- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Overview
- Users
- Identity Provider
- SSO Overview
- Practical Scenarios for SSO
- User-Based SSO
- Role-Based SSO
- Overview
- Overview of SAML Role-Based SSO
- Overview of OIDC Role-Based Single Sign-On
- SAML 2.0-Based Federation
- Accessing Tencent Cloud Console as SAML 2.0 Federated Users
- Creating a SAML IdP
- Creating an OIDC Identity Provider
- Managing IdPs
- Azure Active Directory Single Sign-On
- OneLogin Single Sign-On
- Okta Single Sign-On
- ADFS SSO to Tencent Cloud
- Implementing OIDC-Based Role-Based SSO
- Access Key
- User Groups
- Role
- Policies
- Troubleshooting
- Permissions Boundary
- Downloading Security Analysis Report
- CAM-Enabled Role
- Overview
- Compute
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- CAM-Enabled API
- Overview
- Compute
- Edge Computing
- Container
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Endpoint Security
- Data Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Middleware
- Communication
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- More
- Practical Tutorial
- Security Practical Tutorial
- Multi-Identity Personnel Permission Management
- Authorizing Certain Operations by Tag
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Reviewing Employee Operation Records on Tencent Cloud
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- During tag-based authentication, only tag key matching is supported
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to COS Resources under the Account
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Read-only Access to VPCs
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- User APIs
- DescribeSafeAuthFlagColl
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- UpdateAccessKey
- DeleteAccessKey
- CreateAccessKey
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- Role APIs
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- GetRole
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Data Types
- Error Codes
- FAQs
- Glossary
- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Overview
- Users
- Identity Provider
- SSO Overview
- Practical Scenarios for SSO
- User-Based SSO
- Role-Based SSO
- Overview
- Overview of SAML Role-Based SSO
- Overview of OIDC Role-Based Single Sign-On
- SAML 2.0-Based Federation
- Accessing Tencent Cloud Console as SAML 2.0 Federated Users
- Creating a SAML IdP
- Creating an OIDC Identity Provider
- Managing IdPs
- Azure Active Directory Single Sign-On
- OneLogin Single Sign-On
- Okta Single Sign-On
- ADFS SSO to Tencent Cloud
- Implementing OIDC-Based Role-Based SSO
- Access Key
- User Groups
- Role
- Policies
- Troubleshooting
- Permissions Boundary
- Downloading Security Analysis Report
- CAM-Enabled Role
- Overview
- Compute
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- CAM-Enabled API
- Overview
- Compute
- Edge Computing
- Container
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Endpoint Security
- Data Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Middleware
- Communication
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- More
- Practical Tutorial
- Security Practical Tutorial
- Multi-Identity Personnel Permission Management
- Authorizing Certain Operations by Tag
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Reviewing Employee Operation Records on Tencent Cloud
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- During tag-based authentication, only tag key matching is supported
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to COS Resources under the Account
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Read-only Access to VPCs
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- User APIs
- DescribeSafeAuthFlagColl
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- UpdateAccessKey
- DeleteAccessKey
- CreateAccessKey
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- Role APIs
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- GetRole
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Data Types
- Error Codes
- FAQs
- Glossary
Fundamental information
| Product | Abbreviation in CAM | Console | Authorization by Tag | Authorization Granularity | IP Restriction |
|---|---|---|---|---|---|
| WeData | wedata | Supported | not supported | Resource level | Partially supported |
Note：
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
API authorization granularity
Two authorization granularity levels of API are supported: resource level, and operation level.
- Resource level: It supports the authorization of a specific resource.
- Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.
