Tencent Cloud
Introduction
Products
Solutions
Pricing
Documentation
Support
Partners
Customer Success
More
Documentation
Browse user guides, API and SDK documentation and more.
View all Documentation >
View documentation for popular services
Cloud Virtual Machine
Cloud Object Storage
Content Delivery Network
Virtual Private Cloud
TencentDB for MySQL
Game Multimedia Engine
Support Plan
IEM
search by keyword
Recent Pages
Cloud Virtual Machine
Auto Scaling
CVM Dedicated Host
Batch Compute
Cloud File Storage
Documentation
Cloud Access Management
Product Introduction
CAM Overview
Features
Use Cases
Limits
CAM-Enabled Products
Purchase Guide
User Guide
CAM Dashboard
Users
User Types
Root Account
Related to the main account
Main Account Message Subscription
Message Recipients
Message Recipient Message Subscriptions
Setting Message Recipient User Groups
Creating a Message Recipient
Deleting Message Recipients
Collaborators
Creating Collaborators
Deleting Collaborators
Setting Collaborator Permissions
Collaborator Message Subscriptions
Querying Collaborator Information
Switching Collaborator Identities
Collaborator Security Credentials
Collaborator Login
Setting Security Protection for Collaborators
User Settings
Password Rules
Login Restrictions
Sub-Users
Setting Sub-User Permissions
Sub-Users Message Subscriptions
Querying Sub-User Information
Creating a Sub-user
Creating a Custom Sub-user
Deleting Sub-Users
Sub-User Security Credentials
Logging in as a Sub-User
Resetting Login Passwords for Sub-Users
Setting Security Protection for Sub-Users
User Information
Identity Provider
Azure Active Directory Single Sign-On
OneLogin Single Sign-On
Accessing Tencent Cloud Console as SAML 2.0 Federated Users
Okta Single Sign-On
Tencent Cloud's Guide to ADFS single sign-on
Overview
SAML 2.0-Based Federation
Creating an IdP
Managing IdPs
Federated Accounts
WeChat Work
Disassociating a Tencent Cloud account from WeChat Work
Access Key
Root Account Access Key
Access Key
User Groups
Creating User Groups
Setting User Group Permissions
Deleting a User Group
User Management
Role Management
Role Overview
Concepts
Creating a Role
Modifying a Role
Using a Role
Deleting a Role
Authorizing a Sub-account with the Policy of Assuming a Role
Policies
Definition
Permission
Policy
Authorization Guide
Creating Custom Policies
IP Access Restrictions
Authorization Management
Syntax Logic
Element Reference
Syntax Structure
Evaluation Logic
Resource Description Method
Policy Variable
Condition
Policy Version Control
Troubleshooting
Creating a policy based on fault reports
Best Practices
Business Use Cases
TencentDB for MySQL Cases
Granting a sub-account view permission for specified TencentDB for MySQL instances
CLB Cases
Authorizing Sub-account Full Access to CLB
Authorizing Sub-account Read-only Access to CLB
Authorizing Sub-account Full CLB Access other than the Payment Permission
CMQ Cases
Authorizing a Sub-account Full Permissions to Use Messaging Services
Authorizing a Sub-account Full Permissions to Access the Message Queue It Created
Authorizing a Sub-account Permission to Read a Topic-based Message Queue
COS Cases
Authorizing Sub-account Full Access to COS Resources under the Account
Authorizing Sub-account Full Access to Specific Directory
Authorizing Sub-account Read-only Access to Files in Specific Directory
Authorizing Sub-account Read/Write Access to Specific File
Authorizing Sub-account Read-only Access to COS Resources
Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
Authorizing Sub-account Read/Write Access to Files with Specified Prefix
Authorizing Another Account Read/Write Access to Specific Files
Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
CVM Cases
Authorizing Sub-account Full Access to CVMs
Authorizing Sub-account Read-only Access to CVMs
Authorizing Sub-account Read-only Access to CVM-related Resources
