tencent cloud

TencentDB for SQL Server

Catatan Rilis dan Pengumuman
Catatan Rilis
Pengenalan Produk
Ikhtisar Produk
Keunggulan
Kasus Penggunaan
Wilayah dan AZ
Lingkungan Jaringan
Pernyataan Lisensi
Panduan Pembelian
Ikhtisar Penagihan
Metode Pembelian
Pembayaran Jatuh Tempo
Pengembalian Dana
Deskripsi Biaya Penyesuaian Instans
Penagihan Ruang Cadangan
Memulai
Membuat Instans TencentDB for SQL Server
Menghubungkan ke Instans TencentDB for SQL Server
Mengelola Instans TencentDB for SQL Server
Panduan Operasi
Batas Penggunaan
Memelihara Instans
Menyesuaikan Konfigurasi Instans
Instans Baca Saja
Jaringan dan Keamanan
Manajemen Akun
Manajemen Database
Konfigurasi Parameter
Migrasi Data
Migrasi Data
Service Agreement
Service Level Agreement
Terms of Service
Glosarium
Hubungi Kami
DokumentasiTencentDB for SQL Server

Authorizable Resource Types

Mode fokus
Ukuran font
Terakhir diperbarui: 2024-01-18 17:23:30
Resource-level permissions refer to the ability to specify which resources users are allowed to perform operations on. Some operations of SQL Server support resource-level permissions, meaning you can control when a user is allowed to perform operations or what specific resources they are permitted to use. The types of resources that can be authorized through Cloud Access Management (CAM) are as follows:
Resource Type
Resource Description Method in Authorization Policies
TencentDB instance-related
qcs::sqlserver:$region:$account:instance/*
qcs::sqlserver:$region:$account:instance/$instanceId
TencentDB for SQL Server supports resource-level authorization, allowing you to allocate specified sub-accounts with API permissions for specified resources. The following table presents TencentDB API operations currently supporting resource-level permissions, along with the supported resources and conditional keys for each operation. When specifying a resource path, you can utilize an * wildcard in the path.
Note：
Any TencentDB API operation not listed in the table does not support resource-level permissions. You can still authorize a user to perform these operations, but you must specify the * as the resource element in the policy statement. The table below showcases only a portion of the resource types. For more information, please refer to Authorizable Resource Types for SQL Server.
API Name
API Description
Six-Segment Example of Resource
CreateAccount
Creating an account
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
CreateBackup
Creating a backup
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
CreateDB
Creating a database
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DeleteAccount
Deleting an account
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DeleteDB
Deleting a database
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeAccounts
Querying an account list
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeBackups
Querying a backup list
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeDatabaseNames
Querying a database name
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeDBInstances
Querying instance lists
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeDBs
Querying a database list
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeInstanceTasks
Querying instance tasks
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeRollbackTime
Querying the time range available for rollback
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeSlowlogs
Querying slow log lists
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
InquiryPriceRenewDBInstance
Querying the price of renewed instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
InquiryPriceUpgradeDBInstance
Querying the price of upgraded instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyAccountPrivilege
Modifying account permissions
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyAccountRemark
Modifying account remarks
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyBackupStrategy
Modifying the time for cold backup
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyDatabasePrivilege
Modifying database permissions
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyDBInstanceName
Renaming instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyDBInstanceProject
Modifying instance project
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyDBName
Renaming a database
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyDBRemark
Modifying database remarks
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
RenewDBInstance
Renewing instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ResetAccountPassword
Resetting account password
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
RestartDBInstance
Restarting instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
RestoreInstance
Restoring cold backup instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
RollbackInstance
Rolling back instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
TerminateDBInstance
Terminating instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
UpgradeDBInstance
Upgrading Instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*


Topik selanjutnya: Catatan Rilis

Bantuan dan Dukungan

Apakah halaman ini membantu?

masukan