tencent cloud

TencentDB for SQL Server

Release Notes and Announcements
Release Notes
Product Announcements
User Guide
Product Introduction
Overview
Product Architecture
Strengths
Use Cases
Regions and AZs
Major Version Lifecycle Explanation
Features and Differences
Instance Types
Instance Specifications
Storage Types
Common Concepts
Network Environment
License Statement
Purchase Guide
Billing Overview
Product Pricing
Purchase Methods
Renewal Instructions
Payment Overdue
Refund
From Pay-as-You-Go to Monthly Subscription
Instance Adjustment Fees Description
Local Backup Space Billing
Cross-Region Backup Billing
Viewing Bill Details
Getting Started
Creating TencentDB for SQL Server Instance
Connecting to TencentDB for SQL Server Instance
Managing TencentDB for SQL Server Instance
Operation Guide
Constraints and Limits
Usage Specifications and Suggestions
Maintaining Instance
Adjusting Instance Configuration
Read-Only Instance
Network and Security
Account Management
Database Management
Data Security
Parameter Configuration
Monitoring and Alarms
Backup and Restoration 
Log Management
Publish-Subscribe
SSIS
Data Migration (New)
Data Migration (Legacy)
Data Synchronization (DTS) 
Practical Tutorial
TencentDB for SQL Server Methods for Regular Maintenance
TencentDB for SQL Server Optimization of Slow SQL
How to Better Use Tempdb
Cross-Account Backup Restoration
Creating VPC for TencentDB for SQL Server
Connecting Kingdee K/3 WISE to TencentDB for SQL Server
Account Permissions and Permission Control
Enabling and Disabling the CDC Feature
Shrinking a Database
API Documentation
History
Introduction
API Category
Making API Requests
Sales and fee related APIs
Instance Management related APIs
Operation and maintenance management related APIs
Network management related APIs
Account management related APIs
Database management related APIs
Security group management related APIs
Data security encryption related APIs
Parameter configuration related APIs
Extended Event related APIs
Log management related APIs
Read only instance management related APIs
Publish and subscribe related APIs
Backup related APIs
Rollback related APIs
Data migration (cold standby migration) related APIs
SQL Server Integration Services (SSIS) related APIs
Data migration (DTS old version) related APIs
Data Types
Error Codes
FAQs
Overview
Model Selection
Pricing and Selection
Connection and Network
Account and Permission
Backup and Rollback
Data Migration
Publish/Subscribe
Read-Only Instance
Version and Architecture Upgrade
Disk Space and Specification Adjustment
Monitoring and Alarms
Log-Related
Parameter Modification
Features
Performance, Space, and Memory-Related FAQs
Service Agreement
Service Level Agreement
Terms of Service
Performance Evaluation
Performance Test Report
Glossary
Contact Us

Authorizable Resource Types

PDF
フォーカスモード
フォントサイズ
最終更新日: 2024-01-18 17:23:30
Resource-level permissions refer to the ability to specify which resources users are allowed to perform operations on. Some operations of SQL Server support resource-level permissions, meaning you can control when a user is allowed to perform operations or what specific resources they are permitted to use. The types of resources that can be authorized through Cloud Access Management (CAM) are as follows:
Resource Type
Resource Description Method in Authorization Policies
TencentDB instance-related
qcs::sqlserver:$region:$account:instance/*
qcs::sqlserver:$region:$account:instance/$instanceId
TencentDB for SQL Server supports resource-level authorization, allowing you to allocate specified sub-accounts with API permissions for specified resources. The following table presents TencentDB API operations currently supporting resource-level permissions, along with the supported resources and conditional keys for each operation. When specifying a resource path, you can utilize an * wildcard in the path.
Note:
Any TencentDB API operation not listed in the table does not support resource-level permissions. You can still authorize a user to perform these operations, but you must specify the * as the resource element in the policy statement. The table below showcases only a portion of the resource types. For more information, please refer to Authorizable Resource Types for SQL Server.
API Name
API Description
Six-Segment Example of Resource
CreateAccount
Creating an account
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
CreateBackup
Creating a backup
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
CreateDB
Creating a database
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DeleteAccount
Deleting an account
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DeleteDB
Deleting a database
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeAccounts
Querying an account list
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeBackups
Querying a backup list
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeDatabaseNames
Querying a database name
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeDBInstances
Querying instance lists
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeDBs
Querying a database list
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeInstanceTasks
Querying instance tasks
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeRollbackTime
Querying the time range available for rollback
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
DescribeSlowlogs
Querying slow log lists
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
InquiryPriceRenewDBInstance
Querying the price of renewed instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
InquiryPriceUpgradeDBInstance
Querying the price of upgraded instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyAccountPrivilege
Modifying account permissions
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyAccountRemark
Modifying account remarks
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyBackupStrategy
Modifying the time for cold backup
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyDatabasePrivilege
Modifying database permissions
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyDBInstanceName
Renaming instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyDBInstanceProject
Modifying instance project
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyDBName
Renaming a database
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ModifyDBRemark
Modifying database remarks
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
RenewDBInstance
Renewing instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
ResetAccountPassword
Resetting account password
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
RestartDBInstance
Restarting instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
RestoreInstance
Restoring cold backup instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
RollbackInstance
Rolling back instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
TerminateDBInstance
Terminating instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*
UpgradeDBInstance
Upgrading Instances
qcs::sqlserver:$region:$account:instance/$instanceId
qcs::sqlserver:$region:$account:instance/*



ヘルプとサポート

この記事はお役に立ちましたか?

フィードバック