Release Notes and Announcements

Release Notes

Product Announcements

User Guide

Product Introduction

Overview

Product Architecture

Strengths

Use Cases

Regions and AZs

Major Version Lifecycle Explanation

Features and Differences

Instance Types

Instance Specifications

Storage Types

Common Concepts

Network Environment

License Statement

Purchase Guide

Billing Overview

Product Pricing

Purchase Methods

Renewal Instructions

Payment Overdue

Refund

From Pay-as-You-Go to Monthly Subscription

Instance Adjustment Fees Description

Local Backup Space Billing

Cross-Region Backup Billing

Viewing Bill Details

Getting Started

Creating TencentDB for SQL Server Instance

Connecting to TencentDB for SQL Server Instance

Managing TencentDB for SQL Server Instance

Operation Guide

Constraints and Limits

Usage Specifications and Suggestions

Maintaining Instance

Adjusting Instance Configuration

Read-Only Instance

Network and Security

Account Management

Database Management

Data Security

Parameter Configuration

Monitoring and Alarms

Backup and Restoration

Log Management

Publish-Subscribe

SSIS

Data Migration (New)

Data Migration (Legacy)

Data Synchronization (DTS)

Practical Tutorial

TencentDB for SQL Server Methods for Regular Maintenance

TencentDB for SQL Server Optimization of Slow SQL

How to Better Use Tempdb

Cross-Account Backup Restoration

Creating VPC for TencentDB for SQL Server

Connecting Kingdee K/3 WISE to TencentDB for SQL Server

Account Permissions and Permission Control

Enabling and Disabling the CDC Feature

Shrinking a Database

API Documentation

History

Introduction

API Category

Making API Requests

Sales and fee related APIs

Instance Management related APIs

Operation and maintenance management related APIs

Network management related APIs

Account management related APIs

Database management related APIs

Security group management related APIs

Data security encryption related APIs

Parameter configuration related APIs

Extended Event related APIs

Log management related APIs

Read only instance management related APIs

Publish and subscribe related APIs

Backup related APIs

Rollback related APIs

Data migration (cold standby migration) related APIs

SQL Server Integration Services (SSIS) related APIs

Data migration (DTS old version) related APIs

Data Types

Error Codes

FAQs

Overview

Model Selection

Pricing and Selection

Connection and Network

Account and Permission

Backup and Rollback

Data Migration

Publish/Subscribe

Read-Only Instance

Version and Architecture Upgrade

Disk Space and Specification Adjustment

Monitoring and Alarms

Log-Related

Parameter Modification

Features

Performance, Space, and Memory-Related FAQs

Service Agreement

Service Level Agreement

Performance Evaluation

Performance Test Report

Glossary

Authorizable Resource Types

PDF

포커스 모드

폰트 크기

마지막 업데이트 시간: 2024-01-18 17:20:33

Resource-level permission can be used to specify which resources a user can manipulate. TencentDB for SQL Server supports certain resource-level permissions. This means that for TencentDB for SQL Server operations that support resource-level permission, you can control the time when a user is allowed to perform operations or to use specified resources. The following table describes the types of resources that can be authorized in CAM.
Resource Type
Resource Description Method in Authorization Policy
TencentDB instance-related resource
qcs::sqlserver:$region:$account:instance/*
qcs::sqlserver:$region:$account:instance/$instanceId
TencentDB for SQL Server supports resource-level authorization. You can allow a sub-account to have API permissions for specific resources. The table below lists the TencentDB API operations which currently support resource-level permission control as well as the resources and condition keys supported by each operation. When specifying a resource path, you can use the "*" wildcard in the path.
Any TencentDB API operation not listed in the table does not support resource-level permission. For such an operation, you can still authorize a user to perform it, but you must specify * as the resource element in the policy statement.
API Name
Description
Six-segment Example of Resource
CreateAccount
Creates an account
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
CreateBackup
Creates a backup
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
CreateDB
Creates a database
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
DeleteAccount
Deletes an account
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
DeleteDB
Drops a database
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
DescribeAccounts
Queries the account list
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
DescribeBackups
Queries the backup list
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
DescribeDatabaseNames
Queries database names
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
DescribeDBInstances
Queries the instance list
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
DescribeDBs
Queries the database list
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
DescribeInstanceTasks
Queries instance tasks
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
DescribeRollbackTime
Queries the time range available for rollback
