tencent cloud

PrevNext

フィードバック

キーワードで検索してください

Recent Pages

ドキュメント
Cloud Access Management
    ドキュメント

    TencentDB for DBbrain

    最終更新日:2024-05-02 09:05:33

      Fundamental information

      Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
      TencentDB for DBbrain dbbrain Supported not supported Resource level Partially supported

      Note：

      The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

      • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
      • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
      • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

      API authorization granularity

      Two authorization granularity levels of API are supported: resource level, and operation level.

      • Resource level: It supports the authorization of a specific resource.
      • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

      Write operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      AddUserContact Add user contact info Operation level * not supported
      BindSensitiveRule Bind instance and sensitive detect rule Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      CancelBuildIndex Cancel instance build index Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CancelDBAutonomyAction Cancel instance autonomy action Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CancelDBAutonomyEvent Cancel instance autonomy event Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CancelKillTask cancel kill threads task Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CloseAuditService close audit Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CloseInstanceAuditService Close instance audit service Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CreateAlarmPolicy Create Alarm policy Operation level * not supported
      CreateAlarmTemplate Create user notice template Operation level * not supported
      CreateAuditLogFile create an audit log file download task Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CreateAuditLogStatsTask Create audit log stats task Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      CreateCollectionIndex Create MongoDB instance collection index Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CreateDBDiagReportTask Create db diag report task Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      CreateDBDiagReportUrl Create db diag report URL Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      CreateDesensitizationAlgorithm Create desentization algorithm Operation level * not supported
      CreateDesensitizationRule Create desentization rule Operation level * not supported
      CreateDesensitizationTask Create desentization task Operation level * not supported
      CreateIgnoreDiagRecord Create ignore diag record Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CreateKillTask create kill threads task Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CreateMailProfile Create mail profile Operation level * not supported
      CreateProxySessionKillTask Create kill session task on all proxy. Support Redis product Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CreateRedisBigKeyAnalysisTask Create redis instance big key analysis task Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CreateSchedulerMailProfile Create scheduler mail profile Operation level * not supported
      CreateSecurityAuditLogExportTask Create security audit log export task Operation level * Supported
      CreateSensitiveRule Create sensitive detect rule Operation level * not supported
      CreateSensitiveType Create sensitive type for sensitive detect Operation level * not supported
      CreateSqlFilter Create instance SQL filter task Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CreateUserAutonomyProfile Create user autonomy profile Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      CreateUserProfile Create user profile Operation level * not supported
      DeleteAlarmPolicy Delete alarm policy Operation level * not supported
      DeleteAlarmTemplate Delete user notice template Operation level * not supported
      DeleteAuditLogFile delete audit log file Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DeleteAuditLogStatsTask Delete audit log stats task Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DeleteCollectionIndex Delete MongoDB instance collection index Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DeleteDBDiagReportTasks Delete db diag report tasks Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DeleteDesensitizationAlgorithm Delete desentization algorithm Operation level * not supported
      DeleteDesensitizationRule Delete desentization rule Operation level * not supported
      DeleteDesensitizationTask Delete desentization task Operation level * not supported
      DeleteKillTaskRecord Delete kill task record Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DeleteRedisBigKeyAnalysisTasks Delete redis instance big key analysis tasks Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DeleteSecurityAuditLogExportTasks Delete security audit log export tasks Operation level * Supported
      DeleteSensitiveGroup Delete group of sensitive type for sensitive detect Operation level * not supported
      DeleteSensitiveRule Delete sensitive detect rule Operation level * not supported
      DeleteSensitiveType Delete sensitive type for sensitive detect Operation level * not supported
      DeleteSqlFilters Delete instance SQL filter tasks Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DeleteUserProfile Delete user profile Operation level * not supported
      ExecuteUserSql Execute sql Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      KillMySqlThreads kill mysql threads Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      ModifyAlarmPolicy Modify alarm policy Operation level * not supported
      ModifyAuditService modify audit Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} Supported
      ModifyDesensitizationAlgorithm Modify desentization algorithm Operation level * not supported
      ModifyDesensitizationRule Modify desentization rule Operation level * not supported
      ModifyDesensitizationTask Modify desentization task Operation level * not supported
      ModifyDesensitizationTaskStatus Modify desentization task status Operation level * not supported
      ModifyDiagDBInstanceConf Modify instance daily inspection status Operation level * not supported
      ModifySensitiveRule Modify sensitive detect rule Operation level * not supported
      ModifySensitiveType Modify sensitive type for sensitive detect Operation level * not supported
      ModifySqlFilters Modify instance SQL filter tasks status Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      ModifyUserAutonomyProfile Modify user autonomy profile Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      ModifyUserProfile Modify user profile Operation level * not supported
      OpenAuditService open audit Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      OpenInstanceAuditService Open instance audit service Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      RetryIndexOperationTask Retry instance index operation task Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      UnbindSensitiveRule Unbind instance and sensitive detect rule Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      UpdateAgentSwitch update agent switch Operation level * not supported
      UpdateDatabaseAutonomyStatus Update instance database autonomy status Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      UpdateDiagEventStatus update diag event status Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      UpdateEventAlarmRecordStatus Block or not block Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      UpdateMonitorSwitch update monitor switch Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported

