Tencent Cloud
Language
Intl-English
International
Intl - English
Intl - 한국어
Intl - 日本語
Intl - 简体中文
中国站
简体中文
Console
Tencent Cloud
Introduction
Products
Solutions
Pricing
Documentation
Support
Partners
Customer Success
Events and Webinars
Prev
Next
Education
GameArch
Game Media
Live Broadcasting Security
One Stop Solution
Video
WeChat Ecosystem
Website
Documentation
Learn about Tencent Cloud products. Browse user guides, API and SDK documentation and more.
View all Documentation >
View documentation for popular services
Cloud Virtual Machine
Cloud Object Storage
Content Delivery Network
Virtual Private Cloud
TencentDB for MySQL
Game Multimedia Engine
Support Plan
IEM
Tencent Cloud
Sign Up
Log in
Introduction
Products
Solutions
Education
GameArch
Game Media
Live Broadcasting Security
One Stop Solution
Video
WeChat Ecosystem
Website
Pricing
Documentation
Support
Support Plan
IEM
Partners
Customer Success
Events and Webinars
Language
International
Intl - English
Intl - 한국어
Intl - 日本語
Intl - 简体中文
中国站
简体中文
Console
search by keyword
Recent Pages
Cloud Virtual Machine
Auto Scaling
CVM Dedicated Host
Batch Compute
Cloud File Storage
Documentation
Cloud Access Management
Product Introduction
CAM Overview
Features
Use Cases
Use Limits
CAM-Enabled Products
Purchase Guide
User Guide
CAM Dashboard
Users
User Types
Root Account
Related to the main account
Main Account Message Subscription
Message Recipients
Message Recipient Message Subscriptions
Setting Message Recipient User Groups
Creating a Message Recipient
Deleting Message Recipients
Collaborators
Creating Collaborators
Deleting Collaborators
Setting Collaborator Permissions
Collaborator Message Subscriptions
Querying Collaborator Information
Switching Collaborator Identities
Collaborator Security Credentials
Collaborator Login
Setting Security Protection for Collaborators
User Settings
Password Rules
Login Restrictions
Sub-Users
Setting Sub-user Permissions
Sub-user Message Subscriptions
Querying Sub-user Information
Creating a Sub-user
Creating a Custom Sub-user
Deleting Sub-Users
Sub-User Security Credentials
Logging in as a Sub-User
Resetting Login Passwords for Sub-users
Setting Security Protection for Sub-Users
User Information
Identity Provider
Azure Active Directory Single Sign-On
OneLogin Single Sign-On
Accessing Tencent Cloud Console as SAML 2.0 Federated Users
Okta Single Sign-On
Overview
SAML 2.0-Based Federation
Creating an IdP
Managing IdPs
Access Key
Root Account Access Key
Access Key
Viewing Current User Access Key
User Groups
Creating User Groups
Setting User Group Permissions
Deleting User Groups
User Management
Role Management
Role Overview
Concepts
Creating a Role
Modifying a Role
Using a Role
Deleting a Role
Authorizing a Sub-account with the Policy of Assuming a Role
Policies
Definition
Permission
Policy
Authorization Guide
Creating Custom Policies
IP Access Restrictions
Authorization Management
Syntax Logic
Element Reference
Syntax Structure
Evaluation Logic
Resource Description Method
Policy Variable
Condition
Policy Version Control
Troubleshooting
Creating a policy based on fault reports
Best Practices
Business Use Cases
TencentDB for MySQL Cases
Granting a sub-account view permission for specified TencentDB for MySQL instances
CLB Cases
Authorizing Sub-account Full Access to CLB
Authorizing Sub-account Read-only Access to CLB
Authorizing Sub-account Full CLB Access other than the Payment Permission
CMQ Cases
Authorizing a Sub-account Full Permissions to Use Messaging Services
Authorizing a Sub-account Full Permissions to Access the Message Queue It Created
Authorizing a Sub-account Permission to Read a Topic-based Message Queue
COS Cases
Authorizing Sub-account Full Access to COS Resources under the Account
Authorizing Sub-account Full Access to Specific Directory
Authorizing Sub-account Read-only Access to Files in Specific Directory
Authorizing Sub-account Read/Write Access to Specific File
Authorizing Sub-account Read-only Access to COS Resources
Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
Authorizing Sub-account Read/Write Access to Files with Specified Prefix
Authorizing Another Account Read/Write Access to Specific Files
Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
CVM Cases
Authorizing Sub-account Full Access to CVMs
Authorizing Sub-account Read-only Access to CVMs
Authorizing Sub-account Read-only Access to CVM-related Resources
