tencent cloud

Cloud Access Management

Product Introduction
CAM Overview
Features
Scenarios
Basic Concepts
Use Limits
User Types
Purchase Guide
Getting Started
Creating Admin User
Creating and Authorizing Sub-account
Logging In to Console with Sub-account
User Guide
Overview
Users
Access Key
User Groups
Role
Identity Provider
Policies
Permissions Boundary
Troubleshooting
Downloading Security Analysis Report
CAM-Enabled Role
Overview
Compute
Container
Microservice
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Database SaaS Service
Networking
CDN and Acceleration
Network Security
Data Security
Application Security
Domains & Websites
Big Data
Middleware
Interactive Video Services
Real-Time Interaction
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
CAM-Enabled API
Overview
Compute
Edge Computing
Container
Distributed cloud
Microservice
Serverless
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Networking
CDN and Acceleration
Network Security
Endpoint Security
Data Security
Business Security
Application Security
Domains & Websites
Office Collaboration
Big Data
Voice Technology
Image Creation
Tencent Big Model
AI Platform Service
Natural Language Processing
Optical Character Recognition
Middleware
Communication
Interactive Video Services
Real-Time Interaction
Stream Services
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Education Sevices
Medical Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
Use Cases
Security Practical Tutorial
Multi-Identity Personnel Permission Management
Authorizing Certain Operations by Tag
Supporting Isolated Resource Access for Employees
Enterprise Multi-Account Permissions Management
Reviewing Employee Operation Records on Tencent Cloud
Implementing Attribute-Based Access Control for Employee Resource Permissions Management
During tag-based authentication, only tag key matching is supported
Business Use Cases
TencentDB for MySQL
CLB
CMQ
COS
CVM
VPC
VOD
Others
API Documentation
History
Introduction
API Category
Making API Requests
User APIs
Policy APIs
Role APIs
Identity Provider APIs
Data Types
Error Codes
FAQs
Role
Key
Others
CAM Users and Permissions
Glossary

Tencent Cloud Super App as a Service

PDF
포커스 모드
폰트 크기
마지막 업데이트 시간: 2026-04-03 09:47:00

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
Tencent Cloud Super App as a Service tcsas Supported not supported Operation level Supported

Note:

