Updated on 2024-09-06 GMT+08:00

GaussDB(DWS)

The Organizations service provides Service Control Policies (SCPs) to set access control policies.

SCPs do not actually grant any permissions to a principal. They only set the permissions boundary for the principal. When SCPs are attached to a member account or an organizational unit (OU), they do not directly grant permissions to that member account or OU. Instead, the SCPs just determine what permissions are available for that member account or the member accounts under that OU.

This section describes the elements used by Organizations SCPs. The elements include actions, resources, and conditions.

For details about how to use these elements to create a custom SCP, see Creating an SCP.

Actions

Actions are specific operations that are allowed or denied in an SCP.

  • The Access Level column describes how the action is classified (List, Read, or Write). This classification helps you understand the level of access that an action grants when you use it in an SCP.
  • The Resource Type column indicates whether the action supports resource-level permissions.
    • You can use a wildcard (*) to indicate all resource types. If this column is empty (-), the action does not support resource-level permissions, and you must specify all resources ("*") in your SCP statements.
    • If this column includes a resource type, you must specify the URN in the Resource element of your statements.
    • Required resources are marked with asterisks (*) in the table. If you specify a resource in a statement using this action, then it must be of this type.

    For details about the resource types defined by GaussDB(DWS), see Resource Type.

  • The Condition Key column contains keys that you can specify in the Condition element of an SCP statement.
    • If the Resource Type column has values for an action, the condition key takes effect only for the listed resource types.
    • If the Resource Type column is empty (-) for an action, the condition key takes effect for all resources that action supports.
    • If the Condition Key column is empty (-) for an action, the action does not support any condition keys.

    For details about condition keys defined by GaussDB(DWS), see Conditions.

The following table lists the actions that you can define in SCP statements for GaussDB(DWS).

Table 1 Actions supported by GaussDB(DWS)

Action

Description

Access Level

Resource Type (*: Required)

Condition Key

dws:cluster:list

Grants the permission to query the cluster list.

list

-

-

dws:cluster:getDetail

Grants the permission to view cluster details.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:create

Grants the permission to create a GaussDB(DWS) cluster.

write

-

  • g:RequestTag/<tag-key>
  • g:TagKeys
  • g:EnterpriseProjectId

dws:cluster:delete

Grants the permission to delete a GaussDB(DWS) cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:scaleIn

Grants the permission to scale in a GaussDB(DWS) cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listRing

Grants the permission to obtain the proper scale-in ring list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:restore

Grants the permission to restore a snapshot to the original cluster.

write

cluster *

-

-

  • g:RequestTag/<tag-key>
  • g:TagKeys
  • g:EnterpriseProjectId

dws:cluster:scaleOut

Grants the permission to scale out a GaussDB(DWS) cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:resize

Grants the permission to scale out and resize a GaussDB(DWS) cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:expandDisk

Grants the permission to expand the disk capacity of a GaussDB(DWS) cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:restart

Grants the permission to restart a GaussDB(DWS) cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:resetPassword

Grants the permission to reset the password of a GaussDB(DWS) cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listAuditLog

Grants the permission to view the audit log list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:setMaintainceWindow

Grants the permission to modify the maintenance time window.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:switchover

Grants the permission to restore a primary/standby cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:cancelReadonly

Grants the permission to remove the read-only status of a cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:addCN

Grants the permission to add CNs to a cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listCN

Grants the permission to obtain the CN list of a cluster.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteCN

Grants the permission to delete CN nodes.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:redistribution

Grants the permission to redistribute cluster data.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createDataSource

Grants the permission to create MRS data sources.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateDataSource

Grants the permission to update MRS data sources.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteDataSource

Grants the permission to delete MRS data sources.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:alarm:listDetail

Grants the permission to query the alarm details list.

list

-

-

dws:alarm:report

Grants the permission to report alarms.

write

-

-

dws:event:createSpec

Grants the permission to create event configurations.