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
DescribeSlowlogs
Queries the slow log list
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
InquiryPriceRenewDBInstance
Queries the renewal price of an instance
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
InquiryPriceUpgradeDBInstance
Queries the upgrade price of an instance
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
ModifyAccountPrivilege
Modifies account permissions
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
ModifyAccountRemark
Modifies account remarks
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
ModifyBackupStrategy
Modifies the time for cold backup
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
ModifyDatabasePrivilege
Modifies database permissions
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
ModifyDBInstanceName
Renames an instance
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
ModifyDBInstanceProject
Modifies an instance project
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
ModifyDBName
Renames a database
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
ModifyDBRemark
Modifies database remarks
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
RenewDBInstance
Renews an instance
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
ResetAccountPassword
Resets an account password
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
RestartDBInstance
Restarts an instance
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
RestoreInstance
Restores a cold backup instance
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
RollbackInstance
Rolls back an instance
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
TerminateDBInstance
Terminates an instance
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
UpgradeDBInstance
Upgrades an instance
``qcs::sqlserver:$region:$account:instance/$instanceId``
``qcs::sqlserver:$region:$account:instance/*``
﻿

도움말 및 지원

문제 해결에 도움이 되었나요?

더 자세한 내용은 문의하기 또는 티겟 제출 을 통해 문의할 수 있습니다.

피드백

Resource Type	Resource Description Method in Authorization Policy
TencentDB instance-related resource	`qcs::sqlserver:$region:$account:instance/*` `qcs::sqlserver:$region:$account:instance/$instanceId`

API Name	Description	Six-segment Example of Resource
CreateAccount	Creates an account	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
CreateBackup	Creates a backup	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
CreateDB	Creates a database	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
DeleteAccount	Deletes an account	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
DeleteDB	Drops a database	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
DescribeAccounts	Queries the account list	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
DescribeBackups	Queries the backup list	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
DescribeDatabaseNames	Queries database names	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
DescribeDBInstances	Queries the instance list	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
DescribeDBs	Queries the database list	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
DescribeInstanceTasks	Queries instance tasks	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
DescribeRollbackTime	Queries the time range available for rollback	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
DescribeSlowlogs	Queries the slow log list	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
InquiryPriceRenewDBInstance	Queries the renewal price of an instance	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
InquiryPriceUpgradeDBInstance	Queries the upgrade price of an instance	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
ModifyAccountPrivilege	Modifies account permissions	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
ModifyAccountRemark	Modifies account remarks	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
ModifyBackupStrategy	Modifies the time for cold backup	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
ModifyDatabasePrivilege	Modifies database permissions	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
ModifyDBInstanceName	Renames an instance	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
ModifyDBInstanceProject	Modifies an instance project	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
ModifyDBName	Renames a database	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
ModifyDBRemark	Modifies database remarks	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
RenewDBInstance	Renews an instance	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
ResetAccountPassword	Resets an account password	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
RestartDBInstance	Restarts an instance	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
RestoreInstance	Restores a cold backup instance	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
RollbackInstance	Rolls back an instance	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
TerminateDBInstance	Terminates an instance	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``
UpgradeDBInstance	Upgrades an instance	``qcs::sqlserver:$region:$account:instance/$instanceId`` ``qcs::sqlserver:$region:$account:instance/*``

tencent cloud

TencentDB for SQL Server

Authorizable Resource Types

도움말 및 지원