateDataSource | CreateDataSource | Operation level | * | Supported |
| CreateExportJob | CreateExportJob | Operation level | * | Supported |
| CreateExportOrder | CreateExportOrder | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| CreateExportTask | This interface (CreateExportTask) is used for create export task. | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| CreateFavoriteDatabase | CreateFavoriteDatabase | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| CreateFavoriteTable | CreateFavoriteTable | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| CreateImportJob | CreateImportJob | Operation level | * | Supported |
| CreateImportOrder | CreateImportOrder | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| CreateImportTask | This interface (CreateImportTask) is used for create import task. | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| CreateInstanceAIInsightTask | CreateInstanceAIInsightTask | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | not supported |
| CreateJoinFavoriteDatabase | CreateJoinFavoriteDatabase | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| CreateJoinFavoriteTable | CreateJoinFavoriteTable | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| CreateJoinSpace | CreateJoinSpace | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| CreateJoinUserSql | CreateJoinUserSql | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| CreateManagedResource | Create Managed Resource | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| CreateMetaResource | Create MetaResource | Resource level | qcs::dmc:${Region}:uin/${uin}:resource/${ResourceId} | Supported |
| CreatePermissionApplyOrder | This interface (CreatePermissionApplyOrder) is used to create permission application work orders | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| CreateQuickLogin | Create QuickLogin | Operation level | * | Supported |
| CreateQuickLoginForFreePassword | Create a quick login or use it for temporary login - password-free login scenario | Operation level | * | Supported |
| CreateQuickLoginFromManagedResource | Create Quick Login From Managed Resource | Operation level | * | Supported |
| CreateQuickLoginFromMetaResource | Create Quick Login From MetaResource | Resource level | qcs::dmc:${Region}:uin/${uin}:resource/${ResourceId} | Supported |
| CreateResourceMark | Create Resource Mark | Operation level | * | Supported |
| CreateRuleTemplate | Create-Rule-Template | Operation level | * | Supported |
| CreateSQLModifyOrder | Create-SQL-Modify-Order | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| CreateSqlAITask | CreateSqlAITask | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| CreateTableStructureComparison | Create Table Structure Comparison | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| CreateUserSql | CreateUserSql | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DeleteFavoriteDatabase | DeleteFavoriteDatabase | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| DeleteFavoriteTable | DeleteFavoriteTable | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| DeleteJoinFavoriteDatabase | DeleteJoinFavoriteDatabase | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DeleteJoinFavoriteTable | DeleteJoinFavoriteTable | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DeleteJoinSpace | DeleteJoinSpace | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DeleteJoinUserSql | DeleteJoinUserSql | Operation level | * | Supported |
| DeletePermissionFromUsers | This interface (DeletePermissionFromUsers) is used for revoke DB auth. | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| DeleteResourceMark | Delete Resource Mark | Operation level | * | Supported |
| DeleteRuleTemplate | Delete-Rule-Template | Operation level | * | Supported |
| DeleteUserSql | DeleteUserSql | Operation level | * | Supported |
| DestroyDataSources | DestroyDataSources | Operation level | * | Supported |
| DestroyManagedResources | Destroy Managed Resources | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DestroyMetaResources | Destroy MetaResources | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| DestroyQuickLogin | Destroy QuickLogin | Operation level | * | Supported |
| DestroyTableStructureComparison | Destroy Table Structure Comparison | Operation level | * | Supported |
| DuplicateRuleTemplate | Duplicate-Rule-Template | Operation level | * | Supported |
| ExecuteCommonSql | ExecuteCommonSql | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| ExecuteJoinSql | ExecuteJoinSql | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| ExecuteSessionSql | ExecuteSessionSql | Operation level | * | Supported |
| ExecuteSql | ExecuteSql | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| ExecuteWorkOrder | Execute-Work-Order | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| GenerateTableStructureModificationSQL | Generate Table Structure Modification SQL | Operation level | * | Supported |
| GrantPermissionsToUsers | This interface (GrantPermissionsToUsers) is used to grant user permissions | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| ImportSamplesForVectorDB | ImportSamplesForVectorDB | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| KillJoinSql | KillJoinSql | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| LoginDMCSession | LoginDMCSession | Operation level | * | not supported |