Write operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| ApproveReleasePackage | ApproveReleasePackage | Operation level | * | not supported |
| AssociateProjectCluster | AssociateProjectCluster | Operation level | * | not supported |
| AuthorizePrivileges | Batch resource users and user groups and project authorization interface | Operation level | * | not supported |
| CreateBaseProject | create base project | Operation level | * | Supported |
| CreateBizCatalog | create catalog | Operation level | * | Supported |
| CreateBizCatalogs | create catalog template | Operation level | * | Supported |
| CreateCollectJob | CreateCollectJob | Operation level | * | not supported |
| CreateDataModel | Buy Wedata DataModel | Operation level | * | not supported |
| CreateDataSecurityAuditRule | Create data security audit rules | Operation level | * | not supported |
| CreateDataSecurityTask | Create data security tasks | Operation level | * | not supported |
| CreateDataSource | CreateDatasource | Operation level | * | not supported |
| CreateDsFolder | Create a folder. | Operation level | * | not supported |
| CreateDuty | Create Duty | Operation level | * | Supported |
| CreateDutySchedule | Create Duty Schedule | Operation level | * | Supported |
| CreateOpsMakePlan | create make plan | Operation level | * | not supported |
| CreateProject | create project | Operation level | * | Supported |
| CreateProjectSecretInfo | CreateProjectSecretInfo | Operation level | * | not supported |
| CreateReleasePackageForObjects | CreateReleasePackageForObjects | Operation level | * | not supported |
| CreateRestrictTypeV2 | CreateRestrictTypeV2 | Operation level | * | not supported |
| CreateScheduleCalendar | CreateScheduleCalendar | Operation level | * | not supported |
| CreateTableMetaAscriptions | create table meta ascription | Operation level | * | Supported |
| CreateTag | create tag | Operation level | * | not supported |
| CreateTaskDs | Create task Ds | Operation level | * | not supported |
| CreateTaskVersionDs | Create a task version | Operation level | * | not supported |
| CreateTenantUser | create user | Operation level | * | not supported |
| CreateWorkspace | create workspace | Operation level | * | Supported |
| DeleteDataModel | Delete DataModel | Operation level | * | not supported |
| DeleteDuty | Delete Duty | Operation level | * | Supported |
| DeleteDutySchedule | Delete Duty Schedule | Operation level | * | Supported |
| DeleteRealViewAssetsTable | delete table | Operation level | * | not supported |
| DeleteRecycleWorkflow | Completely delete or empty the Recycle Bin workflow | Operation level | * | not supported |
| DeleteRecycledProjectParam | DeleteRecycledProjectParam | Operation level | * | not supported |
| DeleteReleasableObjectsFromPackage | DeleteReleasableObjectsFromPackage | Operation level | * | not supported |
| DeleteScheduleCalendar | DeleteScheduleCalendar | Operation level | * | not supported |
| DeleteScheduleCalendarPreCheck | DeleteScheduleCalendarPreCheck | Operation level | * | not supported |
| DeleteTag | delete tag | Operation level | * | not supported |
| DeleteTaskAlarmRule | DeleteTaskAlarmRule | Operation level | * | not supported |
| DescribeTableMeta | describe table meta | Operation level | * | Supported |
| DisableProject | Disable Project | Operation level | * | Supported |
| EnableProject | Enable Project | Operation level | * | Supported |
| GetAssetCatalogCounts | get asset catalog counts | Operation level | * | not supported |
| ModifyAIStatus | Turn on/off AI | Operation level | * | not supported |
| ModifyApproveStatus | Modify Approve Status | Operation level | * | Supported |
| ModifyAssetBiz | modify asset biz | Operation level | * | not supported |
| ModifyAssetBizCatalog | modify asset biz catalog | Operation level | * | not supported |
| ModifyAssetLevel | modify asset level | Operation level | * | not supported |
| ModifyBizCatalog | update catalog | Operation level | * | Supported |
| ModifyCollectJob | ModifyCollectJob | Operation level | * | not supported |
| ModifyCollectJobOwner | ModifyCollectJobOwner | Operation level | * | not supported |
| ModifyDataSecurityLevel | Edit security level | Operation level | * | not supported |
| ModifyDataSecurityTask | Edit data security tasks | Operation level | * | not supported |
| ModifyHttpChannelConfig | Modify Http Channel Config | Operation level | * | Supported |
