tencent cloud

Cloud Access Management

Product Introduction
CAM Overview
Features
Scenarios
Basic Concepts
Use Limits
User Types
Purchase Guide
Getting Started
Creating Admin User
Creating and Authorizing Sub-account
Logging In to Console with Sub-account
User Guide
Overview
Users
Access Key
User Groups
Role
Identity Provider
Policies
Permissions Boundary
Troubleshooting
Downloading Security Analysis Report
CAM-Enabled Role
Overview
Compute
Container
Microservice
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Database SaaS Service
Networking
CDN and Acceleration
Network Security
Data Security
Application Security
Domains & Websites
Big Data
Middleware
Interactive Video Services
Real-Time Interaction
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
CAM-Enabled API
Overview
Compute
Edge Computing
Container
Distributed cloud
Microservice
Serverless
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Networking
CDN and Acceleration
Network Security
Endpoint Security
Data Security
Business Security
Application Security
Domains & Websites
Office Collaboration
Big Data
Voice Technology
Image Creation
Tencent Big Model
AI Platform Service
Natural Language Processing
Optical Character Recognition
Middleware
Communication
Interactive Video Services
Real-Time Interaction
Stream Services
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Education Sevices
Medical Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
Use Cases
Security Practical Tutorial
Multi-Identity Personnel Permission Management
Authorizing Certain Operations by Tag
Supporting Isolated Resource Access for Employees
Enterprise Multi-Account Permissions Management
Reviewing Employee Operation Records on Tencent Cloud
Implementing Attribute-Based Access Control for Employee Resource Permissions Management
During tag-based authentication, only tag key matching is supported
Business Use Cases
TencentDB for MySQL
CLB
CMQ
COS
CVM
VPC
VOD
Others
API Documentation
History
Introduction
API Category
Making API Requests
User APIs
Policy APIs
Role APIs
Identity Provider APIs
Data Types
Error Codes
FAQs
Role
Key
Others
CAM Users and Permissions
Glossary

Data Accelerator Goose FileSystem

PDF
포커스 모드
폰트 크기
마지막 업데이트 시간: 2026-04-03 09:43:27

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
Data Accelerator Goose File System goosefs Supported Supported Resource level Partially supported

Note:

