tencent cloud

PrevNext

Feedback

search by keyword

Recent Pages

Documentation
Cloud Access Management
    Documentation

    TDSQL for MySQL

    Last updated: 2024-05-02 09:05:41

      Fundamental information

      Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
      TDSQL for MySQL dcdb Supported Supported Resource level Partially supported

      Note：

      The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

      • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
      • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
      • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

      API authorization granularity

      Two authorization granularity levels of API are supported: resource level, and operation level.

      • Resource level: It supports the authorization of a specific resource.
      • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

      Write operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      ActivateFromPolaris activate instance from polaris service. Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} not supported
      ActiveDedicatedDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ActiveHourDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      AssociateSecurityGroups This API is used to associate security groups with Tencent Cloud resources in batches. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      BindPolarisForDcn bind polaris service for DCN instances. Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} Supported
      CancelDcnJob stop the DCN sync connection。 Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} Supported
      CloneAccount This API is used to clone an instance account. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      CloseDBExtranetAccess This API is used to disable public network access for a TencentDB instance, which will make the public IP address inaccessible. The DescribeDCDBInstances API will not return the public domain name and port information of the corresponding instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      CopyAccountPrivileges This API is used to copy the permissions of a TencentDB account.Note: Accounts with the same username but different hosts are different accounts. Permissions can only be copied between accounts with the same Readonly attribute. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      CreateAccount This API is used to create a TencentDB account. Multiple accounts can be created for one instance. Accounts with the same username but different hosts are different accounts. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      CreateDCDBInstance Operation level * not supported
      CreateDedicatedClusterDCDBInstance - Operation level * Supported
      CreateHourDCDBInstance Operation level * Supported
      CreateTmpDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DeleteAccount This API is used to delete a TencentDB account, which is uniquely identified by username and host. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DeleteTmpInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      DestroyDCDBInstance - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      DestroyHourDCDBInstance - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      DisassociateSecurityGroups This API is used to unassociate security groups from instances in batches. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      FlushBinlog FlushBinlog Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      GrantAccountPrivileges This API is used to grant permissions to a TencentDB account.Note: accounts with the same username but different hosts are different accounts. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      InitDCDBInstances This API is used to initialize instances, including setting the default character set and table name case sensitivity. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      IsolateDCDBInstance IsolateDCDBInstance Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      IsolateDedicatedDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      IsolateFromPolaris isolate instance from polaris service. Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} not supported
      IsolateHourDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      KillSession - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      ModifyAccount ModifyAccount Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      ModifyAccountConfig Modify some user configurations, such as max_ user_ connections Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} Supported
      ModifyAccountDescription This API is used to modify the remarks of a TencentDB account.Note: accounts with the same username but different hosts are different accounts. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyAccountPrivileges - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      ModifyAutoRenewFlag Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyBackupConfigs modify backup configs Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      ModifyBackupDownloadRestriction - Operation level * Supported
      ModifyBackupTime - Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      ModifyDBEncryptAttributes This interface is used for modify DB encryption attributes. Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      ModifyDBInstanceName Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyDBInstanceSecurityGroups This API is used to modify the security groups associated with TencentDB. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      ModifyDBInstancesProject This API is used to modify the project to which TencentDB instances belong. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyDBParameters This API is used to modify database parameters. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyDBSyncMode This API is used to modify the sync mode of a TencentDB instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyInstanceNetwork Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyInstanceRemark Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      ModifyInstanceSSLAttributes This interface is used to modify instance ssl attributes. Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      ModifyInstanceVip Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyInstanceVport - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      ModifyLogFileRetentionPeriod This API is used to modify the number of days for retention of database backup logs. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ModifyRealServerAccessStrategy - Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      OpenDBExtranetAccess This API is used to enable public network access for a TencentDB instance. After that, you can access the instance with the public domain name and port obtained through the DescribeDCDBInstances API. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ReleaseNetResource Release reserved network resources Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      RenewDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      ResetAccountPassword This API is used to reset the password of a TencentDB account.Note: accounts with the same username but different hosts are different accounts. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      RestartDBInstances - Resource level qcs::dcdb:region:uin/account:instance/instanceId Supported
      StartSmartDBA Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      SwitchDBInstanceHA SwitchDBInstanceHA Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      SwitchDcnJob switch the master and slave dcn instances. Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} Supported
      SwitchRollbackInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      TerminateDedicatedDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      UnbindPolaris unbind polaris service for DCN instances. Resource level qcs::dcdb:${region}:uin/${uin}:instance/${InstanceId} Supported
      UpgradeDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      UpgradeDedicatedDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      UpgradeHourDCDBInstance Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported

      Read operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      CheckIpStatus Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeAccountPrivileges This API is used to query the permissions of a TencentDB account.Note: accounts with the same username but different hosts are different accounts. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeAccounts This API is used to query the list of accounts of a specified TencentDB instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeBackupConfigs describe backup configs Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      DescribeBackupDownloadRestriction - Operation level * Supported
      DescribeBackupFiles - Operation level * Supported
      DescribeBackupMonitorData - Operation level * Supported
      DescribeBackupOverview - Operation level * Supported
      DescribeBackupSummaries - Operation level * Supported
      DescribeBackupTime - Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      DescribeBatchDCDBRenewalPrice Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDBCharsets - Operation level * not supported
      DescribeDBDetailMetrics - Resource level qcs::dcdb:region:uin/account:instance/instanceId not supported
      DescribeDBEncryptAttributes This interface is used to describe DB encryption attributes. Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      DescribeDBInstanceHAInfo DescribeDBInstanceHAInfo Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId not supported
      DescribeDBLogFiles This API is used to get the list of various logs of a database, including cold backups, binlogs, errlogs, and slowlogs. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDBMetrics Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      DescribeDBParameters This API is used to get the current parameter settings of a database. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDBSecurityGroups This API is used to query the security group details of an instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      DescribeDBSlowLogAnalysis Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDBSlowLogs Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDBSyncMode This API is used to query the sync mode of a TencentDB instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      DescribeDBTmpInstances DescribeDBTmpInstances Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDCDBBinlogTime DescribeDCDBBinlogTime Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      DescribeDCDBInstanceDetail Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDCDBInstances Operation level * not supported
      DescribeDCDBPrice Operation level * Supported
      DescribeDCDBRenewalPrice Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDCDBRollbackInstances DescribeDCDBRollbackInstances Resource level qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDCDBSaleInfo Operation level * not supported
      DescribeDCDBShards This API is used to query the information of shards of a TencentDB instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDCDBUpgradePrice Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDatabaseObjects This API is used to query the list of database objects in a TencentDB instance, including tables, stored procedures, views, and functions. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDatabaseTable This API is used to query the table information of a TencentDB instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDatabases This API is used to query the list of databases of a TencentDB instance. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeDcnDetail DescribeDcnDetail Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId not supported
      DescribeDcnRelations list all DCN instances. Operation level * Supported
      DescribeFenceShardSpec Operation level * Supported
      DescribeFileDownloadUrl - Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeFlow This API is used to query flow status. Operation level * Supported
      DescribeInstanceProxyConfig This interface is used to describe instance proxy config. Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      DescribeInstanceSSLAttributes This interface is used to describe DB SSL attributes. Resource level qcs::dcdb:${region}:uin/${uin}:instance/instanceId Supported
      DescribeLatestCloudDBAReport Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeLogFileRetentionPeriod This API is used to view the configured number of days for retention of database backup logs. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} Supported
      DescribeOrders Operation level * Supported
      DescribeProjectSecurityGroups This API is used to query the security group details of a project. Resource level qcs::dcdb:${Region}:uin/:instance/${InstanceId} not supported
      DescribeProjects This API is used to query the project list. Operation level * Supported
      DescribeShardSpec Operation level * not supported
      DescribeUserTasks DescribeUserTasks Operation level * not supported
      Contact Us

      Contact our sales team or business advisors to help your business.

      Contact Us
      Technical Support

      Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

      Submit a Ticket
      7x24 Phone Support
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      Privacy PolicyLegalCookie Policy