| ModifyIntegrationTask | ModifyIntegrationTask | Operation level | * | not supported |
| ModifyProjectClusterConf | ModifyProjectClusterConf | Operation level | * | not supported |
| ModifyTag | update tag | Operation level | * | not supported |
| ModifyTaskLinksDs | ModifyTaskLinksDs | Operation level | * | not supported |
| MoveDataSecurityLevel | Mobile security level | Operation level | * | not supported |
| PublishAssets | publish assets | Operation level | * | not supported |
| RefreshNotebookWorkspaceResource | RefreshNotebookWorkspaceResource | Operation level | * | not supported |
| RefreshUserInfo | RefreshUserInfo | Operation level | * | not supported |
| RegisterDsEventListener | Register an event listener. | Operation level | * | not supported |
| RegisterDsEventPublisher | Register an event publisher | Operation level | * | not supported |
| RemindScheduleCalendarConfig | RemindScheduleCalendarConfig | Operation level | * | not supported |
| RerunDataSecurityInstance | Rerun data security operation and maintenance examples | Operation level | * | not supported |
| RestoreRecycleFunction | restore recycle function | Operation level | * | not supported |
| RestoreRecycleProjectParam | RestoreRecycleProjectParam | Operation level | * | not supported |
| RestoreRecycleWorkflow | Restore Recycle Bin Workflow | Operation level | * | not supported |
| RollbackResourceVersion | Resource version rollback | Operation level | * | not supported |
| SaveIndicatorV2 | SaveIndicatorV2 | Operation level | * | not supported |
| SavePositionsDs | Batch save task locations | Operation level | * | not supported |
| ScriptImportConflictFiles | File conflict when batch importing from devspace, batch replace or skip | Operation level | * | not supported |
| StartCollectJob | StartCollectJob | Operation level | * | not supported |
| StopCollectJob | StopCollectJob | Operation level | * | not supported |
| StopDataSecurityAuditInstance | Stop the data security audit operation and maintenance instance | Operation level | * | not supported |
| SubmitProjectParam | Submission of project parameters | Operation level | * | not supported |
| SubmitUserResource | Submission of resources | Operation level | * | not supported |
| SwitchDataSecurityDimension | Start and stop safety dimension | Operation level | * | not supported |
| TakeOfflineAssets | takeOffline assets | Operation level | * | not supported |
| UpdateClonePackageConfiguration | Update the clone package configuration | Operation level | * | not supported |
| UpdateDataModelRegistryInfo | Register DataBlau to Wedata | Operation level | * | not supported |
| UpdateScheduleCalendar | UpdateScheduleCalendar | Operation level | * | not supported |
| UpdateScheduleCalendarDetail | UpdateScheduleCalendarDetail | Operation level | * | not supported |
| UpdateScheduleCalendarDetailByFile | UpdateScheduleCalendarDetailByFile | Operation level | * | not supported |
| UploadContent | Save task information | Operation level | * | not supported |
Read operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| CheckClonePackageName | Determine whether the cloned package name is repeated | Operation level | * | not supported |
| CheckDLCDatasourceName | CheckDLCDatasourceName | Operation level | * | not supported |
| CheckDeleteBizCataLog | CheckDeleteBizCataLog | Operation level | * | not supported |
| CheckDlcConnectivity | CheckDlcConnectivity | Operation level | * | not supported |
| CheckIfSubmit | check if table submit | Operation level | * | not supported |
| CheckServer | CheckServer | Operation level | * | not supported |
| CodeCompletionColumns | code completion columns | Operation level | * | not supported |
| CodeCompletionDatabase | code completion database | Operation level | * | not supported |
| CodeCompletionTable | code completion table | Operation level | * | not supported |
| DescribeAIStatus | Check the status of AI assistant | Operation level | * | not supported |
| DescribeApiDataSourceList | DescribeApiDataSourceList | Operation level | * | not supported |
| DescribeAssetHistory | describe asset history records | Operation level | * | Supported |
| DescribeBatchProjectClusters | Cluster information list | Operation level | * | not supported |
| DescribeBriefTenantProjects | describe tenant project list | Operation level | * | Supported |
| DescribeClonePackageDetail | Get clone package details | Operation level | * | Supported |