      Read operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeAlarmPolicy Describe alarm policy Operation level * not supported
      DescribeAlarmTemplate User notice template list Operation level * not supported
      DescribeAlarmTemplateView User notice template view Operation level * not supported
      DescribeAllUserContact Get all email contacts Operation level * not supported
      DescribeAllUserGroup Get all email contact groups Operation level * not supported
      DescribeAuditInstanceList Query the instance list from the business center Operation level * not supported
      DescribeAuditLogFiles query audit log files Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeAuditLogMetricRatio Describe audit log metric ratio Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeAuditLogSeries cdb audit indicator trend chart Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeAuditLogSeriesForSqlTime Describe audit log series for sql time Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeAuditLogStatsTasks Describe audit log stats tasks Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeAuditLogTopSqls Describe audit log top sql list Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeAuditLogs querying audit logs Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeCollectionIndexInfo Describe MongoDB instance collection index info Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeDBAuditLogTopSqls cdb audit log statistical analysis Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeDBAutonomyAction Describe instance autonomy action Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeDBAutonomyActionHistory Describe instance autonomy action history Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeDBAutonomyActions Describe instance autonomy actions Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeDBAutonomyEvents Describe instance autonomy events Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeDBDiagEvent Describe db diag event Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeDBDiagEvents Describe user all instances diag events Operation level * not supported
      DescribeDBDiagHistory Describe db diag history Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeDBDiagReport Describe db diag report Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeDBDiagReportTasks Describe db diag report tasks Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeDBPerfTimeSeries Describe db performance time series Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeDBSpaceStatus Describe db space status Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeDatabaseAutonomyStatus Describe instance database autonomy status Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeDatabaseObject Describe database object Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeDiagDBInstanceNodes Describe Instance and node Operation level * not supported
      DescribeDiagDBInstances Get instances info list Operation level * not supported
      DescribeEventAlarmHistory Describe event alarm history Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeEventAlarmOperate Describe block history list Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeHealthScore Describe health score Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeHealthScoreTimeSeries Describe health score time series Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeIgnoreDiagRecord Get ignore diag record Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeIndexBuildProgress Describe instance index build progress Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeIndexRecommendAggregationSlowLogs Describe instance index recommend aggregation slow logs Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeIndexRecommendInfo Describe instance index recommend Info Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeIndexRecommendSlowLogs Describe instance index recommend slow logs Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeInnodbHotUpdateDetectTasks DescribeI Innodb DB hot update detect tasks Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeInstanceAuditService Describe instance audit service Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeInstanceDBNodes Describe instance DB nodes Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeInstanceProxyList Describe instance proxy list Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeInstancesPerfTimeSeries Get instance perf timeSeries Operation level * not supported
      DescribeKillTask get kill threads task info Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeKillTaskRecord Get kill task record Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeMailProfile Get mail send profile Operation level * not supported
      DescribeMetricTopProxies Describe instance metric top proxies Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeMongoStatus Describe MongoDB instance mongostat Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeMongoTop Describe MongoDB instance mongotop Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeMonitorSnapshot Describe instance monitor snapshot Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeMySqlProcessList Describe mysql instance process list Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} Supported