write

-

-

dws:event:deleteSpec

Grants the permission to delete event configurations.

write

-

-

dws:event:report

Grants the permission to report events.

write

-

-

dws:cluster:createConnection

Grants the permission to create a GaussDB(DWS) cluster connection.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteConnection

Grants the permission to delete GaussDB(DWS) cluster connections.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateConnection

Grants the permission to update GaussDB(DWS) cluster connections.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:bindEIP

Grants the permission to bind public IP addresses.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:unbindEIP

Grants the permission to unbind public IP addresses.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listELB

Grants the permission to obtain the ELB list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:bindELB

Grants the permission to bind ELBs.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:unbindELB

Grants the permission to unbind ELBs.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createSnapshotPolicy

Grants the permission to set automated snapshot policies.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listSnapshotStatistics

Grants the permission to query the snapshot space capacity.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listSnapshot

Grants the permission to view the cluster snapshot list.

list

cluster

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getSnapshotDetail

Grants the permission to view cluster snapshot details.

list

cluster

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createSnapshot

Grants the permission to create snapshots using APIs.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteSnapshotPolicy

Grants the permission to delete snapshot policies.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listSnapshotPolicy

Grants the permission to query snapshot policies.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:copySnapshot

Grants the permission to replicate snapshots.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteSnapshot

Grants the permission to delete snapshots.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:restoreSnapshot

Grants the permission to restore snapshots.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteDisasterRecovery

Grants the permission to delete DR tasks.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createDisasterRecovery

Grants the permission to create DR tasks.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:restoreDisaster

Grants the permission to restore DR tasks.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws::listTagsForProject

Grants the permission to query the tag list in the project.

list

-

-

dws:cluster:listConfig

Grants the permission to view cluster configuration parameters.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:service:listSpec

Grants the permission to view the service specification list.

list

-

-

dws:cluster:listDataSource

Grants the permission to view cluster data sources.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:service:listJobDetail

Grants the permission to view task progress details.

list

-

-

dws:service:listStatistics

Grants permission to view available resources.

list

-

-

dws:service:listQuotas

Grants the permission to view user quotas.

list

-

-

dws:cluster:updateConfig

Grants the permission to update cluster configuration parameters.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:service:listAZ

Grants the permission to view the service AZ list.

list

-

-

dws:service:listDssPools

Grants the permission to view the storage pool list.

list

-

-

dws:service:listEps

Grants the permission to view the EPS list.

list

-

-

dws:service:authorize

Grant the permission to obtain user authorization.

write

-

-

dws:service:checkAuthorize

Grant the permission to check user authorization.

read

-

-

dws::updateTag

Grants the permission to update tags.

tagging

cluster *

-

-

  • g:RequestTag/<tag-key>
  • g:TagKeys
  • g:EnterpriseProjectId

dws:cluster:getSnapshotPolicy

Grants the permission to view snapshot policies.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:bindOrUnbindELB

Grants the permission to bind or unbind ELBs.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:bindOrUnbindEIP

Grants the permission to bind or unbind EIPs.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteNode

Grants the permission to delete nodes.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listConnection

Grants the permission to query the GaussDB(DWS) cluster connection list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:checkConnection

Grants the permission to check the GaussDB(DWS) cluster connections.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listDN

Grants the permission to obtain the DN list of a cluster.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listBucket

Grants the permission to obtain the bucket list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listScaleInNode

Grants the permission to obtain the list of nodes to be deleted.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listFlavorForResize

Grants the permission to query the list of flavors that can be modified.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listFlavorForRestore

Grants the permission to query the list of flavors that can be restored.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws::countResourceByTag

Grants the permission to query clusters using tags.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateSnapshotPolicy

Grants the permission to update snapshot policies.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws::listResourceByTag

Grants the permission to query clusters by tag.