| DescribeCloneStatisticsResult | Get clone statistics | Operation level | * | Supported |
| DescribeCodeSnippets | DescribeCodeSnippets | Operation level | * | not supported |
| DescribeCollectDatasourceTypeList | describe collect supported dataspurcetype | Operation level | * | Supported |
| DescribeCreateUserAndDataSource | DescribeCreateUserAndDataSource | Operation level | * | not supported |
| DescribeDataAssetSearchTop | describe data asset search history records | Operation level | * | not supported |
| DescribeDataAssets | Describe data asset | Operation level | * | Supported |
| DescribeDataDevelopTaskNode | get task node information | Operation level | * | Supported |
| DescribeDataModel | Query DataModel Is Available | Operation level | * | not supported |
| DescribeDataSecurityAuditAccessLogPage | Get the paginated list of data security access logs | Operation level | * | not supported |
| DescribeDataSecurityAuditAlarm | View audit alarm details | Operation level | * | not supported |
| DescribeDataSecurityAuditAlarmPage | Search audit alarm information | Operation level | * | not supported |
| DescribeDataSecurityAuditClassificationStatistics | DescribeDataSecurityAuditClassificationStatistics | Operation level | * | not supported |
| DescribeDataSecurityAuditConfiguration | Data security query audit log configuration details | Operation level | * | not supported |
| DescribeDataSecurityAuditInstanceLog | Obtain data security audit operation and maintenance instance logs | Operation level | * | not supported |
| DescribeDataSecurityAuditOperationLogPage | Get the paginated list of data security audit operation logs | Operation level | * | not supported |
| DescribeDataSecurityAuditRiskPage | Query the paging list of audit risks | Operation level | * | not supported |
| DescribeDataSecurityAuditRiskTrend | DescribeDataSecurityAuditRiskTrend | Operation level | * | not supported |
| DescribeDataSecurityAuditRule | View details of data security audit rules | Operation level | * | not supported |
| DescribeDataSecurityAuditRulePage | Search the paginated list of data security audit rules | Operation level | * | not supported |
| DescribeDataSecurityAuditRuleTemplate | Get audit rule system template details | Operation level | * | not supported |
| DescribeDataSecurityAuditRuleTemplateList | Get the list of audit rule system templates | Operation level | * | not supported |
| DescribeDataSecurityAuditStatistics | DescribeDataSecurityAuditStatistics | Operation level | * | not supported |
| DescribeDataSecurityAuditTask | View data security audit task details | Operation level | * | not supported |
| DescribeDataSecurityAuditTaskList | Get a list of audit task names | Operation level | * | not supported |
| DescribeDataSecurityAuditTaskPage | Get a paginated list of data security audit tasks | Operation level | * | not supported |
| DescribeDataSecurityAuthDetailInfos | Query permission details | Operation level | * | not supported |
| DescribeDataSecurityCategoryTree | Get security classification tree | Operation level | * | not supported |
| DescribeDataSecurityDataSourceList | Get a list of data sources | Operation level | * | not supported |
| DescribeDataSecurityDataTable | Get single data table info | Operation level | * | not supported |
| DescribeDataSecurityDataTableFieldList | Get the list of data table fields | Operation level | * | not supported |
| DescribeDataSecurityDataTableList | Get list of data tables | Operation level | * | not supported |
| DescribeDataSecurityDatabaseList | Get database list | Operation level | * | not supported |
| DescribeDataSecurityDesensitizationRule | Query details of desensitization rules | Operation level | * | not supported |
| DescribeDataSecurityDesensitizationRuleList | Get a list of data security-masking rules | Operation level | * | not supported |
| DescribeDataSecurityDesensitizationRulePage | Search the paginated list of desensitization rules | Operation level | * | not supported |
| DescribeDataSecurityDesensitizationRuleUserList | Query the list of creators of desensitization rules | Operation level | * | not supported |
| DescribeDataSecurityDimension | Get security dimension details | Operation level | * | not supported |
| DescribeDataSecurityDimensionList | Get a list of security dimensions | Operation level | * | not supported |
| DescribeDataSecurityInstanceLog | Obtain data security operation and maintenance instance logs | Operation level | * | not supported |
