tencent cloud

TencentDB for PostgreSQL

DescribeAccountPrivileges

PDF
Focus Mode
Font Size
Last updated: 2026-04-13 13:07:31

1. API Description

Domain name for API request: postgres.intl.tencentcloudapi.com.

This API is used to query the permission list of a database account on a database object.

A maximum of 20 requests can be initiated per second for this API.

We recommend you to use API Explorer
Try it
API Explorer provides a range of capabilities, including online call, signature authentication, SDK code generation, and API quick search. It enables you to view the request, response, and auto-generated examples.

2. Input Parameters

The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.

Parameter Name Required Type Description
Action Yes String Common Params. The value used for this API: DescribeAccountPrivileges.
Version Yes String Common Params. The value used for this API: 2017-03-12.
Region Yes String Common Params. For more information, please see the list of regions supported by the product. This API only supports: ap-bangkok, ap-beijing, ap-chengdu, ap-chongqing, ap-guangzhou, ap-hongkong, ap-jakarta, ap-nanjing, ap-seoul, ap-shanghai, ap-shanghai-fsi, ap-shenzhen-fsi, ap-singapore, ap-tokyo, eu-frankfurt, na-ashburn, na-siliconvalley, sa-saopaulo.
DBInstanceId Yes String Instance ID. obtain through the api DescribeDBInstances.
UserName Yes String Describes the permissions owned by this account for a database object. the account name can be obtained through the DescribeAccounts api.
DatabaseObjectSet.N Yes Array of DatabaseObject Specifies the database object information to query.

3. Output Parameters

Parameter Name Type Description
PrivilegeSet Array of DatabasePrivilege Specifies that the user has CREATE, CONNECT, and TEMPORARY permissions on the database user_database.
RequestId String The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem.

4. Example

Example1 View Account Type

This example shows you how to view the account type.

Input Example

POST / HTTP/1.1
Host: postgres.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeAccountPrivileges
<Common request parameters>

{
    "DBInstanceId": "postgres-5cz25tr5",
    "UserName": "user_without_permission",
    "DatabaseObjectSet": [
        {
            "ObjectType": "account",
            "ObjectName": "user_without_permission"
        }
    ]
}

Output Example

{
    "Response": {
        "PrivilegeSet": [
            {
                "Object": {
                    "DatabaseName": "",
                    "ObjectName": "without_per",
                    "ObjectType": "account",
                    "SchemaName": "",
                    "TableName": ""
                },
                "PrivilegeSet": [
                    "tencentDBSuper"
                ]
            }
        ],
        "RequestId": "dc43ec52-efbe-4bde-b588-bfa427a8c29b"
    }
}

Example2 Querying Database Permissions

This example shows you how to query the permissions of account without_per on database user_database.

Input Example

POST / HTTP/1.1
Host: postgres.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeAccountPrivileges
<Common request parameters>

{
    "DBInstanceId": "postgres-5cz25tr5",
    "UserName": "without_per",
    "DatabaseObjectSet": [
        {
            "ObjectType": "database",
            "ObjectName": "user_database"
        }
    ]
}

Output Example

{
    "Response": {
        "PrivilegeSet": [
            {
                "Object": {
                    "DatabaseName": "",
                    "ObjectName": "user_database",
                    "ObjectType": "database",
                    "SchemaName": "",
                    "TableName": ""
                },
                "PrivilegeSet": [
                    "CREATE",
                    "CONNECT",
                    "TEMPORARY"
                ]
            }
        ],
        "RequestId": "fc891ba1-8943-4116-8eb6-4696873d90c8"
    }
}

Example3 Query Mode Permission

This example shows you how to query the permission of account without_per on user_schema in the user_database database.

Input Example

POST / HTTP/1.1
Host: postgres.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeAccountPrivileges
<Common request parameters>

{
    "DBInstanceId": "postgres-5cz25tr5",
    "UserName": "without_per",
    "DatabaseObjectSet": [
        {
            "ObjectType": "schema",
            "ObjectName": "user_schema",
            "DatabaseName": "user_database"
        }
    ]
}

Output Example

{
    "Response": {
        "PrivilegeSet": [
            {
                "Object": {
                    "DatabaseName": "user_database",
                    "ObjectName": "user_schema",
                    "ObjectType": "schema",
                    "SchemaName": "",
                    "TableName": ""
                },
                "PrivilegeSet": [
                    "USAGE",
                    "CREATE"
                ]
            }
        ],
        "RequestId": "410f0673-c35c-401e-97c8-d4e196d1f33c"
    }
}

Example4 Batch Query

This example shows you how to perform a batch query.

Input Example

POST / HTTP/1.1
Host: postgres.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeAccountPrivileges
<Common request parameters>

{
    "DBInstanceId": "postgres-5cz25tr5",
    "UserName": "without_per",
    "DatabaseObjectSet": [
        {
            "ObjectType": "table",
            "ObjectName": "users",
            "DatabaseName": "user_database",
            "SchemaName": "user_schema"
        },
        {
            "ObjectType": "schema",
            "ObjectName": "user_schema",
            "DatabaseName": "user_database"
        }
    ]
}

Output Example

{
    "Response": {
        "PrivilegeSet": [
            {
                "Object": {
                    "DatabaseName": "user_database",
                    "ObjectName": "users",
                    "ObjectType": "table",
                    "SchemaName": "user_schema",
                    "TableName": ""
                },
                "PrivilegeSet": [
                    "DELETE",
                    "TRUNCATE",
                    "REFERENCES",
                    "TRIGGER",
                    "SELECT",
                    "INSERT",
                    "UPDATE"
                ]
            },
            {
                "Object": {
                    "DatabaseName": "user_database",
                    "ObjectName": "user_schema",
                    "ObjectType": "schema",
                    "SchemaName": "",
                    "TableName": ""
                },
                "PrivilegeSet": [
                    "CREATE",
                    "USAGE"
                ]
            }
        ],
        "RequestId": "41d71515-447d-4557-a799-3b60ad86323d"
    }
}

5. Developer Resources

SDK

TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.

Command Line Interface

6. Error Code

The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.

Error Code Description
DBError Backend database execution error.
FailedOperation.FailedOperationError Operation failed. Please try again later.
FailedOperation.PreCheckError Pre-check failed
InternalError.DBError Backend database execution error.
InvalidParameterValue.InvalidAccountNameError The account setting is invalid. please follow the account naming rules: the account name must be 1-16 characters, can only consist of letters, digits, or underscores; cannot be postgres; cannot start with a digit, pg_, or tencentdb_; all rules are case-insensitive.
InvalidParameterValue.InvalidAccountNameFormatError The account is invalid. follow the account naming rules: it must consist of letters (a-z, a-z), digits (0-9), and underscores (_), start with a letter or underscore (_), and be no more than 63 characters. system reserved keywords cannot be used, 'postgres' is not allowed, and it cannot start with 'pg_' or 'tencentdb_'.
InvalidParameterValue.InvalidDatabaseObjectName Currently only support database objects with operation names composed of english, underscore, digits, and special symbols []. functions and stored procedures additionally support three special symbols (,).
OperationDenied.InstanceAccessDeniedError You do not have the permission to operate this resource.
OperationDenied.InstanceStatusLimitOpError This operation cannot be performed on an instance in this status.
ResourceNotFound.InstanceNotFoundError The instance does not exist.

Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback