tencent cloud

PrevNext

피드백

키워드를 검색하세요

Recent Pages

문서
Cloud Access Management
    문서
    Download PDF

    TDSQL for MySQL

    마지막 업데이트 시간:2024-06-29 09:51:49
    PDF 다운로드

      Fundamental information

      Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
      TDSQL for MySQL dcdb Supported Supported Resource level Partially supported

      Note：

      The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

      • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
      • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
      • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

      API authorization granularity

      Two authorization granularity levels of API are supported: resource level, and operation level.

      • Resource level: It supports the authorization of a specific resource.
      • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

      Write operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      ActivateFromPolaris activate instance from polaris service. Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} not supported
      ActiveDedicatedDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ActiveHourDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      AssociateSecurityGroups This API is used to associate security groups with Tencent Cloud resources in batches. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      BindPolarisForDcn bind polaris service for DCN instances. Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} Supported
      CancelDcnJob stop the DCN sync connection。 Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} Supported
      CloseDBExtranetAccess This API is used to disable public network access for a TencentDB instance, which will make the public IP address inaccessible. The DescribeDCDBInstances API will not return the public domain name and port information of the corresponding instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      CopyAccountPrivileges This API is used to copy the permissions of a TencentDB account.Note: Accounts with the same username but different hosts are different accounts. Permissions can only be copied between accounts with the same Readonly attribute. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      CreateAccount This API is used to create a TencentDB account. Multiple accounts can be created for one instance. Accounts with the same username but different hosts are different accounts. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      CreateDCDBInstance Operation level * not supported
      CreateDedicatedClusterDCDBInstance - Operation level * Supported
      CreateHourDCDBInstance Operation level * Supported
      CreateTmpDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DeleteTmpInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      DestroyDCDBInstance - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      DestroyHourDCDBInstance - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      DisassociateSecurityGroups This API is used to unassociate security groups from instances in batches. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      FlushBinlog FlushBinlog Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      InitDCDBInstances This API is used to initialize instances, including setting the default character set and table name case sensitivity. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      IsolateDCDBInstance IsolateDCDBInstance Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      IsolateDedicatedDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      IsolateFromPolaris isolate instance from polaris service. Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} not supported
      KillSession - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      ModifyAccount ModifyAccount Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      ModifyAccountConfig Modify some user configurations, such as max_ user_ connections Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} Supported
      ModifyAccountPrivileges - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      ModifyAutoRenewFlag Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyBackupConfigs modify backup configs Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      ModifyBackupDownloadRestriction - Operation level * Supported
      ModifyBackupTime - Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      ModifyDBEncryptAttributes This interface is used for modify DB encryption attributes. Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      ModifyDBInstanceSecurityGroups This API is used to modify the security groups associated with TencentDB. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      ModifyDBInstancesProject This API is used to modify the project to which TencentDB instances belong. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyInstanceNetwork Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyInstanceRemark Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      ModifyInstanceSSLAttributes This interface is used to modify instance ssl attributes. Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      ModifyInstanceVip Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyInstanceVport - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      ModifyLogFileRetentionPeriod This API is used to modify the number of days for retention of database backup logs. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyRealServerAccessStrategy - Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      OpenDBExtranetAccess This API is used to enable public network access for a TencentDB instance. After that, you can access the instance with the public domain name and port obtained through the DescribeDCDBInstances API. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ReleaseNetResource Release reserved network resources Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      RenewDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      RestartDBInstances - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      StartSmartDBA Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      SwitchDBInstanceHA SwitchDBInstanceHA Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      SwitchDcnJob switch the master and slave dcn instances. Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} Supported
      SwitchRollbackInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      TerminateDedicatedDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      UnbindPolaris unbind polaris service for DCN instances. Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} Supported
      UpgradeDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      UpgradeDedicatedDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported

      Read operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      CheckIpStatus Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      CloneAccount Operation level * Supported
      DeleteAccount Operation level * Supported
      DescribeAccountPrivileges Operation level * Supported
      DescribeAccounts This API is used to query the list of accounts of a specified TencentDB instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeBackupConfigs describe backup configs Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      DescribeBackupDownloadRestriction - Operation level * Supported
      DescribeBackupFiles - Operation level * Supported
      DescribeBackupMonitorData - Operation level * Supported
      DescribeBackupOverview - Operation level * Supported
      DescribeBackupSummaries - Operation level * Supported
      DescribeBackupTime - Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      DescribeBatchDCDBRenewalPrice Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDBCharsets - Operation level * not supported
      DescribeDBDetailMetrics - Resource level qcs::dcdb:region:uin/account:instance/instanceId not supported
      DescribeDBEncryptAttributes This interface is used to describe DB encryption attributes. Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      DescribeDBEngines Get DB engine version list Operation level * not supported
      DescribeDBInstanceHAInfo DescribeDBInstanceHAInfo Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      DescribeDBLogFiles Operation level * Supported
      DescribeDBMetrics Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      DescribeDBParameters This API is used to get the current parameter settings of a database. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDBSecurityGroups This API is used to query the security group details of an instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      DescribeDBSlowLogAnalysis Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDBSlowLogs Operation level * Supported
      DescribeDBSyncMode Operation level * not supported
      DescribeDBTmpInstances DescribeDBTmpInstances Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDCDBBinlogTime Operation level * not supported
      DescribeDCDBInstanceDetail Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDCDBInstances Operation level * Supported
      DescribeDCDBPrice Operation level * Supported
      DescribeDCDBRenewalPrice Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDCDBRollbackInstances DescribeDCDBRollbackInstances Resource level qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDCDBSaleInfo Operation level * not supported
      DescribeDCDBShards Operation level * Supported
      DescribeDCDBUpgradePrice Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDatabaseObjects Operation level * Supported
      DescribeDatabaseTable This API is used to query the table information of a TencentDB instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDatabases Operation level * Supported
      DescribeDcnDetail DescribeDcnDetail Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId not supported
      DescribeDcnRelations list all DCN instances. Operation level * Supported
      DescribeFenceShardSpec Operation level * Supported
      DescribeFileDownloadUrl - Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeFlow This API is used to query flow status. Operation level * Supported
      DescribeInstanceProxyConfig This interface is used to describe instance proxy config. Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      DescribeInstanceSSLAttributes This interface is used to describe DB SSL attributes. Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      DescribeLatestCloudDBAReport Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeLogFileRetentionPeriod Operation level * Supported
      DescribeOrders Operation level * Supported
      DescribeProjectSecurityGroups This API is used to query the security group details of a project. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      DescribeProjects This API is used to query the project list. Operation level * Supported
      DescribeShardSpec Operation level * not supported
      DescribeUserTasks DescribeUserTasks Operation level * not supported
      GrantAccountPrivileges Operation level * Supported
      IsolateHourDCDBInstance IsolateHourDCDBInstance Operation level * not supported
      ModifyAccountDescription Operation level * Supported
      ModifyDBParameters Operation level * Supported
      ModifyDBSyncMode Operation level * Supported
      ResetAccountPassword Reset Password Operation level * Supported
      UpgradeHourDCDBInstance Operation level * Supported
      문의하기

      고객의 업무에 전용 서비스를 제공해드립니다.

      문의하기
      기술 지원

      더 많은 도움이 필요하시면, 티켓을 통해 연락 바랍니다. 티켓 서비스는 연중무휴 24시간 제공됩니다.

      티켓 제출
      연중무휴 24시간 전화 지원
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      개인정보 처리방침서비스 약관쿠키 정책