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
AddTeamMember Add a user to team Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
ConfigureMNPPreview Configure mini program trial version Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
CreateAdminUser Create admin user Operation level * Supported
CreateApplication Create a new application Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId}${TeamId} Supported
CreateApplicationConfig CreateApplicationConfig Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId}${TeamId} Supported
CreateApplicationSensitiveAPI Create app sensitive API Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
CreateCloudPresetKey create preset key Operation level * Supported
CreateCustomerCos Create customer cos Operation level * Supported
CreateGlobalDomainACL Create global domains Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
CreateISPMNP Create a service provider mini program Operation level * Supported
CreateISPMNPReleaseApproval Create service provider listing review Operation level * Supported
CreateMNGVersion CreateMNGVersion Operation level * Supported
CreateMNP Create a new mini program Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId}${TeamId} Supported
CreateMNPApproval Create mini program release approval Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
CreateMNPDomainACL Create mini program level domains Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
CreateMNPSecretKey CreateMNPSecretKey Operation level * Supported
CreateMNPSensitiveAPIPermissionApproval Create application sensitive API access permission from mini program Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
CreateMNPVersion Create a new mini program version Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId}${MNPId} Supported
CreateTeam Create a new team Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
CreateUser Create a new user Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DeleteApplication Delete application Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId}${ApplicationId} Supported
DeleteApplicationSensitiveAPI Delete app sensitive API Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DeleteGlobalDomain Delete global domains Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DeleteISPMNP Delete service provider Mini Program Operation level * Supported
DeleteMNP Delete mini program Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId}${MNPId} Supported
DeleteTeam Delete team Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DeleteTeamMember Delete team member Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DeleteUser Delete user Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DisableApplicationSensitiveAPI Disable app sensitive API Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
EnableApplicationSensitiveAPI Enable app sensitive API Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
ModifyAdminPassword Modify admin password Operation level * Supported
ModifyAdminUser Modify admin User Operation level * Supported
ModifyApplication Modify application information Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId}${ApplicationId} Supported
ModifyApplicationConfig ModifyApplicationConfig Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId}${TeamId} Supported
ModifyConsoleCustomizeConfig Modify Console Customize Config Operation level * Supported
ModifyCustomerCdn update cdn config Operation level * Supported
ModifyGlobalDomain Modify global domain Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
ModifyIDECustomizeConfig Modify IDE Customize Config Operation level * Supported
ModifyISPMNP Modify the service provider\'s mini program Operation level * Supported
ModifyMNP Modify mini program information Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId}${MNPId} Supported
ModifyMNPDomain Modify mini program level domains Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
ModifyTeam Modify team information Operation level * Supported
ModifyTeamMember Modify team member role Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
ModifyUser Modify user information Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
OpenTCSASPostPay Open PostPay Operation level * Supported
ProcessMNPApproval Agree/reject mini program release approval Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
ProcessMNPSensitiveAPIPermissionApproval Agree/reject sensitive API application from mini program Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
ReleaseMNPVersion Release mini program Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
RemoveISPMNP Remove the service provider\'s mini program Operation level * Supported
RemoveMNP Offline/Disable mini program Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
RollbackMNPVersion Roll back online mini program Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
CheckOpenTCSASConsole Check Open Status Operation level * Supported
DescribeAPPDataDetailLineChart Application Dimension Data Detail Trend Chart Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeAPPDataOverview Application Dimension Data Overview Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeAdminUser query admin user Operation level * Supported
DescribeAdvertisingLineChart Trends in Mini Program Advertising Revenue Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeAdvertisingOverview Mini Program Advertising Overview Data Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeApplication Acquire application information Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeApplicationConfigFile Acquire application config Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeApplicationConfigInfos DescribeApplicationConfigInfos Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId}${TeamId} Supported
DescribeApplicationMNPList DescribeApplicationMNPList Operation level * Supported
DescribeApprovalList Query the list of approved list Operation level * Supported
DescribeBaseConfig describe base config Operation level * Supported
DescribeCanBuyMiniGameAddonSetPackageList DescribeCanBuyMiniGameAddonSetPackageList Operation level * Supported
DescribeConsoleCustomizeConfig Describe console customize config Operation level * Supported
DescribeConsoleFileUploadTempSecret Describe Console File Upload Temp Secret Operation level * Supported
DescribeCustomerCdn query cdn information Operation level * Supported
DescribeCustomerCos query customer cos information Operation level * Supported
DescribeCustomerPurchasePackageList Describe Customer Purchase Package List Operation level * Supported
DescribeGlobalDomainACL Acquire global domains Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeGlobalOverviewDataSummary Global Overview - Data Overview Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeGlobalOverviewReportDetail Global Overview - Report Detail Data Query Interface Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeIDECustomizeConfig Describe IDE customize config Operation level * Supported
DescribeISPMNP Query the detailed information of the service provider\\\'s mini program Operation level * Supported
DescribeISPMNPCategory Query the type of service provider\\\'s mini program Operation level * Supported
DescribeISPMNPList Query the list of service provider mini programs Operation level * Supported
DescribeISPMNPMarket Mini Program market dashboard Operation level * Supported
DescribeMNGAccessAnalysisDetail DescribeMNGAccessAnalysisDetail Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGAccessAnalysisLineChart Trend Chart of Mini Game Access Analysis Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGAccessAnalysisOverview DescribeMNGAccessAnalysisOverview Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGActiveUserRealTimeStatistics Real time statistics of active mini games Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGAdvertisingDetail Mini Game Advertising data detail Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGAdvertisingLineChart Trend data of mini game advertising Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGAdvertisingOverview Mini Game Advertising Overview Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGMAUDataDetail DescribeMNGMAUDataDetail Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGMAULineChart DescribeMNGMAULineChart Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGMAUMonthlyComparisonMetricCard DescribeMNGMAUMonthlyComparisonMetricCard Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGPaymentLineChart Mini Game Payment Trend Analysis Chart Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGPaymentOverview Overview of mini Game Payment Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGPaymentReportDetail mini game payment report details data Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGPaymentRetentionAnalysis Payment Retention Analysis for Mini Games Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGRetentionData Active retention data for mini games Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNGVersion DescribeMNGVersion Operation level * Supported
DescribeMNP Acquire mini program information Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPAccessAnalysisOverview Overview of Mini Program Access Analytics Data Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPActiveUserRealTimeStatistics Mini program active real-time statistical data Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPAdvertisingDetail Details of Mini Program Advertising Revenue Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPAllStageVersions Acquire mini program in development, in review and online version information Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPApprovalList Acquire Approval application list of mini program Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPCategory Describe mini program category Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPDomainACL Acquire mini program level domains Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPList Acquire mini program list Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPMAUDataDetail Mini Program MAU Data Details Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPMAULineChart Mini Program MAU Trend Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPMAUMetricCard Mini Program MAU Monthly Comparison Indicator Card Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPOfflinePackageURL Acquire URL of mini program offline package Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPPageAnalysisDetail Details of Mini Program Page Analysis Data Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPPreview Acquire dev mini program preview information Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPReleasedVersionHistory Acquire all online versions of a mini program Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPReportDataLineChart Mini-program Access Analysis Report Data Trend Chart Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPReportDetail Mini program access analysis detailed data Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPRetentionData Mini program retains and analyzes data Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPSensitiveAPIPermissionApproval Acquire sensitive API application information from mini program Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPVersion Acquire result of mini program creating task Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribePaymentDataDetail Details of Mini Program Payment Data Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribePaymentDataLineChart Standard Payment Data Trend Chart for Mini Programs Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribePaymentDataOverview Overview of Mini Program Payment Data Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeTeam Acquire team information Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeTempSecret4InstanceUploadFile2Cos Accquire the file upload secret Operation level * Supported
DescribeTempSecret4UploadFile2Cos Acquire the file upload temporary secret key Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeUser Acquire user information Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeUserISPMenus Query the list of service provider menus Operation level * Supported

Other Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
CreatePresetKey CreatePresetKey Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported

List Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeApplicationList Acquire list of applications Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId}${TeamId} Supported
DescribeApplicationSensitiveAPIList Acquire app sensitive API list Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPSensitiveAPIPermissionApprovalList Acquire sensitive API application list from mini program Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeMNPSensitiveAPIPermissionList Acquire mini program sensitive API list Resource level qcs::tcsas:${Region}:uin/:Limit/${Platform} Supported
DescribeRoleList Acquire list of role that could be bound Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeTeamList Acquire team list Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeTeamMemberList Acquire member list of team Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported
DescribeUserList Acquire list of users Resource level qcs::tcsas:${Region}:uin/:Limit/${PlatformId} Supported

도움말 및 지원

문제 해결에 도움이 되었나요?

피드백