tencent cloud

服务（相关）角色是由腾讯云服务预定义，经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。本文档介绍具体服务相关角色的使用场景及相关权限策略信息。

DMC_QCSLinkedRoleInWorkOrderReview

使用场景： 当前角色为数据库管理 (DMC)服务相关角色，该角色将在已关联策略的权限范围内访问您的其他云服务资源。
权限策略

• 策略名称： QcloudAccessForDMCLinkedRoleInWorkOrderReview
• 策略内容：

  {
    "statement": [
        {
            "action": [
                "cam:ListUsersForGroup",
                "cam:ListGroupsForUser",
                "cam:DescribeSubAccounts",
                "cam:ListGroups",
                "cdb:DescribeAccounts",
                "dcdb:DescribeAccounts",
                "cynosdb:DescribeAccounts",
                "mongodb:DescribeAccountUsers",
                "mariadb:DescribeAccounts",
                "postgres:DescribeAccounts",
                "sqlserver:DescribeAccounts",
                "sts:AssumeRole",
                "cam:ListAttachedUserAllPolicies",
                "cam:GetGroup",
                "cam:ListUsers",
                "cvm:DescribeInstances",
                "vdb:DescribeInstances",
                "vdb:DescribeInstanceProperties",
                "vdb:DescribeEmbedding",
                "redis:DescribeInstances",
                "keewidb:DescribeInstances",
                "mongodb:DescribeDBInstances",
                "ctsdb:DescribeDBInstances",
                "tdach:DescribeInstances",
                "cdb:DescribeInstances",
                "sqlserver:DescribeDBInstances",
                "mariadb:DescribeDBInstances",
                "postgres:DescribeDBInstanceAttribute",
                "postgres:DescribeDBInstances",
                "dcdb:DescribeDCDBInstanceDetail",
                "tdmysql:DescribeDBInstanceDetail",
                "tbase:DescribeInstanceDetail",
                "vpc:DescribeDirectConnectGateway",
                "vpc:DescribeVpnGateways",
                "cam:GetAccountSummary",
                "cam:GetUserPermissionBoundary",
                "cam:ListCollaborators",
                "cam:GetUser",
                "cam:GetPolicy",
                "cam:ListAttachedGroupPolicies",
                "cam:ListAttachedUserPolicies",
                "cam:ListEntitiesForPolicy",
                "cam:ListPolicies",
                "cam:GetRole",
                "cam:GetRolePermissionBoundary",
                "cam:ListAttachedRolePolicies",
                "cdb:CreateAccounts",
                "cdb:DescribeDBInstances",
                "cdb:ModifyAccountPrivileges"
            ],
            "effect": "allow",
            "resource": "*"
        }
    ],
    "version": "2.0"
  }