list

cluster *

-

-

  • g:RequestTag/<tag-key>
  • g:TagKeys
  • g:EnterpriseProjectId

dws:cluster:assessRisk

Grants the permission to evaluate the risk of resizing.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:checkRestoreTable

Grants the permission to check the restored table.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:checkSupportFineGrainedBackup

Grants the permission to check whether a cluster supports fine-grained backup.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:configureNetwork

Grants the permission to configure the cluster network.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:expandWithExistedNodes

Grants the permission to scale out a cluster from an idle node.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getAntiAffinity

Grants the permission to query the anti-affinity status.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getCnCount

Grants the permission to query the number of CNs in a cluster.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getCredential

Grants the permission to obtain the JDBC connection credential of a cluster.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getDiskExpandScope

Grants the permission to obtain the disk scale-out scope.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getEncryptInfo

Grants the permission to view cluster encryption information.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listHistoryConfig

Grants the permission to query parameter modification history.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getHistoryConfigDetail

Grants the permission to query parameter modification history details.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getInstanceDetail

Grants the permission to view instance details.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getProcessTopo

Grants the permission to query the cluster node process topology.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getRedistribution

Grants the permission to query redistribution details.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getRestoreDatabase

Grants the permission to restore databases.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getRoachConfig

Grants the permission to obtain roach parameter configurations.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getSnapshotEncryptInfo

Grants the permission to view snapshot encryption information.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getSnapshotStorage

Grants the permission to query the snapshot capacity usage.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getTaskDetail

Grants the permission to query cluster task details.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getVolumeInfo

Grants the permission to query disk information.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listNode

Grants the permission to query the node list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listSchema

Grants the permission to obtain the user structure list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listTable

Grants the permission to obtain the user list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listDatabase

Grants the permission to obtain the database list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:recoverRedistribution

Grants the permission to restore redistribution.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:resizeFlavor

Grants the permission to change specifications.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:resizeRetry

Grants the permission to retry failed resize attempts.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:restoreTable

Grants the permission to restore tables.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:retryELBSwitch

Grants the permission to retry an ELB switchover task.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listRingForScaleIn

Grants the permission to obtain the scale-in ring list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:stopSnapshot

Grants the permission to stop snapshots.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:suspendRedistribution

Grants the permission to suspend redistribution.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateInstanceAliasName

Grants the permission to update the node alias.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateRoachConfig

Grants the permission to update roach parameter configurations.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateScheduleConfig

Grants the permission to update scheduling configurations.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:service:getClusterSum

Grants the permission to query the number of clusters.

read

-

-

dws:service:getResourceStatistics

Grants the permission to query resource statistics.

read

-

-

dws:service:getStorageStatistics

Grants the permission to query storage statistics.

read

-

-

dws:cluster:listDisasterRecovery

Grants the permission to query the DR task list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:checkDisasterRecoveryName

Grants the permission to check DR task names.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateDisasterRecoveryConfig

Grants the permission to update DR configurations.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:addOperationalTask

Grants the permission to add scheduling tasks.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:bindManageIp

Grants the permission to bind management plane IP addresses.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:checkAccessLts

Grants the permission to check whether LTS is normal.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:checkLogicalClusterData

Grants the permission to check whether a logical cluster has the service data operation permission.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:closeAccessLts

Grants the permission to disable cloud service logs.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createLogicalCluster

Grants the permission to create a logical cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createApplicationForDM

Grants the permission to add jobs and tasks during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createClusterForDM

Grants the permission to create clusters during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createConnectionForDM

Grants the permission to add connections during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createMappingForDM

Grants the permission to add mappings during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteApplicationForDM

Grants the permission to delete jobs and tasks during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteClusterForDM

Grants the permission to delete clusters during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteConnectionForDM

Grants the permission to delete connections during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteMappingForDM

Grants the permission to delete mappings during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:dialsConnectionForDM

Grants the permission to probe connection activity during data migration.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getApplicationForDM

Grants the permission to query job and task details during data migration.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listApplicationConfigForDM