Authorizing Sub-account Access to Perform Operations on CBSs
Authorizing Sub-account Access to Perform Operations on Security Groups
Authorizing Sub-account Access to Perform Operations on EIPs
Authorizing Sub-account Access to Perform Operations on Specific CVM
Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
Authorizing Sub-account Full Access to CVMs Except Payment
VPC Cases
Authorizing Sub-account Read-only Access to VPCs
Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
Authorizing Sub-account Access to Perform Operations on VPN
Authorizing Sub-account Full Access to VPCs
Authorizing a Sub-account Full Access to VPCs Except Payment
VOD Cases
Authorizing a Sub-account with Full Permissions to Manage VOD Services
Other Cases
Authorizing Sub-account Access to Perform Operations on All Resources
Authorizing Third-party App Access to User Resources
Authorizing Sub-account Read-only Access to All Resources
Authorizing Different Sub-accounts Separate Permissions to Manage Tencent Cloud Resources
API Documentation
Introduction
API Category
Making API Requests
Request Structure
Common Params
Signature v3
Signature
Responses
Policy APIs
CreatePolicyVersion
DeletePolicyVersion
AttachGroupPolicy
AttachUserPolicy
CreatePolicy
DeletePolicy
GetPolicyVersion
DetachGroupPolicy
DetachUserPolicy
GetPolicy
ListAttachedGroupPolicies
ListAttachedUserPolicies
ListPolicyVersions
ListEntitiesForPolicy
SetDefaultPolicyVersion
ListPolicies
UpdatePolicy
Role APIs
CreateServiceLinkedRole
AttachRolePolicy
DeleteServiceLinkedRole
CreateRole
DeleteRole
DescribeRoleList
DetachRolePolicy
GetServiceLinkedRoleDeletionStatus
GetRole
ListAttachedRolePolicies
UpdateAssumeRolePolicy
UpdateRoleConsoleLogin
UpdateRoleDescription
Identity Provider APIs
CreateSAMLProvider
DeleteSAMLProvider
GetSAMLProvider
ListSAMLProviders
UpdateSAMLProvider
User APIs
AddUser
AddUserToGroup
ConsumeCustomMFAToken
CreateGroup
DeleteGroup
DeleteUser
GetCustomMFATokenInfo
GetGroup
GetUser
ListGroups
ListCollaborators
ListGroupsForUser
ListUsers
ListUsersForGroup
RemoveUserFromGroup
SetMfaFlag
UpdateGroup
UpdateUser
STS APIs
AssumeRole
AssumeRoleWithSAML
GetFederationToken
Data Types（STS）
Data Types（CAM）
Error Codes
CAM API 2017
Overview
CAM API Overview
Calling Method
Request Structure
Common Parameters
Response
Successful Response
Error Response
Error Codes
Role-related APIs
Creating a Role
Getting Role List
Getting Role Information
Binding Policies to a Role
Unbinding Policies from a Role
Modifying Role Description
Modifying Trust Policies of a Role
Deleting a Role
Getting List of Policies Bound to a Role
STS Related API
Requesting Temporary Credentials for a Role
Getting Temporary Credentials for a Federated User
Requesting Temporary Credentials for a Role Based on SAML Assertion
Policy Management APIs
Create Policy
Policy Details
Update Policy
Query Policy List
Query the List of Entities Associated with the Policy
Query the Sub-account Associated Policy List
Bind Policy to User
Unbind the Policy from User
Bind Policy to User Group
Querying List of Policies Associated with a User Group
Unbind the Policy from User Group
Delete Policy
User Group Management APIs
Creating a User Group
Add User to User Group
Querying List of Users Associated with a User Group
Querying List of User Groups
Querying User Group Details
Listing User Groups Associated with a User
Updating a User Group
Remove User from User Group
Deleting a User Group
Sub-user Management API
Add Sub-user
Query Sub-user
Update Sub-user
Pull Sub-user
Remove Sub-user
IdP APIs
Creating a SAML IdP
Updating a SAML IdP
Querying Information of a SAML IdP
Getting SAML IdP List
Deleting a SAML IdP
FAQs
Glossary
Documentation
Product Introduction
CAM Overview
Features
Use Cases
Limits
CAM-Enabled Products
Purchase Guide
User Guide
CAM Dashboard
Users
User Types
Root Account
