tencent cloud

Tencent Cloud Distributed Cache (Redis OSS-Compatible)

Release Notes and Announcements
Release Notes
Announcements
User Tutorial
Product Introduction
Overview
Product Strengths
Use Cases
Storage Engine
Product Series
Product Versions
Specifications and Performance
Read/Write Separation
Multi-AZ Deployment
Regions and AZs
Terms
Service Regions and Service Providers
Purchase Guide
Billing Overview
Pricing Center
Instance Purchasing
Renewal (Yearly/Monthly Subscription)
Refund (Yearly/Monthly Subscription)
Overdue Payments
Switching from Pay-as-You-Go to Yearly/Monthly Subscription
Getting Started
Quickly Creating an Instance
Connecting to Redis Instance
Operation Guide
Operation Overview
Connecting to a Database Instance
Managing Instances
Upgrade Instance
Management Node (Redis/ValKey Edition)
Multi-AZ Deployment Management
Backup and Restoration
Managing Accounts
Parameter Configuration
Slow Query
Access Management
Network and Security
Monitoring and Alarms
Event Management (Redis/ValKey Edition)
Data Migration
Global Replication for Redis Edition
Database Audit
Performance Optimization
Sentinel Mode
Development Guidelines
Naming Rules
Basic Usage Guidelines
Design Principles of Key and Value
Command Usage Guidelines
Design Principles of Client Programs
Connection Pool Configuration
Command Reference
Command Reference Overview
Redis Edition and Valkey Edition Command Compatibility
Version Command Usage Differences
Differences Between the Proxy Architecture and Direct Connection Mode
More Command Operations (Redis/Valkey Edition)
Memcached Edition Command Compatibility
Practical Tutorial
Building TencentDB for Redis® Client Monitoring Based on Spring Boot
Redis Client Connection Configuration Policy and Practice
Global SCAN Guide for Cluster Architecture
Eliminating Instances Securely
Hot Key and Big Key
AZ Migration Scheme
Troubleshooting
Connection Exception
Exception Analysis and Solution of Redisson Client Timeout Reconnection
Performance Troubleshooting and Fine-Tuning
API Documentation
History
Introduction
API Category
Making API Requests
Instance APIs
Parameter Management APIs
Other APIs
Backup and Restoration APIs
Region APIs
Monitoring and Management APIs
Log APIs
Data Types
Error Codes
FAQs
General
Connection and Login
Purchase
Service Agreement
Service Level Agreement
Terms of Service
Glossary
Contact Us
문서Tencent Cloud Distributed Cache (Redis OSS-Compatible)Operation GuideAccess ManagementAuthorizable Resource Types

Authorizable Resource Types

PDF
포커스 모드
폰트 크기
마지막 업데이트 시간: 2026-03-18 17:24:48
Resource-level permission can be used to specify which resources a user can manipulate. Distributed Cache supports certain resource-level permission. This means that for Redis operations that support resource-level permission, you can control the time when a user is allowed to perform operations or to use specified resources. The following table describes the types of resources that can be authorized in CAM.
Resource Type
Resource Description in Authorization Policy
Tencent Cloud Distributed Cache instance
qcs::redis:$region::instance/*
qcs::redis:$region:$account:instance/$instance
The table below lists the Tencent Cloud Distributed Cache API operations that currently support resource-level permission control, as well as the resources that each operation supports. You can use the * wildcard in a resource path when defining it.

List of APIs supporting resource-level authorization

API Name
Resource Path
AssignProject
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
AssociateSecurityGroups
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
AutoRenew
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
BackupInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
CleanInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
CleanUpInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ClearInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ClearRedis
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
CreateInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
CreateInstanceAccount
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
CreateInstanceHour
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
CreateInstances
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
CreateRedis
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DeleteInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DeleteInstanceAccount
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeAutoBackupConfig
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeBackupUrl
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeDBSecurityGroupsDetail
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeInstanceAccount
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeInstanceBackups
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeInstanceDealDetail
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeInstanceParamRecords
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeInstanceParams
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeInstanceSecurityGroup
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeInstanceSecurityGroupsAssociated
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeInstanceShards
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeInstanceSlowlog
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeInstances
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeProjectSecurityGroup
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeRedis
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeRedisDealDetail
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeRedisProduct
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeRedisProductList
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeRedisRegions
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeRedisZones
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeSlowLog
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeTaskInfo
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeTaskList
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeTasks
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DescribeVPCRedis
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DestroyPostpaidInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DestroyPrepaidInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
DisableReplicaReadonly
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
EnableReplicaReadonly
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ExportRedisBackup
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
GetBackupDownloadUrl
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
GetRedisBackupList
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
GetRedisPerformance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
GetRedisSlowLogList
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
GetRedisTaskList
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
InitRedisPassword
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
InquiryRedisPrice
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ManualBackupInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ModfiyInstancePassword
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ModifyAutoBackupConfig
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ModifyDBInstanceSecurityGroups
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ModifyInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ModifyInstanceAccount
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ModifyInstanceParams
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ModifyInstanceSecurityGroup
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ModifyNetworkConfig
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ModifyRedisName
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ModifyRedisParams
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ModifyRedisProject
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
RenewInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
RenewRedis
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ResetPassword
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
ResetRedisPassword
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
RestoreInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
SetRedisAutoRenew
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
StartupInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
SwitchInstanceVip
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
UnAssociateSecurityGroups
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
UpgradeInstance
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
UpgradeRedis
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
UpgradeRedisInquiryPrice
qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance

List of APIs not supporting resource-level authorization

For a TencentDB API operation that does not support authorization at the resource level, you can still authorize a user to perform it, but you must specify * as the resource element in the policy statement.
API Name
Description
CreateInstances
Creates instance
CreateParamTemplate
Creates a parameter template
DeleteParamTemplate
Deletes a parameter template
DescribeInstanceDealDetail
Queries the order information
DescribeParamTemplateInfo
Gets the details of parameter template
DescribeParamTemplates
Queries the list of parameter templates
DescribeTaskInfo
DescribeTasks
DescribeTasks
Queries the list of tasks
ModifyParamTemplate
Modifies a parameter template
ListUsers
Queries sub-account names
ListCollaborators
Queries collaborator account names
ListWeChatWorkSubAccounts
Queries WeChat usernames
이전 주제: Authorization Policy Syntax다음 주제: Changing Networks

도움말 및 지원

문제 해결에 도움이 되었나요?

피드백