Authorizing Sub-account Access to Perform Operations on CBSs
Authorizing Sub-account Access to Perform Operations on Security Groups
Authorizing Sub-account Access to Perform Operations on EIPs
Authorizing Sub-account Access to Perform Operations on Specific CVM
Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
Authorizing Sub-account Full Access to CVMs Except Payment
VPC Cases
Authorizing Sub-account Read-only Access to VPCs
Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
Authorizing Sub-account Access to Perform Operations on VPN
Authorizing Sub-account Full Access to VPCs
Authorizing a Sub-account Full Access to VPCs Except Payment
VOD Cases
Authorizing a Sub-account with Full Permissions to Manage VOD Services
Other Cases
Authorizing Sub-account Access to Perform Operations on All Resources
Authorizing Third-party App Access to User Resources
Authorizing Sub-account Read-only Access to All Resources
Authorizing Different Sub-accounts Separate Permissions to Manage Tencent Cloud Resources
API Documentation
Introduction
API Category
Making API Requests
Request Structure
Common Params
Signature v3
Signature
Responses
Policy APIs
CreatePolicyVersion
DeletePolicyVersion
AttachGroupPolicy
AttachUserPolicy
CreatePolicy
DeletePolicy
GetPolicyVersion
DetachGroupPolicy
DetachUserPolicy
GetPolicy
ListAttachedGroupPolicies
ListAttachedUserPolicies
ListPolicyVersions
ListEntitiesForPolicy
SetDefaultPolicyVersion
ListPolicies
UpdatePolicy
Role APIs
DeleteRolePermissionsBoundary
CreateServiceLinkedRole
AttachRolePolicy
DescribeSafeAuthFlag
DeleteServiceLinkedRole
CreateRole
DeleteRole
DescribeRoleList
DetachRolePolicy
GetServiceLinkedRoleDeletionStatus
GetRole
PutRolePermissionsBoundary
ListAttachedRolePolicies
UpdateAssumeRolePolicy
UpdateRoleConsoleLogin
UpdateRoleDescription
Identity Provider APIs
CreateSAMLProvider
DeleteSAMLProvider
GetSAMLProvider
ListSAMLProviders
UpdateSAMLProvider
User APIs
AddUser
AddUserToGroup
ConsumeCustomMFAToken
DeleteUserPermissionsBoundary
CreateGroup
DeleteGroup
DeleteUser
GetCustomMFATokenInfo
GetGroup
ListAccessKeys
GetUser
ListGroups
ListCollaborators
ListGroupsForUser
ListUsers
PutUserPermissionsBoundary
ListUsersForGroup
RemoveUserFromGroup
SetMfaFlag
UpdateGroup
UpdateUser
STS APIs
AssumeRole
AssumeRoleWithSAML
GetFederationToken
Data Types（STS）
Data Types（CAM）
Error Codes
FAQs
Glossary
Documentation
Product Introduction
CAM Overview
Features
Use Cases
Use Limits
CAM-Enabled Products
Purchase Guide
User Guide
CAM Dashboard
Users
User Types
Root Account
Related to the main account
Main Account Message Subscription
Message Recipients
Message Recipient Message Subscriptions
Setting Message Recipient User Groups
Creating a Message Recipient
Deleting Message Recipients
Collaborators
Creating Collaborators
Deleting Collaborators
Setting Collaborator Permissions
Collaborator Message Subscriptions
Querying Collaborator Information
Switching Collaborator Identities
Collaborator Security Credentials
Collaborator Login
Setting Security Protection for Collaborators
User Settings
Password Rules
Login Restrictions
Sub-Users
Setting Sub-user Permissions
Sub-user Message Subscriptions
Querying Sub-user Information
Creating a Sub-user
Creating a Custom Sub-user
Deleting Sub-Users
Sub-User Security Credentials
Logging in as a Sub-User
Resetting Login Passwords for Sub-users
Setting Security Protection for Sub-Users
User Information
Identity Provider
Azure Active Directory Single Sign-On
OneLogin Single Sign-On
Accessing Tencent Cloud Console as SAML 2.0 Federated Users
Okta Single Sign-On
Overview
SAML 2.0-Based Federation
Creating an IdP
Managing IdPs
Access Key
Root Account Access Key
Access Key
Viewing Current User Access Key
User Groups
Creating User Groups
Setting User Group Permissions
Deleting User Groups
User Management
Role Management
Role Overview
Concepts
Creating a Role
Modifying a Role
Using a Role
Deleting a Role
Authorizing a Sub-account with the Policy of Assuming a Role
Policies
Definition
Permission
Policy
Authorization Guide
Creating Custom Policies
IP Access Restrictions
Authorization Management
Syntax Logic
Element Reference
Syntax Structure
Evaluation Logic
Resource Description Method
Policy Variable
Condition
Policy Version Control
Troubleshooting
Creating a policy based on fault reports
Best Practices
Business Use Cases
TencentDB for MySQL Cases
Granting a sub-account view permission for specified TencentDB for MySQL instances