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
AddClientSubnet add client subnet Resource level qcs::goosefs::uin/${uin}:cluster/${ClusterId} Supported
AddCrossVpcSubnetSupportForClientNode add cross vpc subnet support for client node Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
AddLinuxClientNode add linux client node Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
AddMonitorAgentNum Expand the number of monitoring agents Operation level * not supported
AttachFileSystemBucket attach bucket to file system Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
BatchAddClientNodes batch add client nodes Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
BatchDeleteClientNodes batch delete client nodes Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
BuildCustomerCluster Build customer cluster Operation level * Supported
CancelDataRepositoryTask cancel data repository task Resource level qcs::goosefs::uin/${uin}:filesystem/${filesystem} Supported
CancelLoadTask cancel load task Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${ClusterId} Supported
CompleteClusterTask Complete Cluster Task Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
CreateCluster Create GooseFS Cluster Operation level * Supported
CreateClusterClients Create clients for cluster Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
CreateClusterConfig Create cluster configuration Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
CreateClusterGroup CreateClusterGroup Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
CreateClusterNodes Add new node to GooseFS cluster Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
CreateDataRepositoryTask create data repository task Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
CreateFileSystem create filesystem Operation level * Supported
CreateFileSystemTag create a tag for filesystem Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} not supported
CreateFileset create fileset Resource level qcs::goosefs::uin/${uin}:filesystem/${filesystem} Supported
CreateLoadTask Create GooseFS Load Task Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${ClusterId} Supported
CreateNamespace CreateNamespace Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId}\\\\ Supported
CreatePeriodDataRepositoryTask CreatePeriodDataRepositoryTask Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
CreateSnapshot Create Snapshot Operation level * Supported
DeleteClientSubnet delete client subnet Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId}\\\\ Supported
DeleteCluster Delete GooseFS Cluster Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DeleteClusterClients Delete clients of cluster Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DeleteClusterGroup DeleteClusterGroup Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DeleteClusterNodes Delete cluster nodes Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DeleteCrossVpcSubnetSupportForClientNode delete cross vpc subnet support for client node Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DeleteCustomerCluster DeleteCustomerCluster Operation level * Supported
DeleteDataRepositoryTask delete data repository task Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DeleteFileSystem delete file system Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DeleteFileSystemQuotas delete filesystem quota Resource level qcs::goosefs::uin/${uin}:filesystem/${filesystem} Supported
DeleteFileSystemTag delete filesystem tag Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DeleteFileset delete fileset Resource level qcs::goosefs::uin/${uin}:filesystem/${filesystem} Supported
DeleteLinuxClientNode delete linux client node Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DeleteNamespace DeleteNamespace Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DeletePeriodDataRepositoryTask DeletePeriodDataRepositoryTask Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DeleteSnapshot Delete Snapshot Operation level * Supported
DetachFileSystemBucket detach filesystem bucket Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DisableClusterNodes Disable cluster nodes Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
EnableClusterNodes Enable cluster nodes Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
ExcludeClusterNodes Exclude Cluster Node Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
ExpandCapacity expand filesystem capacity Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
IncludeClusterNodes Include Cluster Node Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
ManageClusterCapacity manager cluster capacity size Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
ManageClusterDowngrade manage cluster downgrade Resource level qcs::goosefs::uin/${uin}:cluster/${clusterId} not supported
MixedDeployClusterService GooseFS mixed deploy interface Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
ModifyDataRepositoryBandwidth modify data repository bandwidth Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
ModifyUserInfoForOps Modify customer information-operation platform Operation level * not supported
ResetClusterClients reset cluster clients Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
ResetClusterNodes Reset cluster nodes Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterid} Supported
RollbackClusterTask Rollback Cluster Task Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
RollbackClusterTaskStep Rollback Cluster Task Step Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
SetClusterAlertsForOps The operation platform sets the internal alarm status of the cluster Operation level * not supported
SetFileSystemQuota set filesystem dir quota Resource level qcs::goosefs::uin/${uin}:filesystem/${filesystem} Supported
StartClusterTaskStep Start Cluster Task Step Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
SwitchClusterLeader switch cluster leader Resource level qcs::goosefs::uin/${uin}:cluster/${clusterId} not supported
TerminateClusterTask Terminate Cluster Task Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
UpdateCluster Update GooseFS Cluster Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
UpdateClusterClients UpdateClusterClients Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
UpdateClusterNodes UpdateClusterNodes Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
UpdateClusterRole UpdateClusterRole Resource level qcs::goosefs:${region}:uin/${uin}:role/${clusterId}/${roleName} Supported
UpdateDataRepositoryTask update data repository task Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
UpdateFileSystem update file system Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
UpdateFileSystemQuota update quota limit Resource level qcs::goosefs::uin/${uin}:filesystem/${filesystem} Supported
UpdateFileset update fileset Resource level qcs::goosefs::uin/${uin}:filesystem/${filesystem} Supported
UpdateFilesetGeneralConfig update fileset general config Resource level qcs::goosefs::uin/${uin}:filesystem/${filesystem} Supported
UpdateLoadTaskPriority Update load task priority Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${ClusterId} Supported
UpdateNamespace UpdateNamespace Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
UpdateUserPreprocessForOps update user progress Operation level * not supported
UpgradeClusterVersion upgrade cluster version Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
BuildClientNodeMountCommand Build Mount Command For Goosefsx Client Operation level * Supported
CheckPreconditionsForCreateCluster check preconditions for create cluster Operation level * Supported
CheckPreconditionsForCreateClusterNodes check preconditions for create cluster nodes Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
CheckPreconditionsForSwitchClusterLeader check preconditions for switch cluster leader Resource level qcs::goosefs::uin/${uin}:cluster/${clusterId} not supported
DescribeAsyncTask list async task Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DescribeAsyncTaskDetail list async task details Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DescribeCapacityInfo View the starting capacity value when the current user UIN creates a cluster Operation level * Supported
DescribeClientUinMappingByUin Query the client version visible to the customer Operation level * Supported
DescribeCluster Point Query GooseFS Cluster Resource level qcs::goosefs::uin/${uin}:cluster/${ClusterId} not supported
DescribeClusterClients Describe clients of cluster Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DescribeClusterConfig Describe cluster config Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DescribeClusterMonitorReportUrl View the server address where cluster monitoring indicators are reported Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${ClusterId} Supported
DescribeCreateClusterCheckResult describe craete cluster check result Operation level * Supported
DescribeCreateClusterNodesCheckResult describe create cluster nodes check result Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DescribeDataRepositoryTaskStatus query data repository task status Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DescribeFileSystemBuckets describe filesystem buckets Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DescribeFileSystemTags describe filesystem tags Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DescribeFilesetGeneralConfig descirbe fileset general config Resource level qcs::goosefs::uin/${uin}:filesystem/${filesystem} Supported
DescribeGooseFSSoftVersion DescribeGooseFSSoftVersion Operation level * Supported
DescribeLoadTask Describe GooseFS Load Task Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${ClusterId} Supported
DescribePeriodDataRepositoryTaskExecRecords DescribePeriodDataRepositoryTaskExecRecords Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DescribePeriodDataRepositoryTasks DescribePeriodDataRepositoryTasks Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DescribeSnapshots Describe Snapshots Operation level * Supported
DescribeStepDetails Describe step details Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DescribeTaskSteps Describe all steps of tasks Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DescribeTasks Describe all tasks of clusters Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DescribeUserInfoForOps Query customer information-operation platform Operation level * not supported
DescribeUserProgressForOps Showing Customer Progress - Operation Platform Operation level * not supported
ListClusterConfigs List cluster config Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
ListWorkerTypeForOps List the worker machine specifications of the cluster Operation level * not supported
QueryClientNodeMountCommand Query Client Node Mount Command Operation level * Supported
QueryClientSubnet query client subnet Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId}\\ Supported
QueryClientUninstallCommand Query Client Uninstall Command Operation level * Supported
QueryCrossVpcSubnetSupportForClientNode query cross vpc subnet support for client node Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
QueryDataRepositoryBandwidth query data repository bandwidth Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported

List Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeAddLinuxClientNodeTasks describe add linux client node task list Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DescribeClientNodes describe all client nodes Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DescribeClusterGroups DescribeClusterGroups Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DescribeClusterNodes Describe Cluster Nodes Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DescribeClusters Describe all GooseFS Clusters Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
DescribeCustomerCluster DescribeCustomerCluster Operation level * Supported
DescribeDataRepositoryTasks describe data repository tasks Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DescribeFileSystemQuota describe quota info Resource level qcs::goosefs::uin/${uin}:filesystem/${filesystem} Supported
DescribeFileSystems describe filesystems Resource level qcs::goosefs:${region}:uin/${uin}:filesystem/${filesystem} Supported
DescribeFilesets describe fileset list info Resource level qcs::goosefs::uin/${uin}:filesystem/${filesystem} Supported
DescribeMonitorMetricNodeView List Monitor Metric User Dimension of FileSystem Resource level qcs::goosefs::uin/${uin}:filesystem/${FileSystemId} Supported
DescribeMonitorMetricUserView List Monitor Mertic User Dimension Data of FileSystem Resource level qcs::goosefs::uin/${uin}:filesystem/${FileSystemId} Supported
DescribeNamespaces DescribeNamespaces Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${clusterId} Supported
ListClusters Describe all GooseFS Clusters Operation level * Supported
ListLoadTasks List GooseFS Load Tasks Resource level qcs::goosefs:${region}:uin/${uin}:cluster/${ClusterId} Supported

Other Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
MountMultipleStorageFileSystem Mount Multiple Storage FileSystem Operation level * Supported

도움말 및 지원

문제 해결에 도움이 되었나요?

피드백