访问管理 腾讯云数据仓库 TCHouse-D

一、服务（相关）角色是由腾讯云服务预定义，经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。

二、CDWDRS_QCSLinkedRoleInDORISES

·策略名称： QcloudAccessForCdwdorisLinkedRoleInDORISES

·策略内容：{
"statement": [
{
"action": [
"es:CreateServerlessSpace",
"es:CreateServerlessInstance",
"es:DescribeServerlessInstances",
"es:CreateServerlessInstanceUser",
"es:DescribeServerlessInstanceUsers",
"es:CreateServerlessDi",
"es:DescribeServerlessDi",
"es:DeleteServerlessInstanceUser",
"es:DeleteServerlessDi",
"es:DeleteServerlessInstance",
"es:DescribeServerlessSpaces",
"es:SearchServerlessData",
"es:CreateServerlessSpaceV2",
"es:DescribeServerlessSpaces",
"es:DescribeServerlessSpaceUser"
],
"effect": "allow",
"resource": "*"
}
],
"version": "2.0"
}

三、CDWDRS_QCSLinkedRoleInDorisDlc

使用场景： 当前角色为doris访问dlc服务相关角色，该角色将在已关联策略的权限范围内访问你的其他云服务资源。权限策略

·策略名称： QcloudAccessForCDWDRSLinkedRoleInDorisDlc

·策略内容：{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"dlc:RegisterThirdPartyAccessUser",
"dlc:DeleteThirdPartyAccessUser",
"dlc:DescribeSubUserAccessPolicy",
"dlc:DescribeThirdPartyAccessUser",
"dlc:DescribeDLCCatalogAccess",
"dlc:GrantDLCCatalogAccess",
"dlc:RevokeDLCCatalogAccess"
],
"resource": "*"
}
]
}

四、CDWDORIS_QCSLinkedRoleInDORISCLS

使用场景： 当前角色为腾讯云数据仓库 TCHouse-D (cdwdoris)服务相关角色，该角色将在已关联策略的权限范围内访问你的其他云服务资源。权限策略

·策略名称： QcloudAccessForCDWDORISLinkedRoleInDORISCLS

·策略内容：{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"cls:DescribeConfigs",
"cls:DescribeIndex",
"cls:DescribeMachines",
"cls:GetAccount",
"cls:DescribeTopics",
"cls:GetLog",
"cls:SearchLog",
"cls:getConfig",
"cls:getConsumerGroupCursor",
"cls:getCursor",
"cls:getIndex",
"cls:getLogset",
"cls:getMachineGroup",
"cls:getMachineStatus",
"cls:getShipper",
"cls:getTopic",
"cls:searchLog",
"cls:ShowContext",
"cls:ApplyConfigToMachineGroup",
"cls:CreateConfig",
"cls:CreateIndex",
"cls:CreateLogset",
"cls:CreateMachineGroup",
"cls:CreateTopic",
"cls:DeleteIndex",
"cls:DeleteConfig",
"cls:DeleteMachineGroup",
"cls:ModifyIndex",
"cls:ModifyMachineGroup",
"cls:createLogset",
"cls:createMachineGroup",
"cls:createShipper",
"cls:createTopic",
"cls:modifyIndex",
"cls:modifyLogset",
"cls:modifyMachineGroup",
"cls:modifyShipper",
"cls:modifyTopic",
"cls:pushLog",
"cls:deleteMachineGroup",
"cls:deleteShipper",
"cls:DescribeAgentConfigs",
"cls:DescribeLogsets",
"cls:listLogset",
"cls:listMachineGroup",
"cls:listShipper",
"cls:listTopic",
"cls:DescribeMachineGroups",
"cls:agentHeartBeat"
],
"resource": [
"*"
]
}
]
}

五、CDWDORIS_QCSLinkedRoleInDORISCOS

使用场景： 当前角色为腾讯云数据仓库 TCHouse-D服务相关角色，该角色将在已关联策略的权限范围内访问你的其他云服务资源。权限策略

·策略名称： QcloudAccessForCDWDORISLinkedRoleInDORISCOS

·策略内容：{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"cos:AbortMultipartUpload",
"cos:GetBucket",
"cos:GetBucketACL",
"cos:GetBucketAccelerate",
"cos:GetBucketCORS",
"cos:GetBucketDomain",
"cos:GetBucketEncryption",
"cos:GetBucketIntelligentTiering",
"cos:GetBucketInventory",
"cos:GetBucketLifecycle",
"cos:GetBucketLocation",
"cos:GetBucketLogging",
"cos:GetBucketNotification",
"cos:GetBucketObjectVersions",
"cos:GetBucketOrigin",
"cos:GetBucketPolicy",
"cos:GetBucketReferer",
"cos:GetBucketReplication",
"cos:GetBucketTagging",
"cos:GetBucketVersionAcl",
"cos:GetBucketVersioning",
"cos:GetBucketWebsite",
"cos:GetObject",
"cos:GetObjectACL",
"cos:DeleteObject",
"cos:DeleteMultipleObjects",
"cos:GetObjectTagging",
"cos:GetObjectVersionAcl",
"cos:GetService",
"cos:HeadBucket",
"cos:HeadObject",
"cos:ListMultipartUploads",
"cos:ListParts",
"cos:OptionsObject",
"cos:AppendObject",
"cos:CompleteMultipartUpload",
"cos:InitiateMultipartUpload",
"cos:PostObject",
"cos:PostObjectRestore",
"cos:PutBucket",
"cos:PutBucketEncryption",
"cos:PutBucketIntelligentTiering",
"cos:PutBucketInventory",
"cos:PutBucketLifecycle",
"cos:PutBucketLogging",
"cos:PutBucketReplication",
"cos:PutBucketVersioning",
"cos:PutObject",
"cos:PutObjectCopy",
"cos:PutObjectTagging",
"cos:UploadPart",
"cos:UploadPartCopy"
],
"resource": [
"*"
]
}
]
}

六、CDWDRS_QCSLinkedRoleInDorisTccatalog

使用场景： 当前角色为云数据仓库Doris（CDWDRS）服务相关角色，用于Doris与Tccatalog的联动场景，授权Doris服务访问Tccatalog相关资源。该角色将在已关联策略的权限范围内访问你的其他云服务资源。权限策略

·策略名称： QcloudAccessForCDWDRSLinkedRoleInDorisTccatalog

·策略内容：{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"tccatalog:*"
],
"resource": "*"
}
]
}