- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Security Setting Policy
- Best Practice
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to COS Resources under the Account
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Read-only Access to VPCs
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- User APIs
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSafeAuthFlagColl
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- Role APIs
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- GetRole
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Data Types
- Error Codes
- History
- API Category
- Making API Requests (STS)
- STS APIs
- Data Types
- Error Codes
- FAQs
- Glossary
- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Security Setting Policy
- Best Practice
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to COS Resources under the Account
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Read-only Access to VPCs
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- User APIs
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSafeAuthFlagColl
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- Role APIs
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- GetRole
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Data Types
- Error Codes
- History
- API Category
- Making API Requests (STS)
- STS APIs
- Data Types
- Error Codes
- FAQs
- Glossary
User APIs
| API Name | Feature |
|---|---|
| AddUser | Adds sub-Users |
| AddUserToGroup | Adds users to a user group |
| ConsumeCustomMFAToken | Verifies a custom multi-factor Token |
| CreateGroup | Creates a user group |
| DeleteGroup | Deletes a user group |
| DeleteUser | Deletes a sub-user |
| DeleteUserPermissionsBoundary | Deletes user permission boundary |
| DescribeSafeAuthFlagColl | Queries security settings |
| DescribeSubAccounts | Queries sub-users through sub-user UIN list |
| GetAccountSummary | Queries account summary |
| GetCustomMFATokenInfo | Gets information associated with a custom multi-factor Token |
| GetGroup | Queries user group details |
| GetSecurityLastUsed | Gets a key’s recent usage details |
| GetUser | Queries sub-users |
| GetUserAppId | Gets the user AppId |
| ListAccessKeys | Lists access keys |
| ListCollaborators | Gets collaborator list |
| ListGroups | This API is used to query the list of user groups. |
| ListGroupsForUser | Lists user groups associated with a user |
| ListUsers | Pulls sub-users |
| ListUsersForGroup | Queries the list of users associated with a user group |
| PutUserPermissionsBoundary | Sets user permission boundary |
| RemoveUserFromGroup | Deletes users from a user group |
| SetMfaFlag | Sets account verification for login and sensitive operations for sub-users. |
| UpdateGroup | Updates a user group |
| UpdateUser | Updates a sub-user |
Policy APIs
| API Name | Feature |
|---|---|
| AttachGroupPolicy | Associates a policy with a user group |
| AttachUserPolicy | Associates a policy with a user |
| CreatePolicy | Creates a policy |
| CreatePolicyVersion | Creates a policy version |
| DeletePolicy | Deletes a policy |
| DeletePolicyVersion | Deletes a policy version |
| DetachGroupPolicy | Unassociate a policy and a user group |
| DetachUserPolicy | Unassociates a policy and a user |
| GetPolicy | Views policy details |
| GetPolicyVersion | Queries policy version details |
| ListAttachedGroupPolicies | Queries policy list associated with a user group |
| ListAttachedUserAllPolicies | Lists policies associated with the user (including those inherited from the user group) |
| ListAttachedUserPolicies | Queries policy list associated with a sub-account |
| ListEntitiesForPolicy | Queries entity list associated with a policy |
| ListPolicies | Queries the list of policies |
| ListPolicyVersions | Gets a list of policy versions |
| SetDefaultPolicyVersion | Sets operative policy version |
| UpdatePolicy | Updates policy information |
Role APIs
| API Name | Feature |
|---|---|
| AttachRolePolicy | Associates a permission policy with a role |
| CreateRole | Creates a role |
| CreateServiceLinkedRole | Creates a service-linked role |
| DeleteRole | Deletes a role |
| DeleteRolePermissionsBoundary | Deletes role permission boundary |
| DeleteServiceLinkedRole | Deletes a service-linked role |
| DescribeRoleList | Gets a role list |
| DescribeSafeAuthFlagIntl | Queries security settings |
| DetachRolePolicy | Unassociates a policy and a role |
| GetRole | Gets role details |
| GetServiceLinkedRoleDeletionStatus | Gets the status of the service-linked role deletion |
| ListAttachedRolePolicies | Gets the list of policies associated with a role |
| PutRolePermissionsBoundary | Sets role permission boundary |
| TagRole | Binds tags to a role |
| UntagRole | Unbinds tags from a role |
| UpdateAssumeRolePolicy | Modifies the trust policy of a role |
| UpdateRoleConsoleLogin | Modifies a role's login permissions |
| UpdateRoleDescription | Modifies the description of a role |
Identity Provider APIs
| API Name | Feature |
|---|---|
| CreateOIDCConfig | Creates role OIDC configurations |
| CreateSAMLProvider | Creates a SAML identity provider |
| CreateUserOIDCConfig | Creates user OIDC configuration |
| CreateUserSAMLConfig | Creates user SAML configurations |
| DeleteOIDCConfig | Deletes OIDC IdPs |
| DeleteSAMLProvider | Deletes a SAML identity provider |
| DescribeOIDCConfig | Queries role OIDC configurations |
| DescribeUserOIDCConfig | Queries user OIDC configuration |
| DescribeUserSAMLConfig | Queries user SAML configurations |
| DisableUserSSO | Disables user SSO |
| GetSAMLProvider | Queries SAML Identity provider details |
| ListSAMLProviders | Queries the list of SAML identity providers |
| UpdateOIDCConfig | Modifies role OIDC configurations |
| UpdateSAMLProvider | Updates SAML identity provider information |
| UpdateUserOIDCConfig | Modifies user OIDC configuration |
| UpdateUserSAMLConfig | Modifies user SAML configurations |
Yes
No
Was this page helpful?