tencent cloud

Introduction

Service roles and service-linked roles are unique type of service roles directly associated with Tencent Cloud services. They are predefined by the service and possess all the permissions required for the service to represent you in calling other Tencent Cloud services. This document provides information about products and services that support service roles and service-linked roles, including the role name, role entity, and role description.

• Product: The name of the cloud service that supports service roles and service-linked roles.
• Role Name: The name of service roles and service-linked roles used by Tencent Cloud services.
• Role Entity: The role entity of service roles and service-linked roles is the Tencent Cloud service that is permitted to carry the role's permissions. You can edit, creat or delete the role entity of the service roles and service-linked roles to allow or deny them to play the service roles or service-linked roles to access your Tencent Cloud resources.

  Compute

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | BatchCompute | BATCH_QCSLinkedRoleInAcrossService | Service-Related Roles | acrossservice.batch.cloud.tencent.com | Detailed List |
  | Cloud Virtual Machine | CVM_QCSLinkedRoleInCbsInit | Service-Related Roles | cbsinit.cvm.cloud.tencent.com | Detailed List |
  | Cloud Virtual Machine | CVM_QCSLinkedRoleInCVMSmartDiagnostic | Service-Related Roles | cvmsmartdiagnostic.cvm.cloud.tencent.com | Detailed List |
  | Lighthouse | Lighthouse_QCSLinkedRoleInBasic | Service-Related Roles | basic.lighthouse.cloud.tencent.com | Detailed List |
  | Lighthouse | Lighthouse_QCSLinkedRoleInCOSAndCI | Service-Related Roles | cosandci.lighthouse.cloud.tencent.com | Detailed List |
  | Lighthouse | Lighthouse_QCSLinkedRoleInDnsAndSsl | Service-Related Roles | dnsandssl.lighthouse.cloud.tencent.com | Detailed List |
  | Lighthouse | Lighthouse_QCSLinkedRoleInLighthouseSmartDiagnostic | Service-Related Roles | lighthousesmartdiagnostic.lighthouse.cloud.tencent.com | Detailed List |
  | TencentCloud Automation Tools | TAT_QCSLinkedRoleInCommand | Service-Related Roles | command.tat.cloud.tencent.com | Detailed List |
  | TencentCloud Automation Tools | TAT_QCSLinkedRoleInUploadInvocation | Service-Related Roles | uploadinvocation.tat.cloud.tencent.com | Detailed List |

  CDN and Edge platform

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | CDN | CDN_QCSLinkedRoleInRecordListDNSPod | Service-Related Roles | recordlistdnspod.cdn.cloud.tencent.com | Detailed List |
  | Global Application Acceleration Platform | GAAP_QCSLinkedRoleInCrossBorderCheck | Service-Related Roles | crossbordercheck.gaap.cloud.tencent.com | Detailed List |

  Container

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | tencent distributed cloud center | TDCC_QCSLinkedRoleInOps | Service-Related Roles | cvm.qcloud.com
  ops.tdcc.cloud.tencent.com | Detailed List |
  | Tencent Kubernetes Engine | TKE_QCSLinkedRoleInEIS | Service-Related Roles | eis.tke.cloud.tencent.com | Detailed List |
  | Tencent Kubernetes Engine | TKE_QCSLinkedRoleInTDCC | Service-Related Roles | cvm.qcloud.com
  tdcc.tke.cloud.tencent.com | Detailed List |
  | Tencent Kubernetes Engine | TKE_QCSLinkedRoleInEKSLog | Service-Related Roles | cvm.qcloud.com
  ekslog.tke.cloud.tencent.com | Detailed List |
  | Tencent Kubernetes Engine | TKE_QCSLinkedRoleInEtcdService | Service-Related Roles | cvm.qcloud.com
  etcdservice.tke.cloud.tencent.com | Detailed List |
  | Tencent Kubernetes Engine | TKE_QCSLinkedRoleInEKSCostMaster | Service-Related Roles | cvm.qcloud.com
  ekscostmaster.tke.cloud.tencent.com | Detailed List |
  | Tencent Kubernetes Engine | TKE_QCSLinkedRoleInPrometheusService | Service-Related Roles | cvm.qcloud.com
  prometheusservice.tke.cloud.tencent.com | Detailed List |

