tencent cloud

Cloud Access Management

DocumentationCloud Access ManagementBusiness Use CasesTencentDB for MySQLAllowing Account to View TencentDB for MySQL Instances Under Specified Tag

Allowing Account to View TencentDB for MySQL Instances Under Specified Tag

PDF
Focus Mode
Font Size
Last updated: 2024-01-23 18:02:52
The enterprise account “CompanyExample” (ownerUin: 12345678) has a sub-account “Developer” that requires permissions to view its two TencentDB for MySQL instances (instance IDs: “cdb-1” and “cdb-2”, with the tags being “game&webpage” and “game&app”, respectively).
Step 1: Create the following policy by using policy syntax.
{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"cdb:Describe*"
],
"resource": "*",
"condition": {
"for_any_value:string_equal": {
"qcs:resource_tag": [
"game&webpage",
"game&app"
]
}
}
}
]
}
Step 2. Authorize the policy to the sub-account. For more information on authorization, see Authorization Management.
Note:
The sub-account “Developer” can only view the resources of instances with the IDs being “cdb-1” and “cdb-2” in the TencentDB for MySQL query list.

Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback