tencent cloud

Cloud Access Management

Product Introduction
CAM Overview
Features
Scenarios
Basic Concepts
Use Limits
User Types
Purchase Guide
Getting Started
Creating Admin User
Creating and Authorizing Sub-account
Logging In to Console with Sub-account
User Guide
Overview
Users
Access Key
User Groups
Role
Identity Provider
Policies
Permissions Boundary
Troubleshooting
Downloading Security Analysis Report
CAM-Enabled Role
Overview
Compute
Container
Microservice
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Database SaaS Service
Networking
CDN and Acceleration
Network Security
Data Security
Application Security
Domains & Websites
Big Data
Middleware
Interactive Video Services
Real-Time Interaction
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
CAM-Enabled API
Overview
Compute
Edge Computing
Container
Distributed cloud
Microservice
Serverless
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Networking
CDN and Acceleration
Network Security
Endpoint Security
Data Security
Business Security
Application Security
Domains & Websites
Office Collaboration
Big Data
Voice Technology
Image Creation
Tencent Big Model
AI Platform Service
Natural Language Processing
Optical Character Recognition
Middleware
Communication
Interactive Video Services
Real-Time Interaction
Stream Services
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Education Sevices
Medical Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
Use Cases
Security Practical Tutorial
Multi-Identity Personnel Permission Management
Authorizing Certain Operations by Tag
Supporting Isolated Resource Access for Employees
Enterprise Multi-Account Permissions Management
Reviewing Employee Operation Records on Tencent Cloud
Implementing Attribute-Based Access Control for Employee Resource Permissions Management
During tag-based authentication, only tag key matching is supported
Business Use Cases
TencentDB for MySQL
CLB
CMQ
COS
CVM
VPC
VOD
Others
API Documentation
History
Introduction
API Category
Making API Requests
User APIs
Policy APIs
Role APIs
Identity Provider APIs
Data Types
Error Codes
FAQs
Role
Key
Others
CAM Users and Permissions
Glossary

Application Performance Management

PDF
포커스 모드
폰트 크기
마지막 업데이트 시간: 2026-04-03 09:40:00

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
Application Performance Management apm Supported Supported Resource level Partially supported

Note:

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
BatchDescribeInstances BatchDescribeInstances Operation level * Supported
CheckRoleNameExist CheckRoleNameExist Operation level * Supported
CheckRoleNameExistCRM CheckResourceByRoleName For Cloud Resource Management Operation level * not supported
CheckServiceDashboardConfig CheckServiceDashboardConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeAgentInfo query service agent information Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeAgentList DescribeAgentList Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeAgentStatistic DescribeAgentStatistic Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeAllQueryViews DescribeAllQueryViews Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmAgent DescribeApmAgent Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmAllVulCount return user\\\'s all vul count Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmApplicationConfig DescribeApmApplicationConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId}
qcs::apm:${Region}:uin/:apm-service/${ServiceID}
Supported
DescribeApmAssociation DescribeApmAssociation Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmComboInfo DescribeApmComboInfo Operation level * Supported
DescribeApmConsumption consumption Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmDefaultInstance get default instance Operation level * Supported
DescribeApmInfoByAppId return appId infomation Operation level * Supported
DescribeApmInstanceOverview Querying APM instance summary inform Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmInstances DescribeApmInstances Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmPrometheusRule DescribeApmPrometheusRule Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmRegions DescribeApmRegions Operation level * Supported
DescribeApmSQLInjectionDetail DescribeApmSQLInjectionDetail Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmSampleConfig DescribeApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmService get apm service information Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId}
qcs::apm:${Region}:uin/:apm-service/${ServiceID}
Supported
DescribeApmServiceBrief get service list Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId}
qcs::apm:${Region}:uin/:apm-service/${ServiceID}
Supported
DescribeApmServiceMetric get apm service metric Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId}
qcs::apm:${Region}:uin/:apm-service/${ServiceID}
Supported
DescribeApmSupportView get applicaton support views Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmVulnerabilityCount DescribeApmVulnerabilityCount Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeApmVulnerabilityDetail DescribeApmVulnerabilityDetail Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeCVMService DescribeCVMService Operation level * Supported
DescribeCloudProductCatalog DescribeCloudProductCatalog Operation level * Supported
DescribeCloudProductConfig DescribeCloudProductConfig Operation level * Supported
DescribeDBService DescribeDBService Operation level * Supported
DescribeDBTagValues Get the database tag value Operation level * Supported
DescribeEventData Get instance gcLog log or thread deadlock related information Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeEventMessageData DescribeEventMessageData Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeFlameGraphData Get flame graph data Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeGeneralApmApplicationConfig DescribeGeneralApmApplicationConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeGeneralMetricData Universal interface for obtaining indicator data. Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeGeneralOTSpanList DescribeGeneralOTSpanList Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeGeneralSpanList DescribeGeneralSpanList Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeGrafanaMetricData DescribeGrafanaMetricData Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeHistoryFlameGraphList DescribeHistoryFlameGraphList Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeInstanceBriefs DescribeInstanceBriefs Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeInstances DescribeInstances Operation level * Supported
DescribeMetricLineData DescribeMetricLineData Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeMetricPointData Describe metric point data Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeMetricRecords DescribeMetricRecords Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeOPRAllVulCount Query the number of vulnerabilities under the user. Operation level * Supported
DescribeProfileDetail DescribeProfileDetail Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeProfileTasks DescribeProfileTasks Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeQueryTraceDetail Get the detailed data information of the query. Operation level * Supported
DescribeQueryView DescribeQueryView Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeRelatedServicesOnTrace DescribeRelatedServicesOnTrace Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeResources Query user available prepaid resource packs Operation level * Supported
DescribeService DescribeService Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeServiceDashboardConfig DescribeServiceDashboardConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeServiceLink Query service upstream and downstream Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeServiceMetric DescribeServiceMetric Operation level * Supported
DescribeServiceNodes DescribeServiceNodes Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeServiceOverview DescribeServiceOverview Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeSpanTagList DescribeSpanTagList Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeSpanThreadAnatomyList Query thread profiling information Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeSpanTreeByID DescribeSpanTreeByID Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeSqlMetricData Get the database-related indicator interface. The user uploads the request parameters as needed, and the corresponding indicator data is returned. Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeTKEService get TKE reporting service information Operation level * Supported
DescribeTagCountValues DescribeTagCountValues Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeTagValues DescribeTagValues Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeTagValuesList DescribeTagValuesList Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeThreadDump Get thread detail information Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeTopology DescribeTopology Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeTopologyMetricLineData DescribeTopologyMetricLineData Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DescribeTopologyNew DescribeTopologyNew Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeTopologyView get topology view Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeTraceAnalyzeSpanList Query trace time-consuming analysis information Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DescribeTraceList DescribeTraceList Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
CreateApmInstance CreateApmInstance Operation level * Supported
CreateApmPrometheusRule CreateApmPrometheusRule Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
CreateApmSampleConfig CreateApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
CreateArthasConnection Create Arthas Connection Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
CreateEventTask Create event task Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
CreateProfileTask CreateProfileTask Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
CreateQueryView CreateQueryView Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DeleteApmSampleConfig DeleteApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DeleteExpiredApplicationConfig DeleteExpiredApplicationConfig Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
DeleteQueryView DeleteQueryView Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
DeleteTopologyView delete topology view Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyApmApplicationConfig ModifyApmApplicationConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId}
qcs::apm:${region}:uin/${uin}:apm-service/${ServiceID}
Supported
ModifyApmAssociation ModifyApmAssociation Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyApmDefaultInstance modify default instance Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyApmInstance ModifyApmInstance Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyApmPrometheusRule ModifyApmPrometheusRule Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyApmSampleConfig ModifyApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyApmService modify service information Operation level * Supported
ModifyEventSuggestion ModifyEventSuggestion Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyEventTask Modify Event Task Result Operation level * Supported
ModifyGeneralApmApplicationConfig Modify application configuration information Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyInstanceAssociation modify instance association Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyProfileTask ModifyProfileTask Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyQueryView ModifyQueryView Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyRenewalResource Enable/disable auto-renewal for APM prepaid resources Operation level * Supported
ModifyTopologyView modify topology view Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
ModifyUserBind ModifyUserBind Operation level * Supported
OpenApmPaidVersion OpenApmPaidVersion Operation level * Supported
TerminateApmInstance TerminateApmInstance Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
TerminateApmService TerminateApmService Operation level * Supported

도움말 및 지원

문제 해결에 도움이 되었나요?

피드백