  Microservice

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Tencent Cloud Elastic Microservice | TEM_QCSLinkedRoleInTEMAPI | Service-Related Roles | temapi.tem.cloud.tencent.com | Detailed List |
  | Tencent Cloud Elastic Microservice | TEM_QCSLinkedRoleInTEMLog | Service-Related Roles | cvm.qcloud.com
  temlog.tem.cloud.tencent.com | Detailed List |
  | Tencent Cloud Elastic Microservice | TEM_QCSLinkedRoleInAccessCluster | Service-Related Roles | accesscluster.tem.cloud.tencent.com | Detailed List |
  | Tencent Cloud Elastic Microservice | TEM_QCSLinkedRoleInAccessResourceService | Service-Related Roles | accessresourceservice.tem.cloud.tencent.com | Detailed List |

  Essential Storage Service

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Cloud HDFS | CHDFS_QCSLinkedRoleInMetaMgmt | Service-Related Roles | metamgmt.chdfs.cloud.tencent.com | Detailed List |
  | COS | COS_QCSLinkedRoleInCOSAcc | Service-Related Roles | COSAcc.COS.cloud.tencent.com | Detailed List |
  | COS | COS_QCSLinkedRoleInCLSAccess | Service-Related Roles | cosoclsr.cos.cloud.tencent.com | Detailed List |
  | COS | COS_QCSLinkedRoleInLighthouseMounting | Service-Related Roles | lhmounting.cos.cloud.tencent.com | Detailed List |
  | Data Accelerator Goose File System | GooseFS_QCSLinkedRoleInManageCloudService | Service-Related Roles | managecloudservice.goosefs.cloud.tencent.com | Detailed List |

  Data Storage Service

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Cloud Log Service | CLS_QCSRoleInAnonymousSharing | Service-Related Roles | console-sharing.cls.cloud.tencent.com | Detailed List |

  Data Migration

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Cloud Migration | MSP_QCSLinkedRoleInMIGtocos | Service-Related Roles | migtocos.msp.cloud.tencent.com | Detailed List |

  Relational Database

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Cloud Database | CDB_QCSLinkedRoleInDBLog | Service-Related Roles | DBLog.cdb.cloud.tencent.com | Detailed List |
  | Cloud Database | CDB_QCSLinkedRoleInCdbwan | Service-Related Roles | cdbwan.cdb.cloud.tencent.com | Detailed List |
  | Cloud Database | CDB_QCSLinkedRoleInDBlogDeliver | Service-Related Roles | DBLogDeliver.cdb.cloud.tencent.com | Detailed List |
  | Cloud Database | CDB_QCSLinkedRoleInDBLogDeliverCOS | Service-Related Roles | DBLogDeliverCOS.cdb.cloud.tencent.com | Detailed List |
  | Cloud Native Database TDSQL-C | CynosDB_QCSLinkedRoleInDBLog | Service-Related Roles | DBLog.cynosdb.cloud.tencent.com | Detailed List |
  | Cloud Native Database TDSQL-C | CynosDBMysql_QCSLinkedRoleInKms | Service-Related Roles | kms.cynosdb.cloud.tencent.com | Detailed List |
  | Cloud Native Database TDSQL-C | CynosDBMysql_QCSLinkedRoleInClslog | Service-Related Roles | clslog.cynosdb.cloud.tencent.com | Detailed List |
  | Cloud Native Database TDSQL-C | CynosDB_QCSLinkedRoleInDBlogDeliver | Service-Related Roles | DBLogDeliver.cynosdb.cloud.tencent.com | Detailed List |
  | Cloud Native Database TDSQL-C | CynosDB_QCSLinkedRoleInDBLogDeliverCOS | Service-Related Roles | DBLogDeliverCOS.cynosdb.cloud.tencent.com | Detailed List |
  | Cloud Native Database TDSQL-C | CynosDBMysql_QCSLinkedRoleInDtsDataSync | Service-Related Roles | dtsDataSync.cynosdb.cloud.tencent.com | Detailed List |
  | TencentDB For PostgreSQL | PostgreSQL_QCSLinkedRoleInDBLog | Service-Related Roles | DBLog.PostgreSQL.cloud.tencent.com | Detailed List |
  | TencentDB For PostgreSQL | Postgres_QCSLinkedRoleInPostgresKms | Service-Related Roles | postgreskms.postgres.cloud.tencent.com | Detailed List |
  | TencentDB for SQL Server | SQLServer_QCSLinkedRoleInKMS | Service-Related Roles | kms.sqlserver.cloud.tencent.com | Detailed List |

