- Release Notes and Announcements
- Product Introduction
- Kernel Features
- Purchase Guide
- Getting Started
- Operation Guide
- Instance Management
- Cluster Management
- Upgrading Version
- Scaling Instance
- Database Audit
- Account Management
- Database Management
- Parameter Configuration
- Multi-AZ Deployment
- Backup and Rollback
- Migrating Data
- Network and Security
- Monitoring and Alarms
- Basic SQL Operations
- Connecting to TDSQL-C for MySQL Through SCF
- White Paper
- API Documentation
- History
- API Category
- Making API Requests
- Instance APIs
- ActivateInstance
- UpgradeInstance
- SetRenewFlag
- OfflineCluster
- ModifyMaintainPeriodConfig
- IsolateInstance
- IsolateCluster
- DescribeMaintainPeriod
- DescribeInstanceSpecs
- DescribeClusters
- DescribeClusterDetail
- CreateClusters
- AddInstances
- OfflineInstance
- DescribeInstanceDetail
- DescribeClusterInstanceGrps
- DescribeInstances
- ModifyInstanceName
- ModifyClusterName
- Account APIs
- Backup and Restoration APIs
- Parameter Management APIs
- Serverless APIs
- Other APIs
- Data Types
- Error Codes
- FAQs
- TDSQL-C Policy
- Glossary
- Contact Us
- Release Notes and Announcements
- Product Introduction
- Kernel Features
- Purchase Guide
- Getting Started
- Operation Guide
- Instance Management
- Cluster Management
- Upgrading Version
- Scaling Instance
- Database Audit
- Account Management
- Database Management
- Parameter Configuration
- Multi-AZ Deployment
- Backup and Rollback
- Migrating Data
- Network and Security
- Monitoring and Alarms
- Basic SQL Operations
- Connecting to TDSQL-C for MySQL Through SCF
- White Paper
- API Documentation
- History
- API Category
- Making API Requests
- Instance APIs
- ActivateInstance
- UpgradeInstance
- SetRenewFlag
- OfflineCluster
- ModifyMaintainPeriodConfig
- IsolateInstance
- IsolateCluster
- DescribeMaintainPeriod
- DescribeInstanceSpecs
- DescribeClusters
- DescribeClusterDetail
- CreateClusters
- AddInstances
- OfflineInstance
- DescribeInstanceDetail
- DescribeClusterInstanceGrps
- DescribeInstances
- ModifyInstanceName
- ModifyClusterName
- Account APIs
- Backup and Restoration APIs
- Parameter Management APIs
- Serverless APIs
- Other APIs
- Data Types
- Error Codes
- FAQs
- TDSQL-C Policy
- Glossary
- Contact Us
Resource-Level permission can be used to specify which resources a user can manipulate. TDSQL-C for MySQL supports certain resource-level permissions. This means that for TDSQL-C for MySQL operations that support resource-level permission, you can control the time when a user is allowed to perform operations or to use specified resources. The following table describes the types of resources that can be authorized in CAM.
| Resource Type | Resource Description Method in Authorization Policy |
|---|---|
| TDSQL-C for MySQL cluster APIs | qcs::cynosdb:$region::instance/*qcs::cynosdb:$region:$account:instanceId/$clusterId |
The table below lists the TDSQL-C for MySQL API operations which currently support resource-level permission control as well as the resources supported by each operation. When specifying a resource path, you can use the * wildcard in the path.
Note：TDSQL-C for MySQL API operations not listed here do not support resource-level permissions. You can still authorize a user to perform such an API operation, but you must specify
*as the resource element of the policy statement.
TDSQL-C for MySQL Cluster APIs
| API Operation | Resource Path |
|---|---|
| DescribeBackupConfig | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeBackupList | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeRollbackTimeRange | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeRollbackTimeValidity | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| ModifyBackupConfig | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| ActivateCluster | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeClusterDetail | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| IsolateCluster | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| ModifyClusterName | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| ModifyClusterProject | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| OfflineCluster | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DeleteAccounts | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeAccounts | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| ModifyAccountDescription | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| ResetAccountPassword | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeClusterInstanceGrps | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| ActivateInstance | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeInstanceDetail | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| IsolateInstance | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| UpgradeInstance | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| ModifyInstanceName | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| OfflineInstance | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeClusterAddr | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeClusterNetService | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeClusterParams | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeClusterServerInfo | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeErrorLogs | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeMaintainPeriod | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeSlowLogs | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| ModifyClusterParam | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| ModifyMaintainPeriodConfig | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeDBSecurityGroups | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| ModifyDBInstanceSecurityGroups | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| CloseWan | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| OpenWan | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeClusters | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeInstances | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
| DescribeIsolatedInstances | qcs::cynosdb:$region:$account:instanceId/* qcs::cynosdb:$region:$account:instanceId/$clusterId |
Yes
No
Was this page helpful?