tencent cloud

All product documents
Cloud Access Management
Database Management Center
Last updated: 2025-03-26 09:58:39
Database Management Center
Last updated: 2025-03-26 09:58:39

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
Database Management Console dmc Supported Supported Resource level Partially supported

Note:

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
ApproveWorkOrder Approve-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${Resource} Supported
BatchGrantPermissionsToUsers BatchGrantPermissionsToUsers Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
BindRuleTemplate BindRuleTemplate Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
CancelCopilotLTask CancelCopilotLTask Operation level * not supported
CancelWorkOrder Cancel-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
CheckWorkOrder Check-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${Resource} Supported
ClearJoinSpace ClearJoinSpace Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
CloseSql CloseSql Operation level * Supported
CreateAITaskFeedback CreateAITaskFeedback Operation level * Supported
CreateCopilotExecuteSQLTask CreateCopilotExecuteSQLTask Operation level * Supported
CreateCopilotFetchResultTask CreateCopilotFetchResultTask Operation level * Supported
CreateCopilotModifySqlTask CreateCopilotModifySqlTask Operation level * Supported
CreateCopilotQATask CreateCopilotQATask Operation level * Supported
CreateCopilotReportAnalyseTask CreateCopilotReportAnalyseTask Operation level * Supported
CreateDBAIQATask Create DB AI QA task Operation level * Supported
CreateDataSource CreateDataSource Operation level * Supported
CreateExportJob CreateExportJob Operation level * Supported
CreateExportOrder CreateExportOrder Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
CreateExportTask This interface (CreateExportTask) is used for create export task. Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
CreateFavoriteDatabase CreateFavoriteDatabase Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
CreateFavoriteTable CreateFavoriteTable Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
CreateImportJob CreateImportJob Operation level * Supported
CreateImportOrder CreateImportOrder Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
CreateImportTask This interface (CreateImportTask) is used for create import task. Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
CreateInstanceAIInsightTask CreateInstanceAIInsightTask Operation level * Supported
CreateJoinFavoriteDatabase CreateJoinFavoriteDatabase Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
CreateJoinFavoriteTable CreateJoinFavoriteTable Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
CreateJoinSpace CreateJoinSpace Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
CreateJoinUserSql CreateJoinUserSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
CreateManagedResource Create Managed Resource Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
CreateMetaResource Create MetaResource Operation level * Supported
CreatePermissionApplyOrder This interface (CreatePermissionApplyOrder) is used to create permission application work orders Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
CreateQuickLogin Create QuickLogin Operation level * Supported
CreateQuickLoginForFreePassword Create a quick login or use it for temporary login - password-free login scenario Operation level * Supported
CreateQuickLoginFromManagedResource Create Quick Login From Managed Resource Operation level * Supported
CreateQuickLoginFromMetaResource Create Quick Login From MetaResource Resource level qcs::dmc:${Region}:uin/${uin}:resource/${ResourceId} Supported
CreateResourceMark Create Resource Mark Operation level * Supported
CreateRuleTemplate Create-Rule-Template Operation level * Supported
CreateSQLModifyOrder Create-SQL-Modify-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
CreateSqlAITask CreateSqlAITask Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
CreateTableStructureComparison Create Table Structure Comparison Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
CreateUserSql CreateUserSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DeleteFavoriteDatabase DeleteFavoriteDatabase Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
DeleteFavoriteTable DeleteFavoriteTable Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
DeleteJoinFavoriteDatabase DeleteJoinFavoriteDatabase Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DeleteJoinFavoriteTable DeleteJoinFavoriteTable Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DeleteJoinSpace DeleteJoinSpace Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DeleteJoinUserSql DeleteJoinUserSql Operation level * Supported
DeletePermissionFromUsers This interface (DeletePermissionFromUsers) is used for revoke DB auth. Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
DeleteResourceMark Delete Resource Mark Operation level * Supported
DeleteRuleTemplate Delete-Rule-Template Operation level * Supported
DeleteUserSql DeleteUserSql Operation level * Supported
DescribeCopilotHistorySessionList DescribeCopilotHistorySessionList Operation level * Supported
DescribeCopilotSessionDetail DescribeCopilotSessionDetail Operation level * Supported
DestroyDataSources DestroyDataSources Operation level * Supported
DestroyManagedResources Destroy Managed Resources Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DestroyMetaResources Destroy MetaResources Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
DestroyQuickLogin Destroy QuickLogin Operation level * Supported
DestroyTableStructureComparison Destroy Table Structure Comparison Operation level * Supported
DuplicateRuleTemplate Duplicate-Rule-Template Operation level * Supported
ExecuteCommonSql ExecuteCommonSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
ExecuteJoinSql ExecuteJoinSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
ExecuteSessionSql ExecuteSessionSql Operation level * Supported
ExecuteSql ExecuteSql Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
ExecuteWorkOrder Execute-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
GenerateTableStructureModificationSQL Generate Table Structure Modification SQL Operation level * Supported
GrantPermissionsToUsers This interface (GrantPermissionsToUsers) is used to grant user permissions Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
ImportSamplesForVectorDB ImportSamplesForVectorDB Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
KillJoinSql KillJoinSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
LoginDMCSession LoginDMCSession Operation level * not supported
LoginResource LoginResource Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
ModifyDataSource ModifyDataSource Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
ModifyDownloadAuthConfig Full Update Download Configuration Options Operation level * Supported
ModifyExportTaskOrder This interface (ModifyExportTaskOrder) is used for modify export order information. Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
ModifyImportTaskOrder This interface (ModifyImportTaskOrder) is used for modify import order information. Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
ModifyJoinUserSql ModifyJoinUserSql Operation level * Supported
ModifyManagedResource Modify Managed Resource Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
ModifyMetaResource Modify MetaResource Resource level qcs::dmc:${Region}:uin/${uin}:resource/${ResourceId} Supported
ModifyOpsRuleTemplate ModifyOpsRuleTemplate Operation level * Supported
ModifyQuickLogin Modify QuickLogin Operation level * Supported
ModifyResourceMark Modify Resource Mark Operation level * Supported
ModifyRuleTemplate Modify-Rule-Template Operation level * Supported
ModifySQLWorkOrder Modify-SQL-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
ModifyTableStructureComparison Modify Table Structure Comparison Operation level * Supported
ModifyUserSql ModifyUserSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
ModifyWorkOrder Modify-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
OpenSql OpenSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
RedoTableStructureComparison Redo Table Structure Comparison Operation level * Supported
RunSessionHeartbeat RunSessionHeartbeat Operation level * Supported
SetJoinSpaceResources SetJoinSpaceResources Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
StartTableStructureComparison Start Table Structure Comparison Operation level * Supported
TerminateImportExportTask This interface (TerminateImportExportTask) is used for terminate export and import task Operation level * Supported
TerminateTableStructureComparison Terminate Table Structure Comparison Operation level * Supported
TerminateWorkOrderExecute Terminate-Work-Order-Execute Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
UnbindRuleTemplate Unbind-Rule-Template Operation level * Supported
UndoDestroyMetaResources Undo delete meta resource Resource level qcs::dmc:${Region}:uin/${uin}:resource/${ResourceId} Supported