  Relational database TDSQL

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | TDSQL for MySQL | DCDB_QCSLinkedRoleInKMS | Service-Related Roles | kms.dcdb.cloud.tencent.com | Detailed List |
  | TDSQL for MySQL | DCDB_QCSLinkedRoleInTSE | Service-Related Roles | tse.dcdb.cloud.tencent.com | Detailed List |
  | TDSQL for MySQL | DCDB_QCSLinkedRoleInDBLog | Service-Related Roles | DBLog.dcdb.cloud.tencent.com | Detailed List |

  NoSQL Database

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Cloud MongoDB | MongoDB_QCSLinkedRoleInKMS | Service-Related Roles | kms.mongodb.cloud.tencent.com | Detailed List |
  | Cloud MongoDB | MongoDB_QCSLinkedRoleInDBlog | Service-Related Roles | DBLog.mongo.cloud.tencent.com | Detailed List |
  | Cloud MongoDB | MongoDB_QCSLinkedRoleInLogPush | Service-Related Roles | logpush.mongodb.cloud.tencent.com | Detailed List |

  Database SaaS Service

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | TencentDB for DBbrain | DBBRAIN_QCSLinkedRoleInRedisAutonomy | Service-Related Roles | RedisAutonomy.dbbrain.cloud.tencent.com | Detailed List |
  | Database Management Console | DMC_QCSLinkedRoleInWorkOrderReview | Service-Related Roles | dmc.cloud.tencent.com | Detailed List |

  Networking

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Cloud Loader Balance | CLB_QCSLinkedRoleInUploadCertificate | Service-Related Roles | clb.cloud.tencent.com | Detailed List |
  | vpc | VPC_QCSLinkedRoleInEipTat | Service-Related Roles | eiptat.vpc.cloud.tencent.com | Detailed List |
  | vpc | VPC_QCSLinkedRoleInSnapshot | Service-Related Roles | snapshot.vpc.cloud.tencent.com | Detailed List |
  | vpc | VPC_QCSLinkedRoleInVpcflowlog | Service-Related Roles | vpcflowlog.vpc.cloud.tencent.com | Detailed List |
  | vpc | VPC_QCSLinkedRoleInPrivateLink | Service-Related Roles | privatelink.vpc.cloud.tencent.com | Detailed List |
  | vpc | VPC_QCSLinkedRoleInFlowLogAdvanceAnalysis | Service-Related Roles | flowlogadvanceanalysis.vpc.cloud.tencent.com | Detailed List |

  Network Security

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Cloud Firewall | CFW_QCSLinkedRoleInGetiOAaccess | Service-Related Roles | GetiOAaccess.cfw.cloud.tencent.com | Detailed List |
  | Tencent Cloud EdgeOne | TEO_QCSLinkedRoleInCertlist | Service-Related Roles | certlist.teo.cloud.tencent.com | Detailed List |
  | Tencent Cloud EdgeOne | TEO_QCSLinkedRoleInUpstreamgw | Service-Related Roles | upstreamgw.teo.cloud.tencent.com | Detailed List |
  | Tencent Cloud EdgeOne | TEO_QCSLinkedRoleInCAMUserGroup | Service-Related Roles | camusergroup.teo.cloud.tencent.com | Detailed List |
  | Tencent Cloud EdgeOne | TEO_QCSLinkedRoleInDnspodaccessEO | Service-Related Roles | DnspodaccesEO.TEO.cloud.tencent.com | Detailed List |
  | Tencent Cloud EdgeOne | TEO_QCSLinkedRoleInRealTimeLogCLS | Service-Related Roles | realtimelogcls.teo.cloud.tencent.com | Detailed List |

  Data Security

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Data Security Governance Center | DSGC_QCSLinkedRoleInApiSec | Service-Related Roles | apisec.dsgc.cloud.tencent.com | Detailed List |

  Application Security

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | cloudWaf | WAF_QCSLinkedRoleInCLS | Service-Related Roles | cls.waf.cloud.tencent.com | Detailed List |
  | cloudWaf | WAF_QCSLinkedRoleInAccess | Service-Related Roles | access.waf.cloud.tencent.com | Detailed List |
  | cloudWaf | WAF_QCSLinkedRoleInCKafka | Service-Related Roles | ckafka.waf.cloud.tencent.com | Detailed List |