| DescribeDataSecurityLevelList | Get a list of security levels | Operation level | * | not supported |
| DescribeDataSecurityRule | Get details of data security rules | Operation level | * | not supported |
| DescribeDataSecurityRuleList | Get a list of data security identification rules | Operation level | * | not supported |
| DescribeDataSecurityRulePage | Get a paginated list of data security identification rules | Operation level | * | not supported |
| DescribeDataSecurityRulePageCount | Get the total number of each type of data security identification rules | Operation level | * | not supported |
| DescribeDataSecurityRuleTemplate | Get the data security identification rule template | Operation level | * | not supported |
| DescribeDataSecurityRuleTemplateList | Get a list of data security identification rule templates | Operation level | * | not supported |
| DescribeDataSecuritySensitiveByTable | Obtain data security-field sensitive information | Operation level | * | not supported |
| DescribeDataSecuritySensitiveInfoPage | Get the paging list of data security sensitive data | Operation level | * | not supported |
| DescribeDataSecuritySensitiveManualPage | Get a list of data security manual marking records | Operation level | * | not supported |
| DescribeDataSecurityTask | View data security task details | Operation level | * | not supported |
| DescribeDataSecurityTaskDataSources | Get the data source that identifies the task binding | Operation level | * | not supported |
| DescribeDataServiceApps | DescribeDataServiceApps | Operation level | * | Supported |
| DescribeDataSourceAuthorityUserList | get user list | Operation level | * | not supported |
| DescribeDataSourceResourceList | DescribeDataSourceResourceList | Operation level | * | Supported |
| DescribeDatabaseByName | describe database by name | Operation level | * | Supported |
| DescribeDatabaseInfoPageV2 | Get database information by paging V2 | Operation level | * | Supported |
| DescribeDatasourceSecurityToken | DescribeDatasourceSecurityToken | Operation level | * | not supported |
| DescribeDimensionV2 | search dimension info V2 | Operation level | * | not supported |
| DescribeDlcEngineResourceGroupPage | Query the DLC standard engine binding resource group | Operation level | * | Supported |
| DescribeDlcEnginesByDatasourceId | Query engine information by data source ID | Operation level | * | Supported |
| DescribeDsRecycleTaskVersionList | DescribeDsRecycleTaskVersionList | Operation level | * | Supported |
| DescribeEmrHiveDatabases | DescribeEmrHiveDatabases | Operation level | * | not supported |
| DescribeEngineComponentsValid | verify data engine | Operation level | * | Supported |
| DescribeEngineRegions | list data engine available regions | Operation level | * | not supported |
| DescribeEngines | list data engines | Operation level | * | Supported |
| DescribeEventCloneResult | Get event cloning results | Operation level | * | Supported |
| DescribeExecutorAlarmRegulation | Describe executor alarm regulation | Operation level | * | not supported |
| DescribeExecutorAlarmRegulations | describe executor alarm regulations | Operation level | * | not supported |
| DescribeExecutorResourceGroupPage | DescribeExecutorResourceGroupPage | Resource level | qcs::wedata:${region}:uin/${uin}:schedule/${resourceId} qcs::wedata:${region}:uin/${uin}:offline/${resourceId} qcs::wedata:${region}:uin/${uin}:realtime/${resourceId} |
Supported |
| DescribeFunctionCloneResult | Get function cloning results | Operation level | * | Supported |
| DescribeFunctionProcess | find function process | Operation level | * | Supported |
| DescribeFunctionVersionDetail | describe function version | Operation level | * | Supported |
| DescribeFunctionVersionList | function version list | Operation level | * | Supported |
| DescribeImportTask | Query import task details | Operation level | * | not supported |
| DescribeInstanceInfoByExecute | DescribeInstanceInfoByExecute | Operation level | * | Supported |
| DescribeInstancesByExecutors | DescribeInstancesByExecutors | Operation level | * | Supported |
| DescribeLocalDataBases | DescribeLocalDataBases | Operation level | * | Supported |
| DescribeLocalMetaData | DescribeLocalMetaData | Operation level | * | Supported |
| DescribeLocalSchema | DescribeLocalSchema | Operation level | * | Supported |
| DescribeLogicTable | describe logic table | Operation level | * | not supported |