Related to the main account
Main Account Message Subscription
Message Recipients
Message Recipient Message Subscriptions
Setting Message Recipient User Groups
Creating a Message Recipient
Deleting Message Recipients
Collaborators
Creating Collaborators
Deleting Collaborators
Setting Collaborator Permissions
Collaborator Message Subscriptions
Querying Collaborator Information
Switching Collaborator Identities
Collaborator Security Credentials
Collaborator Login
Setting Security Protection for Collaborators
User Settings
Password Rules
Login Restrictions
Sub-Users
Setting Sub-User Permissions
Sub-Users Message Subscriptions
Querying Sub-User Information
Creating a Sub-user
Creating a Custom Sub-user
Deleting Sub-Users
Sub-User Security Credentials
Logging in as a Sub-User
Resetting Login Passwords for Sub-Users
Setting Security Protection for Sub-Users
User Information
Identity Provider
Azure Active Directory Single Sign-On
OneLogin Single Sign-On
Accessing Tencent Cloud Console as SAML 2.0 Federated Users
Okta Single Sign-On
Tencent Cloud's Guide to ADFS single sign-on
Overview
SAML 2.0-Based Federation
Creating an IdP
Managing IdPs
Federated Accounts
WeChat Work
Disassociating a Tencent Cloud account from WeChat Work
Access Key
Root Account Access Key
Access Key
User Groups
Creating User Groups
Setting User Group Permissions
Deleting a User Group
User Management
Role Management
Role Overview
Concepts
Creating a Role
Modifying a Role
Using a Role
Deleting a Role
Authorizing a Sub-account with the Policy of Assuming a Role
Policies
Definition
Permission
Policy
Authorization Guide
Creating Custom Policies
IP Access Restrictions
Authorization Management
Syntax Logic
Element Reference
Syntax Structure
Evaluation Logic
Resource Description Method
Policy Variable
Condition
Policy Version Control
Troubleshooting
Creating a policy based on fault reports
Best Practices
Business Use Cases
TencentDB for MySQL Cases
Granting a sub-account view permission for specified TencentDB for MySQL instances
CLB Cases
Authorizing Sub-account Full Access to CLB
Authorizing Sub-account Read-only Access to CLB
Authorizing Sub-account Full CLB Access other than the Payment Permission
CMQ Cases
Authorizing a Sub-account Full Permissions to Use Messaging Services
Authorizing a Sub-account Full Permissions to Access the Message Queue It Created
Authorizing a Sub-account Permission to Read a Topic-based Message Queue
COS Cases
Authorizing Sub-account Full Access to COS Resources under the Account
Authorizing Sub-account Full Access to Specific Directory
Authorizing Sub-account Read-only Access to Files in Specific Directory
Authorizing Sub-account Read/Write Access to Specific File
Authorizing Sub-account Read-only Access to COS Resources
Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
Authorizing Sub-account Read/Write Access to Files with Specified Prefix
Authorizing Another Account Read/Write Access to Specific Files
Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
CVM Cases
Authorizing Sub-account Full Access to CVMs
Authorizing Sub-account Read-only Access to CVMs
Authorizing Sub-account Read-only Access to CVM-related Resources
Authorizing Sub-account Access to Perform Operations on CBSs
Authorizing Sub-account Access to Perform Operations on Security Groups
Authorizing Sub-account Access to Perform Operations on EIPs
Authorizing Sub-account Access to Perform Operations on Specific CVM
Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
Authorizing Sub-account Full Access to CVMs Except Payment
VPC Cases
Authorizing Sub-account Read-only Access to VPCs
Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
Authorizing Sub-account Access to Perform Operations on VPN
Authorizing Sub-account Full Access to VPCs
Authorizing a Sub-account Full Access to VPCs Except Payment
VOD Cases
