Tencent Cloud
Help & Documentation
Cloud Access Management
Compute
Cloud Virtual Machine
CVM Dedicated Host
Tencent Kubernetes Engine
Container Instance Service
Auto Scaling
Serverless Cloud Function
Batch Compute
Database TencentDB
TencentDB for MySQL
TencentDB for Redis
TencentDB for MongoDB
Data Transmission Service
TencentDB for PostgreSQL
Tcaplus database
Management Tools
Basic Cloud Monitor
Custom Cloud Monitor
Cloud Access Management
Tag
Tencent Cloud CLI
CloudAudit
Big Data
Stream Compute Service
Elasticsearch Service
Tencent Sparkling Data Warehouse Suite
Retail
YouMall
Tencent Location Insight
Marketing Risk Management
Storage
Cloud Object Storage
Cloud File Storage
Cloud Block Storage
Cloud Data Migration
Cloud Log Service
Middleware
Cloud Message Queue
Message Queue CKafka
API Gateway
Game Services
Game Multimedia Engine
Aegis Anti-DDoS
More
Compliance
About Billing
About Account
Terms and Policies
CDN and Acceleration
Content Delivery Network
Dynamic Site Accelerator
Global Application Acceleration Platform
Global Content Delivery
Security
Mobile Security
Mobile Tencent Protect
Anti-DDoS Advanced
Web Application Firewall
Host Security
Cloud Web Scanner
Security Situation Awareness
Communication
Short Message Service
AI Application
TI X-Mirror: Content Moderation
TI X-OCR
TI CSR
Networking
Cloud Load Balancer
Virtual Private Cloud
Direct Connect
Cloud Connect Network
Elastic Network Interface
Flow Logs
Anycast Internet Acceleration
Bandwidth Package
Video Services
Video on Demand
Live Video Broadcasting
Real-time Communication
Mobile Live Video Broadcasting
Developer Tools
API
Data application services
Smart Selection
Product Documentation
Cloud Access Management
What is Access Management?
CAM Overview
Product Features
Application Scenarios
Limits
CAM-enabled Cloud Services
Purchase Guide
User Guide
CAM Overview
Identity Management
User Management
CAM Users
Sub-user
Collaborator
Message Recipient
User Group Management
Role Management
Role Overview
Basic Concepts
Creating a Role
Modifying a Role
Using a Role
Deleting a Role
Authorizing a Sub-account with the Policy of Assuming a Role
IdP
IdP Overview
SAML 2.0-Based Federation
Creating an IdP
Managing IdPs
Policy Management
Permission
Policy
Authorization Management
Authorization Guide
Policy Syntax
Element Reference
Syntax Structure
Evaluation Logic
Resource Description Method
Policy Variable
Conditions for Taking Effect
Security Setting of Sub-accounts/Collaborators
Best Practice
Business Use Case
CDB-related Cases
Authorizing a Sub-account View Permission of Specified CDB Instances
CLB-related Cases
Authorizing Sub-account Full Access to CLB
Authorizing Sub-account Read-only Access to CLB
Authorizing Sub-account Full CLB Access other than the Payment Permission
CMQ-related Cases
Authorizing a Sub-account Full Permissions to Use Messaging Services
Authorizing a Sub-account Full Permissions to Access the Message Queue It Created
Authorizing a Sub-account Permission to Read a Topic-based Message Queue
COS-related Cases
Authorizing Sub-account Full Access to COS Resources under the Account
Authorizing Sub-account Full Access to Specific Directory
Authorizing Sub-account Read-only Access to Files in Specific Directory
Authorizing Sub-account Read/Write Access to Specific File
Authorizing Sub-account Read-only Access to COS Resources
Authorizing Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
Authorizing Sub-account Read/Write Access to Files with Specified Prefix
Authorizing All Users Read/Write Access to Specified File
Authorizing Cross-Account Read/Write Access to Specified File
Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
CVM-related Cases
Authorizing Sub-account Full Access to CVMs
Authorizing Sub-account Read-only Access to CVMs
Authorizing Sub-account Read-only Access to CVM-related Resources
Authorizing Sub-account Access to Perform Operations on CBSs
Authorizing Sub-account Access to Perform Operations on Security Groups
Authorizing Sub-account Access to Perform Operations on EIPs
Authorizing Sub-account Access to Perform Operations on Specific CVM
Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
Authorizing Sub-account Full Access to CVMs Except Payment
VPC-related Cases
Authorizing Sub-account Read-only Access to VPCs
Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
Authorizing Sub-account Access to Perform Operations on VPN
Authorizing Sub-account Full Access to VPCs
Authorizing Sub-account Full Access to VPCs Except Payment
VOD-related Cases
Authorizing a Sub-account with Full Permissions to Manage VOD Services
Other Cases
Authorizing Sub-account Access to Perform Operations on All Resources
Authorizing Third-party App Access to User Resources
Authorizing Sub-account Read-only Access to All Resources
API Documentation
Overview
CAM API Overview
Calling Method
Request Structure
Common Parameters
Response
Successful Response
Error Response
Error Codes
Role-related APIs
Creating a Role
Getting Role List
Getting Role Information
Binding Policies to a Role
Unbinding Policies from a Role
Modifying Role Description
Modifying Trust Policies of a Role
Deleting a Role
Getting List of Policies Bound to a Role
STS Related API
Requesting Temporary Credentials for a Role
Getting Temporary Credentials for a Federated User
Requesting Temporary Credentials for a Role Based on SAML Assertion
Policy Management APIs
Create Policy
Policy Details
Update Policy
Query Policy List
Query the List of Entities Associated with the Policy
Query the Sub-account Associated Policy List
Bind Policy to User
Unbind the Policy from User
Bind Policy to User Group
Querying List of Policies Associated with a User Group
Unbind the Policy from User Group
Delete Policy
User Group Management APIs
Creating a User Group
Add User to User Group
Querying List of Users Associated with a User Group
Querying List of User Groups
Querying User Group Details
Listing User Groups Associated with a User
Updating a User Group
Remove User from User Group
Deleting a User Group
Sub-user Management API
Add Sub-user
Query Sub-user
Update Sub-user
Pull Sub-user
Remove Sub-user
IdP APIs
Creating a SAML IdP
Updating a SAML IdP
Querying Information of a SAML IdP
Getting SAML IdP List
Deleting a SAML IdP
FAQ
Glossary
Overview
What is Access Management?
PDF
CAM Overview
Product Features
Application Scenarios
Limits
CAM-enabled Cloud Services
User Guide
PDF
CAM Overview
Identity Management
IdP
Policy Management
Policy Syntax
Security Setting of Sub-accounts/Collaborators
Business Use Case
PDF
CDB-related Cases
CLB-related Cases
CMQ-related Cases
COS-related Cases
CVM-related Cases
VPC-related Cases
VOD-related Cases
Other Cases
API Documentation
PDF
Overview
CAM API Overview
Calling Method
Role-related APIs
STS Related API
Policy Management APIs
User Group Management APIs
Sub-user Management API
IdP APIs