| DescribeModel | DescribeModel | Operation level | * | not supported |
| DescribeModelDiagramTable | DescribeModelDiagramTable | Operation level | * | not supported |
| DescribeModelDiagramTree | DescribeModelDiagramTree | Operation level | * | not supported |
| DescribeModelTableDDL | DescribeModelTableDDL | Operation level | * | not supported |
| DescribeNetServers | DescribeNetServers | Operation level | * | Supported |
| DescribeOpsMakePlanInstances | describe make plan instances | Operation level | * | Supported |
| DescribeOpsPreviewMakePlanTask | preview make task list | Operation level | * | Supported |
| DescribeOwnerHoldAssets | To describe owner hold asset counts | Operation level | * | not supported |
| DescribePermitCloneProjects | List the projects that have permission to clone | Operation level | * | Supported |
| DescribeProjectClusterQueues | DescribeProjectClusterQueues | Operation level | * | not supported |
| DescribeProjectImportCosToken | DescribeProjectImportCosToken | Operation level | * | Supported |
| DescribeProjectParamCloneResult | Get project parameter cloning results | Operation level | * | Supported |
| DescribeProjectSecretInfo | DescribeProjectSecretInfo | Operation level | * | Supported |
| DescribeRealViewDatabaseList | Describe RealView Database List | Operation level | * | not supported |
| DescribeRealViewSchemaList | get RealView Schema List | Operation level | * | not supported |
| DescribeRealViewSchemaPage | Get the Schema by paging the dataset | Operation level | * | Supported |
| DescribeRealViewTableInfoPageV2 | Get data table information by paging the dataset V2 | Operation level | * | Supported |
| DescribeRecycleFunctions | describe recycle function | Operation level | * | Supported |
| DescribeRecycleProjectParams | DescribeRecycleProjectParams | Operation level | * | Supported |
| DescribeReleaseObjectDetail | describe release package detail | Operation level | * | Supported |
| DescribeReleasePackageDetail | describe package detail | Operation level | * | Supported |
| DescribeResourcePackagesRequest | DescribeResourcePackagesRequest | Resource level | qcs::wedata:${region}:uin/${uin}:schedule/${resourceId} qcs::wedata:${region}:uin/${uin}:offline/${resourceId} qcs::wedata:${region}:uin/${uin}:realtime/${resourceId} |
Supported |
| DescribeRestrictTypesV2 | DescribeRestrictTypesV2 | Operation level | * | not supported |
| DescribeScheduleCalendarDetail | query Schedule Calendar Detail | Operation level | * | not supported |
| DescribeScheduleCalendarPageList | qury Schedule Calendar info list | Operation level | * | not supported |
| DescribeScheduleCalendarTemplate | DescribeScheduleCalendarTemplate | Operation level | * | not supported |
| DescribeScheduleCalendarUploadFileParam | DescribeScheduleCalendarUploadFileParam | Operation level | * | not supported |
| DescribeSchema | DescribeSchema | Operation level | * | Supported |
| DescribeSecurityCosToken | Secure query cos token | Operation level | * | not supported |
| DescribeServersVersion | DescribeServersVersion | Operation level | * | Supported |
| DescribeServiceRoleExists | verify wedata service role | Operation level | * | Supported |
| DescribeSimpleModel | DescribeSimpleModel | Operation level | * | not supported |
| DescribeStandardCosToken | DescribeStandardCosToken | Operation level | * | Supported |
| DescribeSuccessorTaskInfoList | DescribeSuccessorTaskInfoList | Operation level | * | Supported |
| DescribeTableDDLTask | DescribeTableDDLTask | Operation level | * | not supported |
| DescribeTableSchemaInfo | get table schema info | Operation level | * | Supported |
| DescribeTaskCloneResult | Get task cloning results | Operation level | * | Supported |
| DescribeTaskInstancesStatus | Get orchestration space debugging task instance status information in groups | Operation level | * | not supported |
| DescribeTaskLineage | To describe task table lineage by taskId | Operation level | * | not supported |
| DescribeTaskParamsBatch | DescribeTaskParamsBatch | Operation level | * | Supported |
| DescribeTaskParamsPreview | DescribeTaskParamsPreview | Operation level | * | not supported |
| DescribeTaskTableList | Get the list of database tables used by the task | Operation level | * | not supported |
| DescribeTaskVersionByScheduling | Query the version information of tasks in scheduling, prioritize scheduling in progress, followed by the latest version | Operation level | * | Supported |