  Domains & Websites

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | HTTPDNS | HTTPDNS_QCSLinkedRoleInClsLog | Service-Related Roles | httpdnslog.cloud.tencent.com | Detailed List |
  | HTTPDNS | HTTPDNS_QCSLinkedRoleInCustomdns | Service-Related Roles | customdns.httpdns.cloud.tencent.com | Detailed List |
  | Private DNS | PrivateDNS_QCSLinkedRoleInPL | Service-Related Roles | privatedns.cloud.tencent.com | Detailed List |
  | Private DNS | PrivateDNS_QCSLinkedRoleInCls | Service-Related Roles | privatedns.qcloud.com | Detailed List |
  | SSL Certification | SSL_QCSLinkedRoleInCertificateWaf | Service-Related Roles | certificatewaf.ssl.cloud.tencent.com | Detailed List |
  | SSL Certification | SSL_QCSLinkedRoleInCertificateDependence | Service-Related Roles | certificatedependence.ssl.cloud.tencent.com | Detailed List |
  | SSL Certification | SSL_QCSLinkedRoleInReplaceLoadCertificate | Service-Related Roles | replaceloadcertificate.ssl.cloud.tencent.com | Detailed List |
  | SSL Certification | SSL_QCSLinkedRoleInCertificateCloudMonitor | Service-Related Roles | certificatecloudmonitor.ssl.cloud.tencent.com | Detailed List |
  | SSL Certification | SSL_QCSLinkedRoleInDescribeDeployedResources | Service-Related Roles | describedeployedresources.ssl.cloud.tencent.com | Detailed List |

  Big Data

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | bi | BI_QCSLinkedRoleInDLCDataSource | Service-Related Roles | dlcdatasource.bi.cloud.tencent.com | Detailed List |
  | Cloud Data Warehouse ClickHouse | CDWCH_QCSLinkedRoleInCKCOS | Service-Related Roles | ckcos.cdwch.cloud.tencent.com | Detailed List |
  | Cloud Data Warehouse ClickHouse | CDWCH_QCSLinkedRoleInCdwchClb | Service-Related Roles | cdwchclb.cdwch.cloud.tencent.com | Detailed List |
  | Cloud Data Warehouse ClickHouse | CDWCH_QCSLinkedRoleInCKLOGSHOW | Service-Related Roles | cklogshow.cdwch.cloud.tencent.com | Detailed List |
  | Cloud Data Warehouse PostgreSQL | CDWPG_QCSLinkedRoleInPGCOS | Service-Related Roles | pgcos.cdwpg.cloud.tencent.com | Detailed List |
  | Cloud Data Warehouse PostgreSQL | CDWPG_QCSLinkedRoleInPGKMS | Service-Related Roles | pgkms.cdwpg.cloud.tencent.com | Detailed List |
  | Data Lake Compute | DLC_QCSLinkedRoleInCheckDLCResource | Service-Related Roles | checkdlcresource.dlc.cloud.tencent.com | Detailed List |
  | Elasticsearch MapReduce | EMR_QCSLinkedRoleInApplicationDataAccess | Service-Related Roles | applicationdataaccess.emr.cloud.tencent.com | Detailed List |
  | Elasticsearch MapReduce | EMR_QCSLinkedRoleInApplicationCloudResource | Service-Related Roles | cloudresource.emr.cloud.tencent.com | Detailed List |
  | Elasticsearch Service | ES_QCSLinkedRoleInAuthCos | Service-Related Roles | authcos.es.cloud.tencent.com | Detailed List |
  | Elasticsearch Service | ES_QCSLinkedRoleInAccessCos | Service-Related Roles | acesscos.es.cloud.tencent.com | Detailed List |
  | Elasticsearch Service | ES_QCSLinkedRoleInDataImport | Service-Related Roles | dataimport.es.cloud.tencent.com | Detailed List |
  | Elasticsearch Service | ES_QCSLinkedRoleInLogSyncCls | Service-Related Roles | logsynccls.es.cloud.tencent.com | Detailed List |
  | Elasticsearch Service | ES_QCSLinkedRoleInVpcOperate | Service-Related Roles | vpcoperate.es.cloud.tencent.com | Detailed List |
  | Elasticsearch Service | ES_QCSLinkedRoleInBeatsCollector | Service-Related Roles | beatscollector.es.cloud.tencent.com | Detailed List |
  | WeData | Wedata_QCSLinkedRoleInCli | Service-Related Roles | bundle.wedata.cloud.tencent.com | Detailed List |

  Middleware

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | RabbitMQ Serverless | RabbitMQ_QCSLinkedRoleInCLBTrigger | Service-Related Roles | trabbit.cloud.tencent.com | Detailed List |
  | RocketMQ | RocketMQ_QCSLinkedRoleInSendSSLcertificate | Service-Related Roles | sendSSLcertificate.rocketmq.cloud.tencent.com | Detailed List |
  | CKafka | cosCkafka_QCSRole | Service Role | ckafka.qcloud.com | Detailed List |

