History
Introduction
API Category
Making API Requests
Region APIs
Instance APIs
Cloud Hosting Cluster APIs
Image APIs
Instance Launch Template APIs
Placement Group APIs
Key APIs
Security Group APIs
Network APIs
Data Types
Error Codes
Domain name for API request: wedata.intl.tencentcloudapi.com.
Authorization in Catalog mode.
A maximum of 20 requests can be initiated per second for this API.
The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.
| Parameter Name | Required | Type | Description |
|---|---|---|---|
| Action | Yes | String | Common Params. The value used for this API: AuthorizePrivileges. |
| Version | Yes | String | Common Params. The value used for this API: 2025-08-06. |
| Region | Yes | String | Common Params. For more information, please see the list of regions supported by the product. |
| Resources.N | Yes | Array of PrivilegeResource | Resource array. ResourceType: originates from the ResourceType returned by the GetGrantPrivilegesSTD API in the TCCATALOG module, and change to capitalize the first letter, such as METALAKE corresponding to METALAKE. ResourceUri depends on ResourceType. fixed as default for Metalake. use the three-segment format of catalog for other categories, such as. -Metalake, fixed as default. -Catalog. specifies the catalogName. -Schema. valid values: catalogName.SchemaName. -Table, in the format of catalogName.SchemaName.TableName. |
| Subjects.N | Yes | Array of Subject | Authorization entity array. specifies the SubjectType and corresponding SubjectValue value rules. -User. -User id obtained from DescribeTenantUserList. -Project. -ProjectId from the DescribeUserProjects request parameters structure. -Role (project-level role). -First call DescribeUserProjects to obtain the project ID (ProjectId), then call DescribeRoleList to get the role ID (RoleId), and combine them as $ProjectId.$ProjectId.RoleId, for example "3085649716411588608.308335260274237440". -GlobalRole (platform-level role). -AllAccountUsers all users. -Another ID, taken from RoleId in DescribeTenantRole. |
| Privileges.N | Yes | Array of PrivilegeInfo | Permission point, comes from the NAME in various Privileges returned by the GetGrantPrivilegesSTD API in the TCCATALOG module. |
| Parameter Name | Type | Description |
|---|---|---|
| Data | AuthorizePrivilegesRsp | Result |
| RequestId | String | The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem. |
openapi authorization
POST / HTTP/1.1
Host: wedata.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: AuthorizePrivileges
<Common request parameters>
{
"Resources": [
{
"ResourceType": "CATALOG",
"ResourceUri": "tclake_lakehouse_catalog_table_mayxxiao_64longlonglonglonglonglo"
}
],
"Subjects": [
{
"SubjectType": "User",
"SubjectValues": [
"700002130525"
]
}
],
"Privileges": [
{
"Name": "USE_CATALOG"
}
]
}{
"Response": {
"Data": {
"OverallSuccess": true,
"Results": [
{
"Reason": "",
"Resource": {
"ResourceType": "CATALOG",
"ResourceUri": "tclake_lakehouse_catalog_table_mayxxiao_64longlonglonglonglonglo"
},
"Result": true
}
]
},
"RequestId": "66718386-3bca-4664-8c69-2ad088a69fc6"
}
}TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.
The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.
| Error Code | Description |
|---|---|
| AuthFailure | CAM signature/authentication error. |
| AuthFailure.SignatureExpire | Not logged in or login has expired. |
| FailedOperation | Operation failed. |
| InternalError | Internal error. |
| InvalidParameter | Parameter error. |
| ResourceNotFound | The resource does not exist. |
文档反馈