tencent cloud

PrevNext

Feedback

search by keyword

Recent Pages

Documentation
Cloud Access Management
    Documentation
    Download PDF

    Database Management Center

    Last updated: 2024-09-15 09:26:14
    Download PDF

      Fundamental information

      Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
      Database Management Console dmc Supported not supported Resource level Partially supported

      Note：

      The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

      • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
      • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
      • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

      API authorization granularity

      Two authorization granularity levels of API are supported: resource level, and operation level.

      • Resource level: It supports the authorization of a specific resource.
      • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

      Write operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      ApproveWorkOrder Approve-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${Resource} Supported
      BatchGrantPermissionsToUsers BatchGrantPermissionsToUsers Operation level * Supported
      BindRuleTemplate BindRuleTemplate Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} not supported
      CancelWorkOrder Cancel-Work-Order Resource level qcs::dmc::uin/${uin}:resourceId/${ResourceId} Supported
      CheckWorkOrder Check-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${Resource} Supported
      ClearJoinSpace ClearJoinSpace Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      CloseSql CloseSql Operation level * Supported
      CreateAITaskFeedback CreateAITaskFeedback Operation level * Supported
      CreateDBAIQATask Create DB AI QA task Operation level * Supported
      CreateDataSource CreateDataSource Operation level * Supported
      CreateExportJob CreateExportJob Operation level * not supported
      CreateExportOrder CreateExportOrder Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} not supported
      CreateExportTask This interface (CreateExportTask) is used for create export task. Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      CreateFavoriteDatabase CreateFavoriteDatabase Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      CreateFavoriteTable CreateFavoriteTable Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      CreateImportJob CreateImportJob Operation level * Supported
      CreateImportOrder CreateImportOrder Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      CreateImportTask This interface (CreateImportTask) is used for create import task. Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      CreateInstanceAIInsightTask CreateInstanceAIInsightTask Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} not supported
      CreateJoinFavoriteDatabase CreateJoinFavoriteDatabase Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      CreateJoinFavoriteTable CreateJoinFavoriteTable Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      CreateJoinSpace CreateJoinSpace Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      CreateJoinUserSql CreateJoinUserSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      CreateManagedResource Create Managed Resource Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      CreateMetaResource Create MetaResource Resource level qcs::dmc:${Region}:uin/${uin}:resource/${ResourceId} Supported
      CreatePermissionApplyOrder This interface (CreatePermissionApplyOrder) is used to create permission application work orders Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      CreateQuickLogin Create QuickLogin Operation level * Supported
      CreateQuickLoginFromManagedResource Create Quick Login From Managed Resource Operation level * Supported
      CreateQuickLoginFromMetaResource Create Quick Login From MetaResource Resource level qcs::dmc:${Region}:uin/${uin}:resource/${ResourceId} Supported
      CreateResourceMark Create Resource Mark Operation level * Supported
      CreateRuleTemplate Create-Rule-Template Operation level * Supported
      CreateSQLModifyOrder Create-SQL-Modify-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      CreateSqlAITask CreateSqlAITask Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      CreateTableStructureComparison Create Table Structure Comparison Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      CreateUserSql CreateUserSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DeleteFavoriteDatabase DeleteFavoriteDatabase Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      DeleteFavoriteTable DeleteFavoriteTable Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      DeleteJoinFavoriteDatabase DeleteJoinFavoriteDatabase Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DeleteJoinFavoriteTable DeleteJoinFavoriteTable Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DeleteJoinSpace DeleteJoinSpace Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DeleteJoinUserSql DeleteJoinUserSql Operation level * Supported
