tencent cloud

All product documents
Cloud Access Management
DocumentationCloud Access ManagementCAM-Enabled APICloud Resource ManagementTencent Cloud Super App as a Service
Tencent Cloud Super App as a Service
Download PDF
Last updated: 2025-03-26 10:05:09
Tencent Cloud Super App as a Service
Last updated: 2025-03-26 10:05:09
Download PDF

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
Tencent Cloud Super App as a Service tcsas Supported not supported Operation level Supported

Note：

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
AddTeamMember Add a user to team Operation level * Supported
ConfigureMNPPreview Configure mini program trial version Operation level * Supported
CreateAdminUser Create admin user Operation level * Supported
CreateApplication Create a new application Operation level * Supported
CreateApplicationSensitiveAPI Create app sensitive API Operation level * Supported
CreateCloudPresetKey create preset key Operation level * Supported
CreateCustomerCos Create customer cos Operation level * Supported
CreateGlobalDomainACL Create global domains Operation level * Supported
CreateISPMNP Create a service provider mini program Operation level * Supported
CreateISPMNPReleaseApproval Create service provider listing review Operation level * Supported
CreateMNP Create a new mini program Operation level * Supported
CreateMNPApproval Create mini program release approval Operation level * Supported
CreateMNPDomainACL Create mini program level domains Operation level * Supported
CreateMNPSensitiveAPIPermissionApproval Create application sensitive API access permission from mini program Operation level * Supported
CreateMNPVersion Create a new mini program version Operation level * Supported
CreateTeam Create a new team Operation level * Supported
CreateUser Create a new user Operation level * Supported
DeleteApplication Delete application Operation level * Supported
DeleteApplicationSensitiveAPI Delete app sensitive API Operation level * Supported
DeleteGlobalDomain Delete global domains Operation level * Supported
DeleteISPMNP Delete service provider Mini Program Operation level * Supported
DeleteMNP Delete mini program Operation level * Supported
DeleteTeam Delete team Operation level * Supported
DeleteTeamMember Delete team member Operation level * Supported
DeleteUser Delete user Operation level * Supported
DisableApplicationSensitiveAPI Disable app sensitive API Operation level * Supported
EnableApplicationSensitiveAPI Enable app sensitive API Operation level * Supported
ModifyAdminPassword Modify admin password Operation level * Supported
ModifyAdminUser Modify admin User Operation level * Supported
ModifyApplication Modify application information Operation level * Supported
ModifyConsoleCustomizeConfig Modify Console Customize Config Operation level * Supported
ModifyCustomerCdn update cdn config Operation level * Supported
ModifyGlobalDomain Modify global domain Operation level * Supported
ModifyIDECustomizeConfig Modify IDE Customize Config Operation level * Supported
ModifyISPMNP Modify the service provider\'s mini program Operation level * Supported
ModifyMNP Modify mini program information Operation level * Supported
ModifyMNPDomain Modify mini program level domains Operation level * Supported
ModifyTeam Modify team information Operation level * Supported
ModifyTeamMember Modify team member role Operation level * Supported
ModifyUser Modify user information Operation level * Supported
ProcessMNPApproval Agree/reject mini program release approval Operation level * Supported
ProcessMNPSensitiveAPIPermissionApproval Agree/reject sensitive API application from mini program Operation level * Supported
ReleaseMNPVersion Release mini program Operation level * Supported
RemoveISPMNP Remove the service provider\'s mini program Operation level * Supported
RemoveMNP Offline/Disable mini program Operation level * Supported
RollbackMNPVersion Roll back online mini program Operation level * Supported

Other Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
CreatePresetKey CreatePresetKey Operation level * Supported

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeAdminUser query admin user Operation level * Supported
DescribeApplication Acquire application information Operation level * Supported
DescribeApplicationConfigFile Acquire application config Operation level * Supported
DescribeApprovalList Query the list of approved list Operation level * Supported
DescribeBaseConfig describe base config Operation level * Supported
DescribeConsoleCustomizeConfig Describe console customize config Operation level * Supported
DescribeConsoleFileUploadTempSecret Describe Console File Upload Temp Secret Operation level * Supported
DescribeCustomerCdn query cdn information Operation level * Supported
DescribeCustomerCos query customer cos information Operation level * Supported
DescribeCustomerPurchasePackageList Describe Customer Purchase Package List Operation level * Supported
DescribeGlobalDomainACL Acquire global domains Operation level * Supported
DescribeIDECustomizeConfig Describe IDE customize config Operation level * Supported
DescribeISPMNP Query the detailed information of the service provider\'s mini program Operation level * Supported
DescribeISPMNPCategory Query the type of service provider\'s mini program Operation level * Supported
DescribeISPMNPList Query the list of service provider mini programs Operation level * Supported
DescribeISPMNPMarket Mini Program market dashboard Operation level * Supported
DescribeMNP Acquire mini program information Operation level * Supported
DescribeMNPAllStageVersions Acquire mini program in development, in review and online version information Operation level * Supported
DescribeMNPApprovalList Acquire Approval application list of mini program Operation level * Supported
DescribeMNPCategory Describe mini program category Operation level * Supported
DescribeMNPDomainACL Acquire mini program level domains Operation level * Supported
DescribeMNPList Acquire mini program list Operation level * Supported
DescribeMNPOfflinePackageURL Acquire URL of mini program offline package Operation level * Supported
DescribeMNPPreview Acquire dev mini program preview information Operation level * Supported
DescribeMNPReleasedVersionHistory Acquire all online versions of a mini program Operation level * Supported
DescribeMNPSensitiveAPIPermissionApproval Acquire sensitive API application information from mini program Operation level * Supported
DescribeMNPVersion Acquire result of mini program creating task Operation level * Supported
DescribeTeam Acquire team information Operation level * Supported
DescribeTempSecret4InstanceUploadFile2Cos Accquire the file upload secret Operation level * Supported
DescribeTempSecret4UploadFile2Cos Acquire the file upload temporary secret key Operation level * Supported
DescribeUser Acquire user information Operation level * Supported
DescribeUserISPMenus Query the list of service provider menus Operation level * Supported

List Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeApplicationList Acquire list of applications Operation level * Supported
DescribeApplicationSensitiveAPIList Acquire app sensitive API list Operation level * Supported
DescribeMNPSensitiveAPIPermissionApprovalList Acquire sensitive API application list from mini program Operation level * Supported
DescribeMNPSensitiveAPIPermissionList Acquire mini program sensitive API list Operation level * Supported
DescribeRoleList Acquire list of role that could be bound Operation level * Supported
DescribeTeamList Acquire team list Operation level * Supported
DescribeTeamMemberList Acquire member list of team Operation level * Supported
DescribeUserList Acquire list of users Operation level * Supported
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Contact Us
Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 available.

Submit a Ticket
7x24 Phone Support
Hong Kong, China
+852 800 906 020 (Toll Free)
United States
+1 844 606 0804 (Toll Free)
United Kingdom
+44 808 196 4551 (Toll Free)
Canada
+1 888 605 7930 (Toll Free)
Australia
+61 1300 986 386 (Toll Free)
EdgeOne hotline
+852 300 80699
More local hotlines coming soon