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
CheckCamGrantStatus CheckCamGrantStatus Operation level * Supported
CheckConnection CheckConnection Operation level * Supported
CheckPrivilegesAndConnection Check Privileges And Connection Operation level * Supported
DescribeAsyncJoinSql DescribeAsyncJoinSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeAsyncSql This interface (DescribeAsyncSql) is used to obtain asynchronous execution Sql results Operation level * Supported
DescribeAutoCheckedRuleTemplate Describe-Auto-Checked-Rule-Template Operation level * Supported
DescribeBoundResource Describe-Bound-Resource Operation level * Supported
DescribeCheckStaffTemplate Describe-Check-Staff-Template Operation level * Supported
DescribeCopilotExecuteSqlResult DescribeCopilotExecuteSqlResult Operation level * Supported
DescribeCopilotTask DescribeCopilotTask Operation level * Supported
DescribeCosConfig DescribeCosConfig Operation level * Supported
DescribeCosDownloadUrl This interface (DescribeCosDownloadUrl) is used for get cos-file download address. Operation level * Supported
DescribeDBAIQATask Describe DB AI QA task Operation level * Supported
DescribeDataSources DescribeDataSources Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
DescribeDownloadAuthConfig Get the download configuration Operation level * Supported
DescribeExecuteInfo Describe-Execute-Info Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeExecuteProgress Describe-Execute-Progress Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeExportTaskAnalysisInfo This interface (DescribeExportTaskAnalysisInfo) is used for get export order analysis information. Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeExportTaskInfo This interface (DescribeExportTaskInfo) is used for get export task information. Operation level * Supported
DescribeFavoriteDatabases DescribeFavoriteDatabases Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
DescribeFavoriteTables DescribeFavoriteTables Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
DescribeHistoryExecInfoList Describe History Exec InfoL ist Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeImportExportTaskInfoList This interface (DescribeImportExportTaskInfoList) is used for get export and import task list Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
DescribeImportTaskAnalysisInfo This interface (DescribeImportTaskAnalysisInfo) is used for get import order analysis information. Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeImportTaskInfo This interface (DescribeImportTaskInfo) is used for get import task information. Operation level * Supported
DescribeInceptionRuleTemplate Describe-Inception-Rule-Template Operation level * Supported
DescribeInstanceAIInsightHistory DescribeInstanceAIInsightHistory Operation level * Supported
DescribeInstanceAIInsightTask DescribeInstanceAIInsightTask Operation level * Supported
DescribeJoinFavoriteDatabases DescribeJoinFavoriteDatabases Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeJoinFavoriteTables DescribeJoinFavoriteTables Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeJoinSpaceDetail DescribeJoinSpaceDetail Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeJoinUserSql DescribeJoinUserSql Operation level * Supported
DescribeJoinUserSqlList DescribeJoinUserSqlList Operation level * Supported
DescribeManagedResourceDetail Describe Managed Resource Detail Operation level * Supported
DescribeManagedResourcePackageInfo Describe Managed Resource PackageInfo Operation level * Supported
DescribeManagedResources Describe Managed Resources Operation level * Supported
DescribeManagedSrcInstances Describe Managed SrcInstances Operation level * not supported
DescribeMetaResource Describe MetaResource Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeMetaResources Describe MetaResources Operation level * Supported
DescribeMetaResourcesTiny Query resource meta information (only used for tag service callbacks on the PaaS platform) Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeOperationLogs DescribeOperationLogs Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeOpsRuleTemplate DescribeOpsRuleTemplate Operation level * Supported
DescribePermissionApplyOrder This interface (DescribePermissionApplyOrder) is used for get order information that auth to DB. Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribePermissionsOfUser This interface (DescribePermissionsOfUser) is used to obtain direct permissions for all instances/DB owned by the user Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeProductWhiteList Describe Product White List Operation level * not supported
DescribeQuickLogin Describe QuickLogin Operation level * Supported
DescribeResourceMarks Describe Resource Marks Operation level * Supported
DescribeRuleTemplateBaseInfo Describe-Rule-Template-Base-Info Operation level * Supported
DescribeSQLSemanticCheckResult Describe-SQL-Semantic-Check-Result Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeSQLSyntaxCheckResult Describe-SQL-Syntax-Check-Result Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeSQLWorkOrder Describe-SQL-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeSqlAITask DescribeSqlAITask Operation level * Supported
DescribeSqlWindowHistory This interface (DescribeSqlWindowHistory) is used to obtain SQL window history Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
DescribeTableStructureComparisonDetail Describe Table Structure Comparison Detail Operation level * Supported
DescribeTableStructureForSubTask Describe Table Structure For Sub Task Operation level * Supported
DescribeUserSql DescribeUserSql Operation level * Supported
DescribeUserSqlList DescribeUserSqlList Operation level * Supported
DescribeWorkOrder Describe-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeWorkOrderCheckInfo Describe-Work-Order-Check-Info Resource level qcs::dmc::uin/${uin}:resource/${ResoureId} Supported
IsInWhiteList IsInWhiteList Resource level qcs::dmc::uin/${uin}:resource/${ResoureId} Supported

List Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeApplyWorkOrderList Describe-Apply-Work-Order-List Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeDBAIQAHistory Describe DB AI QA history task list Operation level * Supported
DescribeDoneWorkOrderList Describe-Done-Work-Order-List Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeExecInfoList Describe-Exec-Info-List Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeHistoryWorkOrderList Describe-History-Work-Order-List Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeJoinSpaces DescribeJoinSpaces Operation level * Supported
DescribeRuleTemplateList Describe-Rule-Template-List Operation level * Supported
DescribeTableStructureComparisonSubTasks Describe Table Structure Comparison SubTasks Operation level * Supported
DescribeTableStructureComparisons Describe Table Structure Comparisons Operation level * Supported
DescribeTableStructureModificationSQL Describe Table Structure Modification SQL Operation level * Supported
DescribeTodoWorkOrderList Describe-Todo-Work-Order-List Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
DescribeWindowRuleTemplate Describe-Window-Rule-Template Operation level * Supported
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 available.

7x24 Phone Support
Hong Kong, China
+852 800 906 020 (Toll Free)
United States
+1 844 606 0804 (Toll Free)
United Kingdom
+44 808 196 4551 (Toll Free)
Canada
+1 888 605 7930 (Toll Free)
Australia
+61 1300 986 386 (Toll Free)
EdgeOne hotline
+852 300 80699
More local hotlines coming soon