| Product | Abbreviation in CAM | Console | Authorization by Tag | Authorization Granularity | IP Restriction |
|---|---|---|---|---|---|
| TencentDB for TcaplusDB | tcaplusdb | Supported | Supported | Resource level | Partially supported |
Note:
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
Two authorization granularity levels of API are supported: resource level, and operation level.
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| AddSyncDBInstance | Add the cdb instance for sync table | Operation level | * | Supported |
| ClearTables | Truncate table | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | Supported |
| CompareIdlFiles | Upload and verify the file | Operation level | * | Supported |
| CreateBackup | Create backup | Operation level | * | Supported |
| CreateCluster | Create cluster | Operation level | * | Supported |
| CreateSnapshots | Create Snapshot | Operation level | * | Supported |
| CreateTableGroup | Create table Group | Resource level | qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/* | Supported |
| CreateTables | Create tables in batches | Resource level | qcs::tcaplusdb:$region:$account:cluster/$clusterId/tablegroup/$tablegroupId/* | Supported |
| DeleteBackupRecords | DeleteBackupRecords | Operation level | * | Supported |
| DeleteCluster | Delete cluster | Resource level | qcs::tcaplusdb:$region:$account:cluster/$clusterId | Supported |
| DeleteIdlFiles | Delete IDL description file | Operation level | * | Supported |
| DeleteSnapshots | Delete Snapshot | Operation level | * | Supported |
| DeleteSyncDBInstance | Delete the sync database instance in tcaplusdb cluster | Operation level | * | Supported |
| DeleteTableDataFlow | DeleteTableDataFlow | Operation level | * | Supported |
| DeleteTableGroup | Delete table group | Resource level | qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/$tablegroupId | Supported |
| DeleteTableIndex | delete TcaplusDB global distributed index | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | not supported |
| DeleteTables | Delete table | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | Supported |
| DisableRestProxy | disable restful api | Operation level | * | Supported |
| EnableRestProxy | enable restful api | Operation level | * | Supported |
| ImportSnapshots | Import Snapshot | Operation level | * | Supported |
| MergeTablesData | MergeTablesData | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | Supported |
| ModifyCensorship | ModifyCensorship | Resource level | qcs::tcaplusdb:$region:$account:cluster/$clusterId | Supported |
| ModifyClusterMachine | ModifyClusterMachine | Operation level | * | Supported |
| ModifyClusterName | Modify the cluster name | Resource level | qcs::tcaplusdb:$region:$account:cluster/$clusterId | Supported |
| ModifyClusterPassword | Change the cluster password | Resource level | qcs::tcaplusdb:$region:$account:cluster/$clusterId | Supported |
| ModifyClusterTags | Modify tags of cluster | Resource level | qcs::tcaplusdb:$region:$account:cluster/$clusterId | Supported |
| ModifySnapshots | Modify Snapshot | Operation level | * | Supported |
| ModifyTableGroupName | Modify table group name | Resource level | qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/$tablegroupId | Supported |
| ModifyTableGroupTags | Modify tags of table group | Resource level | qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/$tablegroupId | Supported |
| ModifyTableMemos | Modify note of table | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | Supported |
| ModifyTableQuotas | Table expansion and reduction | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | not supported |
| ModifyTableTags | Modify tags of table | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | not supported |
| ModifyTables | Modify table structure in batch | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | Supported |
| RecoverRecycleTables | Recovering tables from Recycle Bin | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | Supported |
| RollbackTables | Form data rollback | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | not supported |
| SetBackupExpireRule | SetBackupExpireRule | Operation level | * | Supported |
| SetSyncTable | Set the info for sync data of tcaplus table to cdb | Operation level | * | Supported |
| SetSyncTableStatus | Set the status for sync table, 1 for on processing, 2 for close, -1 for delete | Operation level | * | Supported |
| SetTableDataFlow | SetTableDataFlow | Operation level | * | Supported |
| SetTableIndex | create and modify TcaplusDB global distributed index | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | Supported |
| UpdateApply | UpdateApply | Operation level | * | Supported |
| VerifyIdlFiles | Upload and verify creation form file | Operation level | * | Supported |
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeApplications | DescribeApplications | Operation level | * | Supported |
| DescribeBackupRecords | DescribeBackupRecords | Operation level | * | Supported |
| DescribeClusterTags | Querying tags of cluster | Resource level | qcs::tcaplusdb:$region:$account:cluster/$clusterId | Supported |
| DescribeClusters | Querying Cluster Information | Resource level | qcs::tcaplusdb:$region:$account:cluster/$clusterId | Supported |
| DescribeIdlFileInfos | Querying table description file details | Operation level | * | Supported |
| DescribeMachine | DescribeMachine | Operation level | * | Supported |
| DescribeRegions | Query the list of regions | Operation level | * | Supported |
| DescribeSnapshots | Describe Snapshot | Operation level | * | Supported |
| DescribeSyncDBInstances | Query the sync database instances in tcaplusdb cluster | Resource level | qcs::tcaplusdb:${region}:uin/${uin}:cluster/$clusterId | Supported |
| DescribeTableGroupTags | Querying tags of table group | Resource level | qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/$tablegroupId | Supported |
| DescribeTableGroups | Query table Group List | Resource level | qcs::tcaplusdb:$region:$account:tablegroup/$clusterId/$tablegroupId | Supported |
| DescribeTableTags | Querying tags of table | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | Supported |
| DescribeTables | Querying table details | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | Supported |
| DescribeTablesInRecycle | Querying Table in the Recycle Bin | Resource level | qcs::tcaplusdb:$region:$account:table/$tableId | Supported |
| DescribeTasks | Query task list | Operation level | * | Supported |
| DescribeUinInWhitelist | Check if this user is in the white list | Operation level | * | Supported |
Feedback