Tencent Smart Advisor
Last updated:2026-02-16 09:45:32
Service roles and service-linked roles are predefined by Tencent Cloud services and, upon user authorization, the corresponding services can access and use resources by assuming these service-linked roles. This document provides detailed information on the use cases and associated authorization policies of these specific service-linked roles.
| Product | Role Name | Role Types | Role Entity |
|---|---|---|---|
| Tencent Cloud Smart Advisor | Advisor_QCSLinkedRoleInCloudDiagnosis | Service-Related Roles | cd.advisor.cloud.tencent.com |
| Tencent Cloud Smart Advisor | Advisor_QCSLinkedRoleInBusinessContinuity | Service-Related Roles | businesscontinuity.advisor.cloud.tencent.com |
Advisor_QCSLinkedRoleInCloudDiagnosis
Use Cases： This strategy is associated with the Tencent Cloud Advisor service role (Advisor_QCSLinkedRoleInCloudDiagnosis) for cloud diagnostics, enabling read access to the configurations of cloud services.
Authorization Polices
- Policy Name： QcloudAccessForAdvisorLinkedRoleInCloudDiagnosis
- Policy Information：
{ "version": "2.0", "statement": [ { "effect": "allow", "action": [ "live:Describe*", "cos:List*", "cos:Get*", "cos:Head*", "cos:OptionsObject", "monitor:Describe*", "monitor:Get*", "monitor:Export*", "dnspod:Describe*", "dbbrain:DescribeDBDiagEvents", "dbbrain:DescribeDBDiagEvent", "dbbrain:DescribeSlowLogTopSqls", "dbbrain:DescribeSlowLogs", "emr:Describe*", "emr:Inquiry*", "emr:Check*", "emr:List*", "emr:Describle*", "emr:Inquire*", "emr:Synchronize*", "cdn:DescribeIpStatus", "cdn:DescribeCertDomains", "cdn:DescribeCdnIp", "cdn:DescribeImageConfig", "cdn:DescribeDomainsConfig", "cdn:DescribeDomains", "cdn:DescribePushQuota", "cdn:DescribePurgeQuota", "cdn:DescribeUrlViolations", "cdn:DescribeBillingData", "cdn:DescribeDistrictIspData", "cdn:ListTopData", "cdn:DescribeTopData", "cdn:DescribeReportData", "cdn:DescribeOriginData", "cdn:DescribeIpVisit", "cdn:DescribeCdnData" ], "resource": "*" } ] }
Advisor_QCSLinkedRoleInBusinessContinuity
Use Cases： The current role is the Advisor service role, this role is used to Advisor to access CVM, VPC, COS and other service resources, without the need for user escrow keys, and the operation is more efficient and safe.
Authorization Polices
- Policy Name： QcloudAccessForAdvisorLinkedRoleInBusinessContinuity
- Policy Information：
{ "version": "2.0", "statement": [ { "action": [ "cvm:Describe*", "cvm:Inquiry*", "vpc:Describe*", "vpc:Inquiry*", "vpc:Get*", "monitor:Describe*", "monitor:Get*", "cam:ListUsersForGroup", "cam:ListGroups", "cam:GetGroup", "clb:Describe*", "cos:List*", "cos:Get*", "cos:Head*", "cos:OptionsObject", "cdb:Describe*", "mongodb:Describe*", "redis:Describe*", "redis:Get*", "redis:Inquiry*", "es:Describe*", "emr:Describe*", "emr:Inquiry*", "emr:Check*", "emr:List*", "emr:Describle*", "cloudaudit:LookUpEvents", "cdn:Describe*", "cdn:Get*", "cdn:List*", "ssl:Describe*", "tag:Get*", "ckafka:Get*", "ckafka:List*", "ckafka:Describe*", "tdmq:Describe*", "scf:Get*", "scf:List*", "cam:GetRole", "cam:ListAttachedRolePolicies", "cls:getLogset", "cls:getTopic", "cls:listTopic", "apigw:Describe*", "cmqtopic:GetTopicAttributes", "cmqtopic:GetSubscriptionAttributes", "tsf:Describe*", "tsf:Get*", "tsf:List*", "tsf:Search*", "tsf:Find*", "tsf:ImageUserIsExists", "tsf:ImageGetRepositoryList", "tsf:DscribeTasks", "tbase:Describe*", "tdach:Describe*", "tdapg:Describe*", "dcdb:Describe*", "tke:Describe*", "live:Describe*", "im:Describe*", "im:CheckIfIMNewUser", "cfw:Describe*", "waf:WafGet*", "waf:WAFGetUserInfo", "waf:WafDownloadAlerts", "waf:WafPackagePrice", "waf:WafAreaBanGetAreas", "waf:WafFreqGetRuleList", "waf:WafAntiFakeGetUrl", "waf:WafInterface", "waf:WafClsOverview", "waf:QueryFlows", "waf:WafDownloadRecords", "waf:WafDownloadlogs", "waf:WafSearchLogs", "waf:WafDNSdetectGet*", "waf:BotGet*", "waf:Get*", "waf:Search*", "waf:BotV2Get*", "wss:CertGetList", "waf:Describe*", "tag:DescribeResourceTagsByResourceIds", "mariadb:Describe*", "antiddos:Describe*", "cam:DescribeSafeAuthFlagColl", "cam:ListUsers", "cam:DescribeSubAccounts", "ccs:DescribeCluster", "sms:SmsPackagesStatistics", "sms:CallbackStatusStatistics", "sms:SendStatusStatistics", "dc:DescribeDirectConnects", "dc:DescribeDirectConnectTunnels", "trtc:Describe*", "trtc:Get*", "trtc:ShowRoomList", "trtc:ShowUserList", "trtc:RemindBalance", "trtc:HardDescribeMixConf", "memcached:DescribeInstances", "cynosdb:DescribeClusterDetail", "cynosdb:DescribeRollbackTimeValidity", "cynosdb:DescribeRollbackTimeRange", "cynosdb:DescribeInstanceSpecs", "cynosdb:DescribeInstances", "cynosdb:DescribeInstanceDetail", "cynosdb:DescribeDBSecurityGroups", "cynosdb:DescribeClusters", "cynosdb:DescribeClusterInstanceGrps", "cynosdb:DescribeBackupList", "cynosdb:DescribeBackupConfig", "cynosdb:DescribeAccounts", "dnspod:DescribeDomain", "dnspod:DescribeDomainList", "dnspod:DescribeDomainLogList", "dnspod:DescribeDomainPurview", "dnspod:DescribeDomainShareInfo", "dnspod:DescribeRecord", "dnspod:DescribeRecordLineList", "dnspod:DescribeRecordList", "dnspod:DescribeRecordType", "dnspod:DescribeUserDetail", "vod:DescribeCDNStatDetails", "vod:DescribeSubAppIds", "vod:DescribeDefaultDistributionConfig", "vod:DescribeVodDomains", "cwp:DescribeVulList", "cfs:DescribeCfsFileSystems", "cfs:DescribeAutoSnapshotPolicies", "cfs:DescribeCfsSnapshots", "sms:DescribeAppList", "sms:DescribeVerificationCodeStatistic", "sms:DescribeAntiBrushThreshold", "tke:CreateInstantInspectJob", "tke:DescribeInstantInspectTask", "cloudaudit:DescribeEvents", "clb:DescribeQuota", "cdb:QueryCDBProxy", "clb:DescribeClusterResources", "ssl:DescribeCertificateBindResources", "monitor:GetIntegrationProductList", "monitor:DescribeOneClickAlarmConfigs", "monitor:DescribeAlarmPolicies", "antiddos:DescribeListProtocolBlockConfig", "cloudhsm:DescribeVsms", "kms:GetServiceStatus", "as:DescribeAutoScalingInstances", "billing:DescribeCostSummaryByProduct", "finance:DescribeBillSummaryByProduct", "tke:ListClusterInspectionResultsItems", "tke:ListClusterInspectionResults", "dnspod:DescribeSnapshotConfig", "dnspod:DescribeDomainFilterList", "dc:DoDcHealthInspection", "teo:DescribeDefaultCertificates", "teo:DescribeHostsSetting", "teo:DescribeRules", "teo:DescribeZones", "csip:DescribeRiskCenterAssetViewVULRiskList", "csip:DescribeRiskCenterAssetViewPortRiskList", "csip:DescribePublicIpAssets", "csip:DescribeDomainAssets", "csip:DescribeCVMAssets", "csip:DescribeClusterPodAssets", "csip:DescribeDbAssets", "lighthouse:DescribeInstances", "dbbrain:DescribeDBDiagEvent", "dbbrain:DescribeDBDiagEvents", "live:CheckLiveHostBackupOriginSite", "tse:DescribeCloudNativeAPIGateways", "tse:DescribeSREInstances", "dbbrain:DescribeSqlFilters", "postgres:DescribeDBInstanceAttribute", "postgres:DescribeDBInstances", "postgres:DescribeZones", "tdmq:DescribeRocketMQCluster", "ckafka:DescribeInstanceAttributes", "teo:DescribeSecurityPolicy", "teo:DescribeDDoSPolicy", "gaap:DescribeProxies", "teo:DescribeZoneDDoSPolicy", "tdmq:DescribeRabbitMQVipInstances", "tcb:DescribeBillingInfo", "tcb:DescribeQuotaData", "tcb:DescribeBaasPackageList", "vod:DescribeTranscodeTemplates", "cam:MonitorGetProject", "monitor:GetProjectsList", "redis:DescribeInstances", "ckafka:DescribeTopicDetail", "ckafka:DescribeInstancesDetail", "tcb:DescribeEnvs", "tsf:DescribeGroupAttribute", "tsf:DescribeContainerGroups", "tsf:DescribeGroups", "tsf:DescribeApplications", "vpc:DescribeCcns", "vpc:DescribeCcnAttachedInstances", "vpc:GetCcnRegionBandwidthLimits", "mariadb:DescribeDBInstanceDetail", "dcdb:DescribeDCDBInstanceDetail", "sqlserver:DescribeDBInstances", "cdb:DescribeRoGroups", "tdmq:DescribeRocketMQClusters", "tdmq:DescribeRocketMQNamespaces", "tdmq:DescribeRocketMQTopics", "tdmq:DescribeRocketMQGroups", "trocket:DescribeInstanceList", "trocket:DescribeTopicList", "trocket:DescribeConsumerGroupList", "cos:HeadBucket", "es:SmartAdvisorManage", "finance:DescribeDosageCosDetailByDate", "cynosdb:Describe*", "teo:Describe*", "cetcd:Describe*", "as:DescribeAutoScalingGroups", "organization:DescribeOrganization", "organization:DescribeOrganizationMembers", "apm:DescribeApmInstances", "apm:DescribeTagValues", "apm:DescribeMetricRecords", "apm:DescribeServiceNodes", "apm:DescribeServiceOverview", "keewidb:Describe*", "trocket:DescribeFusionInstanceList", "oceanus:DescribeJobs", "oceanus:DescribeWorkSpaces", "oceanus:DescribeClusters", "cwp:Describe*", "csip:Describe*", "es:SmartAdvisor*", "cdwdoris:Describe*", "cdwch:Describe*", "postgres:DescribeReadOnlyGroups", "bh:Describe*", "cdc:Describe*", "cdz:Describe*", "chc:Describe*", "gaap:Describe*", "tione:Describe*", "tag:TagResources", "tag:UnTagResources", "tag:Describe*", "cdwpg:Describe*", "dlc:Describe*", "dbbrain:DescribeRedisProcessList", "dbbrain:DescribeMySqlProcessList", "scf:Describe*", "clb:Inquiry*", "tse:Describe*", "ckafka:Inquire*", "es:Inquire*", "lighthouse:Inquire*", "lighthouse:Describe*", "es:Query*", "wedata:Describe*", "domain:Describe*", "thpc:Describe*" ], "resource": "*", "effect": "allow" }, { "action": [ "tke:AcquireClusterKubeConfigForProduct" ], "effect": "allow", "resource": [ "qcs::tke::*:cluster\/*", "qcs::tke::*:k8s\/*\/pods\/*\/get", "qcs::tke::*:k8s\/*\/namespaces\/*\/get", "qcs::tke::*:k8s\/*\/namespaces\/*\/list", "qcs::tke::*:k8s\/*\/ingresses\/*\/get", "qcs::tke::*:k8s\/*\/ingresses\/*\/list", "qcs::tke::*:k8s\/*\/services\/*\/get", "qcs::tke::*:k8s\/*\/services\/*\/list", "qcs::tke::*:k8s\/*\/deployments\/*\/get", "qcs::tke::*:k8s\/*\/deployments\/*\/list", "qcs::tke::*:k8s\/*\/daemonsets\/*\/get", "qcs::tke::*:k8s\/*\/daemonsets\/*\/list", "qcs::tke::*:k8s\/*\/statefulsets\/*\/get", "qcs::tke::*:k8s\/*\/statefulsets\/*\/list" ] } ] }
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No
Feedback