一、服务(相关)角色是由腾讯云服务预定义,经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。
| CAM中产品名 | 角色名称 | 角色类型 | 角色载体 |
| 数据库管理 | DMC_QCSLinkedRoleInWorkOrderReview | 服务相关角色 | dmc.cloud.tencent.com |
二、DMC_QCSLinkedRoleInWorkOrderReview
·策略名称: QcloudAccessForDMCLinkedRoleInWorkOrderReview
·策略内容:{
"statement": [
{
"action": [
"cam:ListUsersForGroup",
"cam:ListGroupsForUser",
"cam:DescribeSubAccounts",
"cam:ListGroups",
"cdb:DescribeAccounts",
"dcdb:DescribeAccounts",
"cynosdb:DescribeAccounts",
"mongodb:DescribeAccountUsers",
"mariadb:DescribeAccounts",
"postgres:DescribeAccounts",
"sqlserver:DescribeAccounts",
"sts:AssumeRole",
"cam:ListAttachedUserAllPolicies",
"cam:GetGroup",
"cam:ListUsers",
"cvm:DescribeInstances",
"vdb:DescribeInstances",
"vdb:DescribeInstanceProperties",
"vdb:DescribeEmbedding",
"redis:DescribeInstances",
"keewidb:DescribeInstances",
"mongodb:DescribeDBInstances",
"ctsdb:DescribeDBInstances",
"tdach:DescribeInstances",
"cdb:DescribeInstances",
"sqlserver:DescribeDBInstances",
"mariadb:DescribeDBInstances",
"postgres:DescribeDBInstanceAttribute",
"postgres:DescribeDBInstances",
"dcdb:DescribeDCDBInstanceDetail",
"tdmysql:DescribeDBInstanceDetail",
"tbase:DescribeInstanceDetail",
"vpc:DescribeDirectConnectGateway",
"vpc:DescribeVpnGateways",
"cam:GetAccountSummary",
"cam:GetUserPermissionBoundary",
"cam:ListCollaborators",
"cam:GetUser",
"cam:GetPolicy",
"cam:ListAttachedGroupPolicies",
"cam:ListAttachedUserPolicies",
"cam:ListEntitiesForPolicy",
"cam:ListPolicies",
"cam:GetRole",
"cam:GetRolePermissionBoundary",
"cam:ListAttachedRolePolicies",
"cdb:CreateAccounts",
"cdb:DescribeDBInstances",
"cdb:ModifyAccountPrivileges",
"cam:DescribeRoleList"
],
"effect": "allow",
"resource": "*"
}
],
"version": "2.0"
}