Authorizing a Sub-account with Full Permissions to Manage VOD Services
Other Cases
Authorizing Sub-account Access to Perform Operations on All Resources
Authorizing Third-party App Access to User Resources
Authorizing Sub-account Read-only Access to All Resources
Authorizing Different Sub-accounts Separate Permissions to Manage Tencent Cloud Resources
API Documentation
Introduction
API Category
Making API Requests
Request Structure
Common Params
Signature v3
Signature
Responses
Policy APIs
CreatePolicyVersion
DeletePolicyVersion
AttachGroupPolicy
AttachUserPolicy
CreatePolicy
DeletePolicy
GetPolicyVersion
DetachGroupPolicy
DetachUserPolicy
GetPolicy
ListAttachedGroupPolicies
ListAttachedUserPolicies
ListPolicyVersions
ListEntitiesForPolicy
SetDefaultPolicyVersion
ListPolicies
UpdatePolicy
Role APIs
CreateServiceLinkedRole
AttachRolePolicy
DeleteServiceLinkedRole
CreateRole
DeleteRole
DescribeRoleList
DetachRolePolicy
GetServiceLinkedRoleDeletionStatus
GetRole
ListAttachedRolePolicies
UpdateAssumeRolePolicy
UpdateRoleConsoleLogin
UpdateRoleDescription
Identity Provider APIs
CreateSAMLProvider
DeleteSAMLProvider
GetSAMLProvider
ListSAMLProviders
UpdateSAMLProvider
User APIs
AddUser
AddUserToGroup
ConsumeCustomMFAToken
CreateGroup
DeleteGroup
DeleteUser
GetCustomMFATokenInfo
GetGroup
GetUser
ListGroups
ListCollaborators
ListGroupsForUser
ListUsers
ListUsersForGroup
RemoveUserFromGroup
SetMfaFlag
UpdateGroup
UpdateUser
STS APIs
AssumeRole
AssumeRoleWithSAML
GetFederationToken
Data Types（STS）
Data Types（CAM）
Error Codes
CAM API 2017
Overview
CAM API Overview
Calling Method
Request Structure
Common Parameters
Response
Successful Response
Error Response
Error Codes
Role-related APIs
Creating a Role
Getting Role List
Getting Role Information
Binding Policies to a Role
Unbinding Policies from a Role
Modifying Role Description
Modifying Trust Policies of a Role
Deleting a Role
Getting List of Policies Bound to a Role
STS Related API
Requesting Temporary Credentials for a Role
Getting Temporary Credentials for a Federated User
Requesting Temporary Credentials for a Role Based on SAML Assertion
Policy Management APIs
Create Policy
Policy Details
Update Policy
Query Policy List
Query the List of Entities Associated with the Policy
Query the Sub-account Associated Policy List
Bind Policy to User
Unbind the Policy from User
Bind Policy to User Group
Querying List of Policies Associated with a User Group
Unbind the Policy from User Group
Delete Policy
User Group Management APIs
Creating a User Group
Add User to User Group
Querying List of Users Associated with a User Group
Querying List of User Groups
Querying User Group Details
Listing User Groups Associated with a User
Updating a User Group
Remove User from User Group
Deleting a User Group
Sub-user Management API
Add Sub-user
Query Sub-user
Update Sub-user
Pull Sub-user
Remove Sub-user
IdP APIs
Creating a SAML IdP
Updating a SAML IdP
Querying Information of a SAML IdP
Getting SAML IdP List
Deleting a SAML IdP
FAQs
Glossary
Documentation
Cloud Access Management
Documentation
Cloud Access Management
Cloud Access Management
Download
PDF
Product Introduction
CAM Overview
Features
Use Cases
Limits
CAM-Enabled Products
Download
PDF
User Guide
CAM Dashboard
Users
Identity Provider
Federated Accounts
Access Key
User Groups
Role Management
Policies
Troubleshooting
Download
PDF
Business Use Cases
TencentDB for MySQL Cases
CLB Cases
CMQ Cases
COS Cases
CVM Cases
VPC Cases
VOD Cases
Other Cases
Download
PDF
API Documentation
Introduction
API Category
Making API Requests
Policy APIs
Role APIs
Identity Provider APIs
User APIs
STS APIs
Data Types（STS）
Data Types（CAM）
Error Codes
CAM API 2017
Was this page helpful?
Confirm
Top
Was this page helpful?
Not at all
Not very helpful
Somewhat helpful
Very helpful
Extremely helpful
Send Feedback
Hide
Submit a Ticket
Contact Sales
Help
Was this page helpful?