CLB Cases
Authorizing Sub-account Full Access to CLB
Authorizing Sub-account Read-only Access to CLB
Authorizing Sub-account Full CLB Access other than the Payment Permission
CMQ Cases
Authorizing a Sub-account Full Permissions to Use Messaging Services
Authorizing a Sub-account Full Permissions to Access the Message Queue It Created
Authorizing a Sub-account Permission to Read a Topic-based Message Queue
COS Cases
Authorizing Sub-account Full Access to COS Resources under the Account
Authorizing Sub-account Full Access to Specific Directory
Authorizing Sub-account Read-only Access to Files in Specific Directory
Authorizing Sub-account Read/Write Access to Specific File
Authorizing Sub-account Read-only Access to COS Resources
Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
Authorizing Sub-account Read/Write Access to Files with Specified Prefix
Authorizing Another Account Read/Write Access to Specific Files
Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
CVM Cases
Authorizing Sub-account Full Access to CVMs
Authorizing Sub-account Read-only Access to CVMs
Authorizing Sub-account Read-only Access to CVM-related Resources
Authorizing Sub-account Access to Perform Operations on CBSs
Authorizing Sub-account Access to Perform Operations on Security Groups
Authorizing Sub-account Access to Perform Operations on EIPs
Authorizing Sub-account Access to Perform Operations on Specific CVM
Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
Authorizing Sub-account Full Access to CVMs Except Payment
VPC Cases
Authorizing Sub-account Read-only Access to VPCs
Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
Authorizing Sub-account Access to Perform Operations on VPN
Authorizing Sub-account Full Access to VPCs
Authorizing a Sub-account Full Access to VPCs Except Payment
VOD Cases
Authorizing a Sub-account with Full Permissions to Manage VOD Services
Other Cases
Authorizing Sub-account Access to Perform Operations on All Resources
Authorizing Third-party App Access to User Resources
Authorizing Sub-account Read-only Access to All Resources
Authorizing Different Sub-accounts Separate Permissions to Manage Tencent Cloud Resources
API Documentation
Introduction
API Category
Making API Requests
Request Structure
Common Params
Signature v3
Signature
Responses
Policy APIs
CreatePolicyVersion
DeletePolicyVersion
AttachGroupPolicy
AttachUserPolicy
CreatePolicy
DeletePolicy
GetPolicyVersion
DetachGroupPolicy
DetachUserPolicy
GetPolicy
ListAttachedGroupPolicies
ListAttachedUserPolicies
ListPolicyVersions
ListEntitiesForPolicy
SetDefaultPolicyVersion
ListPolicies
UpdatePolicy
Role APIs
DeleteRolePermissionsBoundary
CreateServiceLinkedRole
AttachRolePolicy
DescribeSafeAuthFlag
DeleteServiceLinkedRole
CreateRole
DeleteRole
DescribeRoleList
DetachRolePolicy
GetServiceLinkedRoleDeletionStatus
GetRole
PutRolePermissionsBoundary
ListAttachedRolePolicies
UpdateAssumeRolePolicy
UpdateRoleConsoleLogin
UpdateRoleDescription
Identity Provider APIs
CreateSAMLProvider
DeleteSAMLProvider
GetSAMLProvider
ListSAMLProviders
UpdateSAMLProvider
User APIs
AddUser
AddUserToGroup
ConsumeCustomMFAToken
DeleteUserPermissionsBoundary
CreateGroup
DeleteGroup
DeleteUser
GetCustomMFATokenInfo
GetGroup
ListAccessKeys
GetUser
ListGroups
ListCollaborators
ListGroupsForUser
ListUsers
PutUserPermissionsBoundary
ListUsersForGroup
RemoveUserFromGroup
SetMfaFlag
UpdateGroup
UpdateUser
STS APIs
AssumeRole
AssumeRoleWithSAML
GetFederationToken
Data Types（STS）
Data Types（CAM）
Error Codes
FAQs
Glossary
Documentation
Cloud Access Management
Documentation
Cloud Access Management
Cloud Access Management
Download
PDF
Product Introduction
CAM Overview
Features
Use Cases
Use Limits
CAM-Enabled Products
Download
PDF
User Guide
CAM Dashboard
Users
Identity Provider
Access Key
User Groups
Role Management
Policies
Troubleshooting
Download
PDF
Business Use Cases
TencentDB for MySQL Cases
CLB Cases
CMQ Cases
COS Cases
CVM Cases
VPC Cases
VOD Cases
Other Cases
Download
PDF
API Documentation
Introduction
API Category
Making API Requests
Policy APIs
Role APIs
Identity Provider APIs
User APIs
STS APIs
Data Types（STS）
Data Types（CAM）
Error Codes
Was this page helpful?
Confirm
Top
Was this page helpful?
Not at all
Not very helpful
Somewhat helpful
Very helpful
Extremely helpful
Send Feedback
Hide
Submit a Ticket
Contact sales
Help
Was this page helpful?