Grants the permission to configure data migration job and task parameters.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listApplicationForDM

Grants the permission to query all jobs in a cluster during data migration.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getClusterForDM

Grants the permission to query cluster details during data migration.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listClusterForDM

Grants the permission to query the cluster list during data migration.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listConfigurationTemplateForDM

Grants the permission to query parameter templates during data migration.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getConnectionForDM

Grants the permission to query connection details during data migration.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listConnectionForDM

Grants the permission to query all connections during data migration.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listDependApplicationForDM

Grants the permission to query all dependent jobs during data migration.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getMappingForDM

Grants the permission to query mapping details during data migration.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listMappingForDM

Grants the permission to query all mappings during data migration.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listProductForDM

Grants the permission to query product information in GDS-Kafka.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateConnectionForDM

Grants the permission to modify the specified connection during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateMappingForDM

Grants the permission to modify the specified mapping during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:startApplicationForDM

Grants the permission to start jobs and tasks during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:stopApplicationForDM

Grants the permission to stop jobs and tasks during data migration.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteCrossRegionSnapshotPolicy

Grants the permission to delete cross-region backup configurations.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteLogicalCluster

Grants the permission to delete a logical cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteOperationalTask

Grants the permission to delete scheduling tasks in the scheduler.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:operateDisasterRecovery

Grants permissions for DR operations, including starting, stopping, and switching over.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateLogicalCluster

Grants the permission to update a logical cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listAllCrossRegionSnapshotConfig

Grants the permission to query all cross-region snapshot configurations.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getDisasterRecoveryProject

Grants the permission to query available projects.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getDisasterRecoveryRegion

Grants the permission to query available regions.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getLastOperationalTask

Grants the permission to query the operations of the last built tasks in the scheduler.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getLogicalClusterRings

Grants the permission to query the cluster ring information of a logical cluster.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getLogicalClusterVolume

Grants the permission to query disk information of a logical cluster.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getOperationalTaskConfig

Grants the permission to obtain the O&M task common configurations of the scheduler.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getOperationalTaskDetail

Grants the permission to obtain the O&M task details of the scheduler.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getOperationalTaskStatus

Grants permission to check the status of the scheduler.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listSnapshotRegion

Grants permission to view the regions where cross-region snapshots are available.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getTargetAllCrossRegionSnapshotConfig

Grants the permission to query all cross-region snapshot configurations.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:initLogicalClusterSwitch

Grants the permission to enable and disable a logical cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listAccessLts

Grants the permission to query the LTS list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listLogicalCluster

Grants the permission to query the logical cluster list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listLogicalClusterTask

Grants the permission to query task information of a logical cluster.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listOperationalTask

Grants the permission to obtain the O&M task list of the scheduler.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:openAccessLts

Grants the permission to enable cloud service logs.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:pauseOperationalTask

Allows the scheduler to suspend scheduling tasks.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getDisasterRecoveryDetail

Grants the permission to query DR details.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:refreshOperationalTask

Allows remote refreshing of O&M tasks for the current cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:restartLogicalCluster

Grants the permission to restart a logical cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:resumeOperationalTask

Grants the permission to resume scheduling tasks of the scheduler.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:setCrossRegionSnapshotPolicy

Grants the permission to configure cross-region backup.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:startOperationalTask

Grants the permission to enable the scheduler.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:stopOperationalTask

Grants the permission to disable the scheduler.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:switchLogicalCluster

Grants the permission to switch to a logical cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:syncCrossRegionBackupClusterInfo

Grants the permission to synchronize cross-region backup cluster information.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:syncCrossRegionBackupConfig

Grants the permission to synchronize cross-region snapshot configurations.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:syncCrossRegionBackupInfo

Grants the permission to synchronize cross-region snapshots.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:syncLogicalCluster

Grants the permission to synchronize data from the background in a logical cluster.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateOperationalTaskConfig

Grants the permission to modify the O&M task common configurations of the scheduler.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateOperationalTask

Grants the permission to modify scheduling tasks of the scheduler.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:addPlanForWLM

Grants the permission to add workload plans for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:addPlanStageForWLM

Grants the permission to add workload plan stages for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:addQueueForWLM

Grants the permission to add workload queues for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:addQueueUserForWLM

Grants the permission to bind users to a workload queue for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deletePlanForWLM

Grants the permission to delete workload plans for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deletePlanStageForWLM

Grants the permission to delete workload plan stages for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteQueueForWLM

Grants the permission to delete workload queues for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteQueueUserForWLM

Grants the permission to unbind users from a workload queue for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:exportPlanForWLM

Grants the permission to export workload plans for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getPlanDetailForWLM

Grants the permission to query details about a workload plan for workload management.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getPlanLogForWLM

Grants the permission to query workload plan logs for workload management.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getPlanQueueForWLM

Grants the permission to query whether a queue is in a workload plan for workload management.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getPlanStageForWLM

Grants the permission to query workload plan stages for workload management.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listQueueForWLM

Grants the permission to obtain the workload queue list for workload management.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getQueueDetailForWLM

Grants the permission to obtain workload queues for workload management.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getQueueRuleForWLM

Grants the permission to obtain the exception rules of a workload queue for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:importPlanForWLM

Grants the permission to import workload plans for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listPlanQueueForWLM

Grants the permission to query available queues for all workload plans for workload management.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listPlanForWLM

Grants the permission to query workload plans for workload management.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listQueueUserForWLM

Grants the permission to obtain the bound users of a workload queue for workload management.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listUserForWLM

Grants the permission to obtain the list of users who are not bound to workload queues in the cluster for workload management.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getClusterDBInfoForWLM

Grants the permission to query database information in a cluster for workload management.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listClusterPlanForWLM

Grants the permission to query all workload plans in a cluster for workload management.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getClusterSchemaInfoForWLM

Grants the permission to query schema space information in a cluster for workload management.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getClusterVersionForWLM

Grants the permission to obtain the background database version in a cluster for workload management.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getFunctionStatusForWLM

Obtain the permission to enable or disable the workload function for workload management.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:setFunctionStatusForWLM

Grants the permission to set the status of the workload function switch for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:startPlanForWLM

Grants the permission to start a workload plan for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:stopPlanForWLM

Grants the permission to stop a workload plan for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:switchPlanStageForWLM

Grants the permission to switch workload stages for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updatePlanStageForWLM

Grants the permission to modify workload plan stages for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateQueueBaseForWLM

Grants the permission to update workload queue basic information for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateQueueResourceForWLM

Grants the permission to update workload queue resource configuration for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateQueueRuleForWLM

Grants the permission to update workload queue exception rules for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateSchemaLimitForWLM

Grants the permission to update schema space limit for workload management.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getMonitorConfigForDMS

Grants the permission to query collection configuration or storage configuration in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:listClusterOverview

Grants the permission to check the cluster overview in DMS.

list

-

-

dws:cluster:listClusterInstanceForDMS

Grants the permission to obtain the cluster instance list in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getDDLExamineDetailForDMS

Grants the permission to query review result details in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getClusterDnStreamForDMS

Grants the permission to query DN data flow monitoring information in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listClusterAlarmRuleForDMS

Grants the permission to query the alarm rule list on the DMS tenant side.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getClusterInstanceForDMS

Grants the permission to query instance information in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getHostNetMetricsForDMS

Grants the permission to query the network status in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:getHistoryMetrics

Grants the permission to query historical monitoring data in DMS.

read

-

-

dws:cluster:getMonitoringInfoForDMS

Grants the permission to query monitoring data in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listAlarmRuleForDMS

Grants the permission to query alarm rules by alarm ID on the DMS tenant side.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateCollectionItemForDMS

Grants the permission to update collection configuration in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:doDDLExamineActionForDMS

Grants the permission to manually trigger the review operation in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:downloadDDLExamineDetailForDMS

Grants the permission to download DDL review details in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listInstanceDiskIOForDMS

Grants the permission to query disk I/Os in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:resetCollectionItemForDMS

Grants the permission to reset collection configuration in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getQueryRangeForDMS

Grants the permission to query time handles in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:getAlarmConfig

Grants the permission to query all clusters and alarm configurations on the DMS tenant side.

read

-

-

dws:cluster:switchoverCollectionItemForDMS

Grants the permission to switch the collection switch in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:getOSMetrics

Grants the permission to query GaussDB(DWS) hardware resource usage in DMS.

read

-

-

dws:cluster:listPerfDashboardForDMS

Allows the current user to access and query all performance monitoring panels in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:disableCollectionItemForDMS

Grants the permission to disable the collection function in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:getAggregationOSMetrics

Grants the permission to query hardware resource usage of a GaussDB(DWS) cluster in DMS.

read

-

-

dws:cluster:terminateSessionForDMS

Grants the permission to terminate sessions in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getPerfDashboardDetailForDMS

Grants the permission to obtain panel information based on the panel ID in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:createAlarmRule

Grants the permission to add alarm rules on the DMS tenant side.

write

-

-

dws:cluster:enableCollectionItemForDMS

Grants the permission to enable the collection function in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listInstanceNetworkMetricsForDMS

Grants the permission to query NIC traffic of GaussDB(DWS) cluster nodes in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createPerfDashboardForDMS

Grants the permission to create user panels in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getMonitorMetricsForDMS

Grants the permission to obtain monitoring items on the home page in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createSQLProbeForDMS

Grants the permission to add SQL probes in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listInstanceIOStatusForDMS

Grants the permission to query disk I/O usage of GaussDB(DWS) cluster nodes in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getMonitorMetricsByDimensionForDMS

Grants the permission to obtain metrics by dimension in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateStorageConfigForDMS

Grants the permission to update storage configuration in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:updateAlarmRule

Grants the permission to modify alarm rules on the DMS tenant side.

write

-

-

dws:cluster:getInstanceIOAggResultForDMS

Grants the permission to query disk I/O aggregation usage of each node in a GaussDB(DWS) cluster in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updatePerfDashboardForDMS

Grants the permission to modify user panels in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getMonitorHistoryMetricsCost

Grants the permission to query historical queue consumption in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:deleteAlarmRule

Grants the permission to delete rules on the DMS tenant side.

write

-

-

dws:cluster:updateSQLProbeForDMS

Grants the permission to modify SQL probes in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:startMonitorMetricsCollectionForDMS

Grants the permission to start the collection in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listInstanceStorageForDMS

Grants the permission to query the file system usage of each node in a GaussDB(DWS) cluster in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deletePerfDashboardForDMS

Grants the permission to delete the monitoring panels of a user in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getMonitorMetricsDetailForDMS

Grants the permission to query metric data in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteSQLProbeForDMS

Grants the permission to delete SQL probes in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:stopAlarmRule

Grants the permission to disable rules on the DMS tenant side.

write

-

-

dws:cluster:stopMonitorMetricsCollectionForDMS

Grants the permission to stop the collection in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listExceptionTableForDMS

Grants the permission to query the skew or dirty page rate of a table in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getInstanceStorageAggForDMS

Grants the permission to query the file system usage of each node in a GaussDB(DWS) cluster in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getWDRSnapShotForDMS

Grants the permission to obtain snapshot records in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getPerfMetricsDataForDMS

Grants the permission to obtain all monitoring metrics in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listQueryForDMS

Grants the permission to obtain all query permissions in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getInstanceIOMetricsForDMS

Grants the permission to query NIC I/O data in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getSQLProbeDetailForDMS

Grants the permission to query SQL probe details in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:switchoverMonitorMetricStatusForDMS