  Real-Time Interaction

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Low-code interactive classroom | LCIC_QCSLinkedRoleInTransfer | Service-Related Roles | transfer.lcic.cloud.tencent.com | Detailed List |
  | Tencent Real-Time Communication | TRTC_QCSLinkedRoleInCOSAccess | Service-Related Roles | cosaccess.trtc.cloud.tencent.com | Detailed List |
  | Tencent Real-Time Communication | TRTC_QCSLinkedRoleIntrtcCloudRecording | Service-Related Roles | trtccloudrecording.trtc.cloud.tencent.com | Detailed List |

  Media On-Demand

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | VOD | VOD_LogToCLS | Service-Related Roles | logtocls.vod.cloud.tencent.com | Detailed List |
  | VOD | VOD_QCSLinkedRoleInHosting | Service-Related Roles | coshosting.vod.cloud.tencent.com | Detailed List |
  | VOD | VOD_QCSLinkedRoleIn_EOacceleration | Service-Related Roles | eoacceleration.vod.cloud.tencent.com | Detailed List |
  | VOD | VOD_QCSLinkedRoleInManageSSLCertificates | Service-Related Roles | managesslcertificates.vod.cloud.tencent.com | Detailed List |

  Media Process

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Media Processing Service | MPS_QCSLinkedRoleInVOD | Service-Related Roles | getvod.mps.cloud.tencent.com | Detailed List |

  Cloud Real-time Rendering

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Cloud Application Rendering | CAR_QCSLinkedRoleInCloudStorage | Service-Related Roles | cloudstorage.car.cloud.tencent.com | Detailed List |

  Game Services

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Game Multimedia Engine | GME_QCSLinkedRoleInGameMedia | Service-Related Roles | gamemedia.gme.cloud.tencent.com | Detailed List |

  Cloud Resource Management

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Tencent Cloud Smart Advisor | Advisor_QCSLinkedRoleInCloudDiagnosis | Service-Related Roles | cd.advisor.cloud.tencent.com | Detailed List |
  | Tencent Cloud Smart Advisor | Advisor_QCSLinkedRoleInBusinessContinuity | Service-Related Roles | businesscontinuity.advisor.cloud.tencent.com | Detailed List |
  | Tencent Cloud Super App as a Service | TCMPP_QCSLinkedRoleInCOSAccess | Service-Related Roles | cosaccess.tcmpp.cloud.tencent.com | Detailed List |
  | Tencent Cloud Super App as a Service | TCMPP_QCSLinkedRoleInUserManage | Service-Related Roles | usermanage.tcmpp.cloud.tencent.com | Detailed List |

  Developer Tools

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Cloud Application | CLOUDAPP_QCSLinkedRoleInDeployResource | Service-Related Roles | deployresource.cloudapp.cloud.tencent.com | Detailed List |

  Monitor and Operation

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Application Performance Management | APM_QCSLinkedRoleInPromInstance | Service-Related Roles | promInstance.apm.cloud.tencent.com | Detailed List |
  | Application Performance Management | APM_QCSLinkedRoleInCKafkaInstance | Service-Related Roles | ckafka.apm.cloud.tencent.com | Detailed List |

  APIs and Tools

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Cloud Access Management | CAM_QCSLinkedRoleInEkslog | Service-Related Roles | ekslog.cam.cloud.tencent.com | Detailed List |
  | Cloud Access Management | CAM_QCSLinkedRoleInEkslog002 | Service-Related Roles | ckmlog.cam.cloud.tencent.com | Detailed List |
  | Cloud Access Management | CAM_QCSRole | Service Role | cam.cloud.tencent.com | Detailed List |
  | Tencent Cloud Organization | Orgnization_QCSLinkedRoleInCIC | Service-Related Roles | cic.organization.cloud.tencent.com | Detailed List |
  | Tencent Cloud Organization | Organization_QCSLinkedRoleInDefaultMng | Service-Related Roles | defaultmng.organization.cloud.tencent.com | Detailed List |
  | Tencent Cloud Organization | Orgnization_QCSLinkedRoleInServiceControl | Service-Related Roles | servicecontrol.orgnization.cloud.tencent.com | Detailed List |

  More

  | Product | Role Name | Role Types | Role Entity | Reference Document |
  |---------|---------|---------|---------|---------|
  | Message Center | MESSAGE_QCSLinkedRoleInDescribeDatahubTasksSendMes | Service-Related Roles | message.cloud.tencent.com | Detailed List |