云数据库 GEMINIDB-云数据库 GeminiDB授权项说明

时间：2024-12-04 09:39:11

云数据库 GEMINIDB 权限策略和授权项

云数据库 GeminiDB授权项说明

表1 实例管理
权限	对应API接口	授权项(Action)	IAM 项目(Project)	企业项目(Enterprise Project)
创建数据库实例	POST /v3/{project_id}/instances	nosql:instance:create	√	√
删除数据库实例	DELETE /v3/{project_id}/instances/{instance_id}	nosql:instance:delete	√	√
查询数据库实例列表	GET /v3/{project_id}/instances?id={id}&name={name}&mode={mode}&datastore_type={datastore_type}&vpc_id={vpc_id}&subnet_id={subnet_id}&offset={offset}&limit={limit}	nosql:instance:list	√	√
扩容实例存储容量	POST /v3/{project_id}/instances/{instance_id}/extend-volume	nosql:instance:modifyStorageSize	√	√
扩容集群实例的节点数量	POST /v3/{project_id}/instances/{instance_id}/enlarge-node	nosql:instance:extendNode	√	√
缩容集群实例的节点数量	POST /v3/{project_id}/instances/{instance_id}/reduce-node	nosql:instance:reduceNode	√	√
变更实例规格	PUT /v3/{project_id}/instances/{instance_id}/resize	nosql:instance:modifySpecification	√	√
修改实例管理员密码	PUT /v3/{project_id}/instances/{instance_id}/password	nosql:instance:modifyPasswd	√	√
修改实例名称	PUT /v3/{project_id}/instances/{instance_id}/name	nosql:instance:rename	√	√
变更实例安全组	PUT /v3/{project_id}/instances/{instance_id}/security-group	nosql:instance:modifySecurityGroup	√	√
数据库补丁升级	POST /v3/{project_id}/instances/{instance_id}/db-upgrade	nosql:instance:upgradeDatabaseVersion	√	√
批量数据库补丁升级	/v3/{projectId}/instances/db-upgrade	nosql:instance:batchUpgradeDatabaseVersion	√	√
创建冷数据存储	POST /v3/{project_id}/instances/{instance_id}/cold-volume	nosql:instance:modifyStorageSize	√	√
扩容冷数据存储	PUT /v3/{project_id}/instances/{instance_id}/cold-volume	nosql:instance:modifyStorageSize	√	√
绑定/解绑弹性公网IP	POST /v3/{project_id}/instances/{instance_id}/nodes/{node_id}/public-ip	nosql:instance:bindPublicIp	√	√
切换SSL开关	POST /v3/{project_id}/instances/{instance_id}/ssl-option	nosql:instance:switchSSL	√	√
重启数据库实例	POST /v3/{project_id}/instances/{instance_id}/restart	nosql:instance:restart	√	√
设置磁盘自动扩容策略	PUT /v3/{project_id}/instances/disk-auto-expansion	nosql:instance:modifyStorageSize	√	√
修改高危命令	PUT /v3/{projectId}/instances/{instanceId}/high-risk-commands	nosql:instances:modifyHighRiskCommands	√	√
设置实例可维护时间段	PUT /v3/{project_id}/instances/{instance_id}/maintenance-window	nosql:instance:modifyMaintenanceWindow	√	√
获取GeminiDB Redis的免密配置	Get /v3/{project_id}/instances/{instance_id}/passwordless-config	nosql:instance:getPasswordlessConfig	√	√
支持修改GeminiDB Redis的免密配置	PUT /v3/{project_id}/instances/{instance_id}/passwordless-config	nosql:instance:setPasswordlessConfig	√	√

表2 备份与恢复
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询自动备份策略	GET /v3.1/{project_id}/instances/{instance_id}/backups/policy	nosql:backup:list	√	√
设置自动备份策略	PUT /v3/{project_id}/instances/{instance_id}/backups/policy	nosql:instance:modifyBackupPolicy	√	√
查询可恢复的实例列表	GET /v3/{project_id}/backups/{backup_id}/restorable-instances	nosql:instance:list	√	√
查询实例可恢复的时间段	GET /v3/{project_id}/instances/{instance_id}/backups/restorable-time-periods	nosql:backup:list	√	√
创建手动备份	POST /v3/{project_id}/instances/{instance_id}/backups	nosql:backup:create	√	√
删除手动备份	DELETE /v3/{project_id}/backups/{backup_id}	nosql:backup:delete	√	√
恢复到已有实例	POST /v3/{project_id}/instances/{instance_id}/recovery	nosql:backup:refreshInstanceFromBacku	√	√

表3 参数模板管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
获取参数模板列表	GET /v3/{project_id}/configurations	nosql:param:list	√	√
创建参数模板	POST /v3/{project_id}/configurations	nosql:param:create	√	√
修改参数模板的参数	PUT /v3/{project_id}/configurations/{config_id}	nosql:param:modify	√	√
应用参数模板	PUT /v3.1/{project_id}/configurations/{config_id}/apply	nosql:instance:modifyParameter	√	√
修改指定实例的参数	PUT /v3.1/{project_id}/instances/{instance_id}/configurations	nosql:instance:modifyParameter	√	√
获取指定实例的参数	GET /v3/{project_id}/instances/{instance_id}/configurations	nosql:param:list	√	√
获取指定参数模板的参数	GET /v3/{project_id}/configurations/{config_id}	nosql:param:list	√	√
删除参数模板	DELETE /v3/{project_id}/configurations/{config_id}	nosql:param:delete	√	√
查询参数模板可应用的实例列表	GET /v3/{project_id}/configurations/{config_id}/applicable-instances	nosql:instance:list	√	√
查询实例参数的修改历史	GET /v3/{project_id}/instances/{instance_id}/configuration-histories	nosql:param:list	√	√
查询参数模板应用历史	GET /v3/{project_id}/configurations/{config_id}/applied-histories	nosql:param:list	√	√

表4 标签管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询资源实例	POST /v3/{project_id}/instances/resource_instances/action	nosql:instance:list nosql:tag:list	√	√
批量添加或删除资源标签	POST /v3/{project_id}/instances/{instance_id}/tags/action	nosql:instance:tag	√	√
查询资源标签	GET /v3/{project_id}/instances/{instance_id}/tags	nosql:instance:list nosql:tag:list	√	√

表5 日志管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询数据库慢日志	GET /v3/{project_id}/instances/{instance_id}/slowlog?start_date={start_date}&end_date={end_date}	nosql:instance:list	√	√

表6 配额管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询配额	GET /v3/{project_id}/quotas	nosql:instance:list	√	√

表7 容灾管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询实例可搭建双活关系的Region	GET /v3/{project_id}/instances/{instance_id}/disaster-recovery/regions	nosql:instance:list	√	√

表8 任务管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询实例可维护时间段	GET /v3/{project_id}/instances/{instance_id}/ops-window	nosql:instance:maintenanceWindow	√	√
取消定时任务	DELETE /v3/{project_id}/scheduled-jobs/{job_id}	nosql:instance:cancleScheduleJob	√	√
查询定时任务列表	GET /v3/{projectId}/scheduled-jobs	nosql:task:list	√	√