Grants the permission to switch the collection switch in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:startAlarmRule

Grants the permission to enable rules on the DMS tenant side.

write

-

-

dws:monitor:getClusterStatus

Grants the permission to query the status of a GaussDB(DWS) cluster in DMS.

read

-

-

dws:cluster:getPerfMetricsDetailForDMS

Grants the permission to obtain monitoring items based on PMID in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listSlowInstanceForDMS

Grants the permission to query slow nodes in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getDDLExamineConfigForDMS

Grants the permission to query collection configurations in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getMonitoringViewStatusForDMS

Grants the permission to obtain the DMS view status.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:enableAlarm

Grants the permission to enable the alarm function for a cluster on the DMS tenant side.

write

-

-

dws:cluster:createWDRSnapShotForDMS

Grants the permission to add snapshots in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listExecuteStatusForDMS

Grants the permission to query the execution status of a GaussDB(DWS) cluster in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getSlowInstanceDetailForDMS

Grants the permission to query slow node details in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:enableSQLProbeForDMS

Grants the permission to update the enabling status of a SQL probe in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getWDRConfigForDMS

Grants the permission to query cluster WDR configurations in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:disableAlarm

Grants the permission to disable the cluster alarm function on the DMS tenant side.

write

-

-

dws:cluster:getMonitoringViewForDMS

Grants the permission to obtain available menus in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getDatabaseUsageForDMS

Grants the permission to query the database usage in a GaussDB(DWS) cluster in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listSQLProbeForDMS

Grants the permission to query SQL probes in pagination mode in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:getAlarmMetrics

Grants the permission to query alarm metrics on the DMS tenant side.

read

-

-

dws:monitor:listMetricStatus

Grants the permission to obtain function statuses in DMS.

list

-

-

dws:cluster:listSessionStatusForDMS

Grants the permission to query the session execution status of a GaussDB(DWS) cluster in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:downloadPerfHistoryForDMS

Grants the permission to download historical monitoring trend data in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:addPerfItemForDMS

Grants the permission to add monitoring items in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listClusterSessionForDMS

Grants the permission to obtain all current sessions in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getSQLDiagnosticsForDMS

Grants the permission to query SQL diagnosis details in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateWDRSnapShotForDMS

Grants the permission to update the WDR configurations of a GaussDB(DWS) cluster in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:clearAlarm

Grants the permission to clear alarms on the DMS tenant side.

write

-

-

dws:cluster:executeSQLProbeForDMS

Grants the permission to perform SQL probes in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listQueryStatusForDMS

Grants the permission to obtain the current status of a query in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getWDRReportForDMS

Grants the permission to get report records in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listWLMQueueForDMS

Grants the permission to query the current workload queue in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updatePerfItemForDMS

Grants the permission to update monitoring items in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getQueryCostForDMS

Grants the permission to obtain historical resource consumption in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createWDRReportForDMS

Grants the permission to create WDR reports in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:downloadWDRReportForDMS

Grants the permission to download WDR reports in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listDatabaseForDMS

Grants the permission to query all databases in the current cluster in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listUserWLMQueueForDMS

Grants the permission to query the workload queue of a user in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deletePerfItemForDMS

Grants the permission to delete monitoring items in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:monitor:getExceptionAlarmRule

Grants the permission to query exception alarm rules in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getWDRHostForDMS

Grants the permission to query node information in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getHistoryPerfDataForDMS

Grants the permission to query historical monitoring data in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteWDRReportForDMS

Grants the permission to delete WDR reports in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getPerfDetailByDimensionForDMS

Grants the permission to obtain monitored objects based on the cluster ID and dimension in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:downloadPerfHistoryByIdForDMS

Grants the permission to download historical monitoring trend data in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listWaitingWLMForDMS

Grants the permission to obtain queries that are currently waiting in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getQueryPropertyForDMS

Grants the permission to obtain query attributes in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listBucketForDMS