| DescribeTchousePClusters | get tchousep list | Operation level | * | Supported |
| DescribeTenant | describe tenant | Operation level | * | Supported |
| DescribeTenantProjects | describe tenant project list | Operation level | * | Supported |
| DescribeTenantUserList | describe tenant user list | Operation level | * | Supported |
| DescribeTestRunningRecord | Get a list of orchestration space trial runs | Operation level | * | not supported |
| DescribeUserOnlyTcs | DescribeUserOnlyTcs | Operation level | * | not supported |
| DescribeUserProjects | describe user project list | Operation level | * | Supported |
| DescribeVersionInfo | DescribeVersionInfo | Resource level | qcs::wedata:${region}:uin/${uin}:platform/${resourceId} | Supported |
| DescribeWorkspaceDuplication | check workspace duplication | Operation level | * | Supported |
| DescribeWorkspaceEngines | list workspace engines | Operation level | * | Supported |
| DescribeWorkspaceRegions | list workspace available regions | Operation level | * | not supported |
| DescribeWorkspaceUser | list user detail information | Operation level | * | Supported |
| DescribeWorkspacesByUser | list workspaces which include user | Operation level | * | not supported |
| DiagnoseRuleGroupExec | Diagnose rule group execute error | Operation level | * | not supported |
| DownloadLogByLine | DownloadLogByLine | Operation level | * | not supported |
| ExportTableModifyDetailByCollectJob | ExportTableModifyDetailByCollectJob | Operation level | * | not supported |
| ExportTableModifyDetailByTableId | export table modify detail by tableId | Operation level | * | not supported |
| GetCosToken | get cos token | Operation level | * | not supported |
| GetExploreJobs | Get Explore Jobs | Operation level | * | not supported |
| GetJobsWithoutExecutions | GetJobsWithoutExecutions | Operation level | * | not supported |
| GetMetaTableTotalList | Get MetaTable Total List | Operation level | * | not supported |
| GetMonitorData | Pull indicator monitoring data | Operation level | * | not supported |
| GetNotebookSupportProjectClusters | Get Notebook Support Project Clusters | Operation level | * | not supported |
| ListClonePackages | Get clone package information | Operation level | * | not supported |
| ListWorkspacesByPage | list workspaces by page | Operation level | * | not supported |
| LocateTableDatabaseTree | Locate Table Database Tree | Operation level | * | not supported |
| RestoreRecycleFunctionStatus | function restore status | Operation level | * | not supported |
| ScheduleCalendarExport | ScheduleCalendarExport | Operation level | * | not supported |
| SearchImportTaskList | Query import task list | Operation level | * | not supported |
| SearchRealViewTableList | Search RealView Table List | Operation level | * | not supported |
Other Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| CheckExistsSameNameCollectJob | check exists same collect job name | Operation level | * | Supported |
| DeleteAllRecycleFunctions | delete all recycle functions | Operation level | * | not supported |
| DeleteRecycleFunction | delete recycle function | Operation level | * | not supported |
| DeleteReleasableObject | Removing objects to be published | Operation level | * | not supported |
| MoveFile | Move files | Operation level | * | not supported |
| SubmitRealViewTable | submit table to prod version | Operation level | * | not supported |
| UpdateTaskDs | UpdateTaskDs | Operation level | * | not supported |
List Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeAllTask | Query task | Operation level | * | Supported |
| DescribeApproveSubmitOrderTaskList | retrieve the approve id list for approval submission order | Operation level | * | Supported |
| DescribeImportPathTrees | Pulling and Importing Catalog Trees | Operation level | * | Supported |
| DescribeOrderTaskIdList | Get a list of dependency-sorted task ids | Operation level | * | not supported |
| DescribeOrganizationalFunctions | Query Full Function (Hierarchical) Interface | Operation level | * | Supported |
| DescribeProjectClusters | DescribeProjectClusters | Operation level | * | not supported |
| DescribeReleasableObjectVersionList | List of object versions to be released | Operation level | * | Supported |
| GetResourcePathTree | [Resource Management] Getting the Resource Catalog Tree | Operation level | * | not supported |
Yes
No
Was this page helpful?