| LoginResource | LoginResource | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| ModifyDataSource | ModifyDataSource | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| ModifyDownloadAuthConfig | Full Update Download Configuration Options | Operation level | * | Supported |
| ModifyExportTaskOrder | This interface (ModifyExportTaskOrder) is used for modify export order information. | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| ModifyImportTaskOrder | This interface (ModifyImportTaskOrder) is used for modify import order information. | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| ModifyJoinUserSql | ModifyJoinUserSql | Operation level | * | Supported |
| ModifyManagedResource | Modify Managed Resource | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| ModifyMetaResource | Modify MetaResource | Resource level | qcs::dmc:${Region}:uin/${uin}:resource/${ResourceId} | Supported |
| ModifyOpsRuleTemplate | ModifyOpsRuleTemplate | Operation level | * | Supported |
| ModifyQuickLogin | Modify QuickLogin | Operation level | * | Supported |
| ModifyResourceMark | Modify Resource Mark | Operation level | * | Supported |
| ModifyRuleTemplate | Modify-Rule-Template | Operation level | * | Supported |
| ModifySQLWorkOrder | Modify-SQL-Work-Order | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| ModifyTableStructureComparison | Modify Table Structure Comparison | Operation level | * | Supported |
| ModifyUserSql | ModifyUserSql | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| ModifyWorkOrder | Modify-Work-Order | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| OpenSql | OpenSql | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| RedoTableStructureComparison | Redo Table Structure Comparison | Operation level | * | Supported |
| RunSessionHeartbeat | RunSessionHeartbeat | Operation level | * | Supported |
| SetJoinSpaceResources | SetJoinSpaceResources | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| StartTableStructureComparison | Start Table Structure Comparison | Operation level | * | Supported |
| TerminateImportExportTask | This interface (TerminateImportExportTask) is used for terminate export and import task | Operation level | * | Supported |
| TerminateTableStructureComparison | Terminate Table Structure Comparison | Operation level | * | Supported |
| TerminateWorkOrderExecute | Terminate-Work-Order-Execute | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| UnbindRuleTemplate | Unbind-Rule-Template | Operation level | * | not supported |
| UndoDestroyMetaResources | Undo delete meta resource | Resource level | qcs::dmc:${Region}:uin/${uin}:resource/${ResourceId} | Supported |
Read operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| CheckCamGrantStatus | CheckCamGrantStatus | Operation level | * | Supported |
| CheckConnection | CheckConnection | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| CheckPrivilegesAndConnection | Check Privileges And Connection | Operation level | * | Supported |
| DescribeAsyncJoinSql | DescribeAsyncJoinSql | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeAsyncSql | This interface (DescribeAsyncSql) is used to obtain asynchronous execution Sql results | Operation level | * | Supported |
| DescribeAutoCheckedRuleTemplate | Describe-Auto-Checked-Rule-Template | Operation level | * | Supported |
| DescribeBoundResource | Describe-Bound-Resource | Operation level | * | Supported |
| DescribeCheckStaffTemplate | Describe-Check-Staff-Template | Operation level | * | Supported |
| DescribeCosConfig | DescribeCosConfig | Operation level | * | Supported |
| DescribeCosDownloadUrl | This interface (DescribeCosDownloadUrl) is used for get cos-file download address. | Operation level | * | Supported |
| DescribeDBAIQATask | Describe DB AI QA task | Operation level | * | Supported |
| DescribeDataSources | DescribeDataSources | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| DescribeDownloadAuthConfig | Get the download configuration | Operation level | * | Supported |
| DescribeExecuteInfo | Describe-Execute-Info | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeExecuteProgress | Describe-Execute-Progress | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeExportTaskAnalysisInfo | This interface (DescribeExportTaskAnalysisInfo) is used for get export order analysis information. | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeExportTaskInfo | This interface (DescribeExportTaskInfo) is used for get export task information. | Operation level | * | Supported |
| DescribeFavoriteDatabases | DescribeFavoriteDatabases | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| DescribeFavoriteTables | DescribeFavoriteTables | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| DescribeHistoryExecInfoList | Describe History Exec InfoL ist | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeImportExportTaskInfoList | This interface (DescribeImportExportTaskInfoList) is used for get export and import task list | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | Supported |
| DescribeImportTaskAnalysisInfo | This interface (DescribeImportTaskAnalysisInfo) is used for get import order analysis information. | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeImportTaskInfo | This interface (DescribeImportTaskInfo) is used for get import task information. | Operation level | * | Supported |
| DescribeInceptionRuleTemplate | Describe-Inception-Rule-Template | Operation level | * | Supported |
| DescribeInstanceAIInsightHistory | DescribeInstanceAIInsightHistory | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | not supported |
| DescribeInstanceAIInsightTask | DescribeInstanceAIInsightTask | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | not supported |
| DescribeJoinFavoriteDatabases | DescribeJoinFavoriteDatabases | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeJoinFavoriteTables | DescribeJoinFavoriteTables | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeJoinSpaceDetail | DescribeJoinSpaceDetail | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeJoinUserSql | DescribeJoinUserSql | Operation level | * | Supported |
| DescribeJoinUserSqlList | DescribeJoinUserSqlList | Operation level | * | Supported |
| DescribeManagedResourceDetail | Describe Managed Resource Detail | Operation level | * | Supported |
| DescribeManagedResourcePackageInfo | Describe Managed Resource PackageInfo | Operation level | * | Supported |
| DescribeManagedResources | Describe Managed Resources | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeMetaResource | Describe MetaResource | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeMetaResources | Describe MetaResources | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeMetaResourcesTiny | Query resource meta information (only used for tag service callbacks on the PaaS platform) | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeOperationLogs | DescribeOperationLogs | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeOpsRuleTemplate | DescribeOpsRuleTemplate | Operation level | * | Supported |
| DescribePermissionApplyOrder | This interface (DescribePermissionApplyOrder) is used for get order information that auth to DB. | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribePermissionsOfUser | This interface (DescribePermissionsOfUser) is used to obtain direct permissions for all instances/DB owned by the user | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeQuickLogin | Describe QuickLogin | Operation level | * | Supported |
| DescribeResourceMarks | Describe Resource Marks | Operation level | * | Supported |
| DescribeRuleTemplateBaseInfo | Describe-Rule-Template-Base-Info | Operation level | * | Supported |
| DescribeSQLSemanticCheckResult | Describe-SQL-Semantic-Check-Result | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeSQLSyntaxCheckResult | Describe-SQL-Syntax-Check-Result | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeSQLWorkOrder | Describe-SQL-Work-Order | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeSqlAITask | DescribeSqlAITask | Operation level | * | Supported |
| DescribeSqlWindowHistory | This interface (DescribeSqlWindowHistory) is used to obtain SQL window history | Resource level | qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} | not supported |
| DescribeTableStructureComparisonDetail | Describe Table Structure Comparison Detail | Operation level | * | Supported |
| DescribeTableStructureForSubTask | Describe Table Structure For Sub Task | Operation level | * | Supported |
| DescribeUserSql | DescribeUserSql | Operation level | * | Supported |
| DescribeUserSqlList | DescribeUserSqlList | Operation level | * | Supported |
| DescribeWorkOrder | Describe-Work-Order | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeWorkOrderCheckInfo | Describe-Work-Order-Check-Info | Resource level | qcs::dmc::uin/${uin}:resource/${ResoureId} | Supported |
| IsInWhiteList | IsInWhiteList | Resource level | qcs::dmc::uin/${uin}:resource/${ResoureId} | Supported |
List Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeApplyWorkOrderList | Describe-Apply-Work-Order-List | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeDBAIQAHistory | Describe DB AI QA history task list | Operation level | * | not supported |
| DescribeDoneWorkOrderList | Describe-Done-Work-Order-List | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeExecInfoList | Describe-Exec-Info-List | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeHistoryWorkOrderList | Describe-History-Work-Order-List | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeJoinSpaces | DescribeJoinSpaces | Operation level | * | Supported |
| DescribeRuleTemplateList | Describe-Rule-Template-List | Operation level | * | Supported |
| DescribeTableStructureComparisonSubTasks | Describe Table Structure Comparison SubTasks | Operation level | * | Supported |
| DescribeTableStructureComparisons | Describe Table Structure Comparisons | Operation level | * | Supported |
| DescribeTableStructureModificationSQL | Describe Table Structure Modification SQL | Operation level | * | Supported |
| DescribeTodoWorkOrderList | Describe-Todo-Work-Order-List | Resource level | qcs::dmc::uin/${uin}:resource/${ResourceId} | Supported |
| DescribeWindowRuleTemplate | Describe-Window-Rule-Template | Operation level | * | Supported |
Yes
No
Was this page helpful?