      DeletePermissionFromUsers This interface (DeletePermissionFromUsers) is used for revoke DB auth. Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      DeleteResourceMark Delete Resource Mark Operation level * Supported
      DeleteRuleTemplate Delete-Rule-Template Operation level * Supported
      DeleteUserSql DeleteUserSql Operation level * Supported
      DestroyDataSources DestroyDataSources Operation level * Supported
      DestroyManagedResources Destroy Managed Resources Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DestroyMetaResources Destroy MetaResources Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      DestroyQuickLogin Destroy QuickLogin Operation level * Supported
      DestroyTableStructureComparison Destroy Table Structure Comparison Operation level * Supported
      DuplicateRuleTemplate Duplicate-Rule-Template Operation level * Supported
      ExecuteCommonSql ExecuteCommonSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      ExecuteJoinSql ExecuteJoinSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} not supported
      ExecuteSessionSql ExecuteSessionSql Operation level * Supported
      ExecuteSql ExecuteSql Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      ExecuteWorkOrder Execute-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      GenerateTableStructureModificationSQL Generate Table Structure Modification SQL Operation level * Supported
      GrantPermissionsToUsers This interface (GrantPermissionsToUsers) is used to grant user permissions Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      ImportSamplesForVectorDB ImportSamplesForVectorDB Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      KillJoinSql KillJoinSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      LoginDMCSession LoginDMCSession Operation level * not supported
      LoginResource LoginResource Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      ModifyDataSource ModifyDataSource Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      ModifyDownloadAuthConfig Full Update Download Configuration Options Operation level * Supported
      ModifyExportTaskOrder This interface (ModifyExportTaskOrder) is used for modify export order information. Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      ModifyImportTaskOrder This interface (ModifyImportTaskOrder) is used for modify import order information. Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      ModifyJoinUserSql ModifyJoinUserSql Operation level * Supported
      ModifyManagedResource Modify Managed Resource Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      ModifyMetaResource Modify MetaResource Resource level qcs::dmc:${Region}:uin/${uin}:resource/${ResourceId} Supported
      ModifyOpsRuleTemplate ModifyOpsRuleTemplate Operation level * Supported
      ModifyQuickLogin Modify QuickLogin Operation level * Supported
      ModifyResourceMark Modify Resource Mark Operation level * Supported
      ModifyRuleTemplate Modify-Rule-Template Operation level * Supported
      ModifySQLWorkOrder Modify-SQL-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      ModifyUserSql ModifyUserSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      ModifyWorkOrder Modify-Work-Order Resource level qcs::dmc::uin/${uin}:Resource/${ResourceId} Supported
      OpenSql OpenSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      RedoTableStructureComparison Redo Table Structure Comparison Operation level * Supported
      RunSessionHeartbeat RunSessionHeartbeat Operation level * Supported
      SetJoinSpaceResources SetJoinSpaceResources Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      StartTableStructureComparison Start Table Structure Comparison Operation level * Supported
      TerminateImportExportTask This interface (TerminateImportExportTask) is used for terminate export and import task Operation level * Supported
      TerminateTableStructureComparison Terminate Table Structure Comparison Operation level * Supported
      TerminateWorkOrderExecute Terminate-Work-Order-Execute Resource level qcs::dmc::uin/${uin}:Resource/${ResourceId} Supported
      UnbindRuleTemplate Unbind-Rule-Template Operation level * not supported
      UndoDestroyMetaResources Undo delete meta resource Resource level qcs::dmc:${Region}:uin/${uin}:resource/${ResourceId} Supported