      DescribeNoPrimaryKeyTables Describe instance no primary key tables Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeOperationHistory Describe instance operation history Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeOptimizedHistory Describe instance optimized history Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeProcessList Describe process list Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeProxyAggregationSeries describe proxy aggregation series Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeProxyProcessStatistics Describe instance proxy process statistics Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeProxySessionKillTasks Describe redis instance kill proxy sessions task list Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeRedisBigKeyAnalysisTasks Describe redis instance big key analysis tasks Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeRedisCmdPerfTimeSeries Describe redis instance command perf time series Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeRedisCommandCostStatistics Describe redis instance command cost statistics Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeRedisCommandOverview Describe redis instance command overview Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeRedisProcessList Describe redis instance process list. Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeRedisTopBigKeys Describe redis instance top keys Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeRedisTopCostCommands Describe redis instance top cost commands Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeRedisTopHotKeys Describe redis instance top hot keys Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeSecurityAuditLogDownloadUrls Describe security audit log download urls Operation level * Supported
      DescribeSecurityAuditLogExportTasks Describe security audit log export tasks Operation level * Supported
      DescribeSensitiveDetectResult Describe sensitive detect result Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeSlowLogTimeSeriesStats Describe slog log time series stats Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeSlowLogTopProxyTimeSeries Describe instance slow log top proxy time series Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeSlowLogTopSqls Describe slow log top sql List. Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeSlowLogUserHostStats Get the statistical distribution chart of slow log source addresses Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeSlowLogs Describe slow logs Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeSqlAdvice Describe sql advice Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeSqlExplain Describe sql explain Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeSqlFilters Describe instance SQL filter tasks Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeSqlTemplate Describe SQL template Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} Supported
      DescribeTableSpaceData Describe table space data Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeTableSpaceTimeSeries Describe table space time series Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeTopSpaceSchemaLatestRecords Describe the space metric data of top schemas collected at the latest timing Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeTopSpaceSchemaTimeSeries Describe the daily space metric data statistics of top schemas in the specified time period Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeTopSpaceSchemas Describe instance top space schemas Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeTopSpaceTableLatestRecords Describe the space metric data of top tables collected at the latest timing Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeTopSpaceTableTimeSeries Describe the daily space metric data statistics of top tables in the specified time period Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeTopSpaceTables Describe top space tables Resource level qcs:id/0:cdb:gz:uin/100000983328:instanceId/cdb-e4qazvd8 not supported
      DescribeUserAutonomyProfile Describe user autonomy profile Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      DescribeUserProfile Get user profile Operation level * not supported
      DescribeUserSqlAdvice Describe sql advice Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} Supported
      DescribeUserSqlHistory get kill user threads history Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} not supported
      VerifyUserAccount Verity user database account，get session token Resource level qcs::dbbrain:${region}:uin/${uin}:instanceId/${instanceId} Supported

      List Operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeDBDiagItemTimeSeries Get DB diag event items by timeSeries Operation level * not supported
      DescribeMetricStatTopInstances Get instances order by metric Operation level * not supported
      DescribeMetricTopInstances Get instances by metric Operation level * not supported
      DescribeTopHealthScoreAvg Get instances top health score list Operation level * not supported
      お問い合わせ

      カスタマーサービスをご提供できるため、ぜひお気軽にお問い合わせくださいませ。

      お問い合わせ
      テクニカルサポート

      さらにサポートが必要な場合は、サポートチケットを送信して弊社サポートチームにお問い合わせください。24時間365日のサポートをご提供します。

      チケットを送信
      電話サポート（24 時間365日対応）
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      個人情報保護方針利用規約クッキーポリシー