      Read operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      CheckCamGrantStatus CheckCamGrantStatus Operation level * Supported
      CheckConnection CheckConnection Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      CheckPrivilegesAndConnection Check Privileges And Connection Operation level * Supported
      DescribeAsyncJoinSql DescribeAsyncJoinSql Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} not supported
      DescribeAsyncSql This interface (DescribeAsyncSql) is used to obtain asynchronous execution Sql results Operation level * Supported
      DescribeAutoCheckedRuleTemplate Describe-Auto-Checked-Rule-Template Operation level * Supported
      DescribeBoundResource Describe-Bound-Resource Operation level * Supported
      DescribeCheckStaffTemplate Describe-Check-Staff-Template Operation level * Supported
      DescribeCosConfig DescribeCosConfig Operation level * Supported
      DescribeCosDownloadUrl This interface (DescribeCosDownloadUrl) is used for get cos-file download address. Operation level * Supported
      DescribeDBAIQATask Describe DB AI QA task Operation level * Supported
      DescribeDataSources DescribeDataSources Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      DescribeDownloadAuthConfig Get the download configuration Operation level * Supported
      DescribeExecuteInfo Describe-Execute-Info Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeExecuteProgress Describe-Execute-Progress Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeExportTaskAnalysisInfo This interface (DescribeExportTaskAnalysisInfo) is used for get export order analysis information. Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeExportTaskInfo This interface (DescribeExportTaskInfo) is used for get export task information. Operation level * Supported
      DescribeFavoriteDatabases DescribeFavoriteDatabases Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      DescribeFavoriteTables DescribeFavoriteTables Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      DescribeHistoryExecInfoList Describe History Exec InfoL ist Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeImportExportTaskInfoList This interface (DescribeImportExportTaskInfoList) is used for get export and import task list Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} Supported
      DescribeImportTaskAnalysisInfo This interface (DescribeImportTaskAnalysisInfo) is used for get import order analysis information. Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeImportTaskInfo This interface (DescribeImportTaskInfo) is used for get import task information. Operation level * Supported
      DescribeInceptionRuleTemplate Describe-Inception-Rule-Template Operation level * Supported
      DescribeInstanceAIInsightHistory DescribeInstanceAIInsightHistory Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} not supported
      DescribeInstanceAIInsightTask DescribeInstanceAIInsightTask Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} not supported
      DescribeJoinFavoriteDatabases DescribeJoinFavoriteDatabases Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeJoinFavoriteTables DescribeJoinFavoriteTables Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeJoinSpaceDetail DescribeJoinSpaceDetail Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeJoinUserSql DescribeJoinUserSql Operation level * Supported
      DescribeJoinUserSqlList DescribeJoinUserSqlList Operation level * Supported
      DescribeManagedResourceDetail Describe Managed Resource Detail Operation level * Supported
      DescribeManagedResourcePackageInfo Describe Managed Resource PackageInfo Operation level * Supported
      DescribeManagedResources Describe Managed Resources Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeMetaResource Describe MetaResource Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeMetaResources Describe MetaResources Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeMetaResourcesTiny Query resource meta information (only used for tag service callbacks on the PaaS platform) Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} not supported
      DescribeOperationLogs DescribeOperationLogs Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeOpsRuleTemplate DescribeOpsRuleTemplate Operation level * not supported
      DescribePermissionApplyOrder This interface (DescribePermissionApplyOrder) is used for get order information that auth to DB. Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribePermissionsOfUser This interface (DescribePermissionsOfUser) is used to obtain direct permissions for all instances/DB owned by the user Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeQuickLogin Describe QuickLogin Operation level * Supported
      DescribeResourceMarks Describe Resource Marks Operation level * Supported
      DescribeRuleTemplateBaseInfo Describe-Rule-Template-Base-Info Operation level * Supported
      DescribeSQLSemanticCheckResult Describe-SQL-Semantic-Check-Result Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeSQLSyntaxCheckResult Describe-SQL-Syntax-Check-Result Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeSQLWorkOrder Describe-SQL-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeSqlAITask DescribeSqlAITask Operation level * Supported
      DescribeSqlWindowHistory This interface (DescribeSqlWindowHistory) is used to obtain SQL window history Resource level qcs::dmc:${region}:uin/${uin}:resource/${ResourceId} not supported
      DescribeTableStructureComparisonDetail Describe Table Structure Comparison Detail Operation level * Supported
      DescribeTableStructureForSubTask Describe Table Structure For Sub Task Operation level * Supported
      DescribeUserSql DescribeUserSql Operation level * Supported
      DescribeUserSqlList DescribeUserSqlList Operation level * Supported
      DescribeWorkOrder Describe-Work-Order Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeWorkOrderCheckInfo Describe-Work-Order-Check-Info Resource level qcs::dmc::uin/${uin}:resource/${ResoureId} Supported

      List Operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeApplyWorkOrderList Describe-Apply-Work-Order-List Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeDBAIQAHistory Describe DB AI QA history task list Operation level * not supported
      DescribeDoneWorkOrderList Describe-Done-Work-Order-List Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeExecInfoList Describe-Exec-Info-List Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeHistoryWorkOrderList Describe-History-Work-Order-List Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeJoinSpaces DescribeJoinSpaces Operation level * Supported
      DescribeRuleTemplateList Describe-Rule-Template-List Operation level * Supported
      DescribeTableStructureComparisonSubTasks Describe Table Structure Comparison SubTasks Operation level * Supported
      DescribeTableStructureComparisons Describe Table Structure Comparisons Operation level * not supported
      DescribeTableStructureModificationSQL Describe Table Structure Modification SQL Operation level * Supported
      DescribeTodoWorkOrderList Describe-Todo-Work-Order-List Resource level qcs::dmc::uin/${uin}:resource/${ResourceId} Supported
      DescribeWindowRuleTemplate Describe-Window-Rule-Template Operation level * Supported
      Contact Us

      Contact our sales team or business advisors to help your business.

      Contact Us
      Technical Support

      Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

      Submit a Ticket
      7x24 Phone Support
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      Privacy PolicyLegalCookie Policy