Grants the permission to obtain the OBS bucket list in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getHistoryQueryPropertyForDMS

Grants the permission to obtain historical query attributes in DMS.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listExceptionWLMForDMS

Grants the permission to query abnormal tasks in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:terminateQueryForDMS

Grants the permission to terminate queries in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateTaskForDMS

Grants the permission to update tasks in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:retryTaskForDMS

Grants the permission to retry tasks in DMS.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listTaskForDMS

Grants the permission to query tasks in DMS.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getDatabaseOmUserStatus

Grants the permission to obtain the status of an O&M user.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:executeDatabaseOmUserAction

Grants the permission to execute operations of an O&M user.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getClusterInstancesInfo

Grants the permission to query details about the logical cluster of a cluster instance.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getMetadataSyncStatus

Grants the permission to query the enabling status of DataArts metadata synchronization.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:startMetadataSync

Grants the permission to enable DataArts metadata synchronization.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:stopMetadataSync

Grants the permission to disable DataArts metadata synchronization.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updatePeriodCluster

Grants the permission to update yearly/monthly clusters.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createPeriodCluster

Grants the permission to create yearly/monthly clusters.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteConfigTemplate

Grants the permission to delete configuration templates.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getCountDown

Grants the permission to obtain countdown information.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:getObsHotStorage

Grants the permission to query the OBS data usage of clusters with decoupled storage and compute.

read

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listConfigTemplate

Grants the permission to query configuration parameter templates.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listDwsResource

Grants the permission to obtain the cluster instance resource list.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listDiscountNode

Grants the permission to query the nodes with discount packages.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:changeToPeriod

Grants the permission to change the billing mode from pay-per-use to yearly/monthly.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:rotateKey

Grants the key rotation permission.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:operateCluster

Allows performing cluster operations, such as restoring and canceling read-only status.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:doUpgrade

Grants the permission to upgrade clusters.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listUpgradePath

Grants the permission to obtain cluster upgrade paths.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listUpgradeRecord

Grants the permission to obtain cluster upgrade records.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listLogicalClusterPlans

Grants the permission to query scheduled addition and deletion plans.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:createLogicalClusterPlan

Grants the permission to add scheduled addition and deletion plans.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:deleteLogicalClusterPlan

Grants the permission to delete scheduled addition and deletion plans.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:listDatabaseUsers

Grants the permission to query all database users.

list

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:switchLogicalClusterPlan

Grants the permission to enable or disable scheduled addition or deletion plans.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

dws:cluster:updateLogicalClusterPlan

Grants the permission to edit scheduled addition and deletion plans.

write

cluster *

  • g:ResourceTag/<tag-key>
  • g:EnterpriseProjectId

Each API of GaussDB(DWS) usually supports one or more actions. Table 2 lists the supported actions and dependencies.

Table 2 Actions and dependencies supported by GaussDB(DWS) APIs

API

Action

Dependency

POST /v2/{project_id}/alarm-subs

dws:alarm:createSubscription

-

DELETE /v2/{project_id}/alarm-subs/{alarm_sub_id}

dws:alarm:deleteSubscription

-

POST /v1.0/{project_id}/clusters/{cluster_id}/cns/batch-create

dws:cluster:addCN

-

PUT /v2/{project_id}/clusters/{cluster_id}/workload/queues

dws:cluster:addQueueForWLM

-

dws:cluster:assessRisk

-

POST /v2/{project_id}/clusters/{cluster_id}/eips/{eip_id}

dws:cluster:bindEIP

-

dws:cluster:bindOrUnbindEIP

  

POST /v2/{project_id}/clusters/{cluster_id}/elbs/{elb_id}

dws:cluster:bindELB

-

dws:cluster:bindOrUnbindELB

-

POST /v1.0/{project_id}/clusters/{cluster_id}/cancel-readonly

dws:cluster:cancelReadonly

-

GET /v2/{project_id}/disaster-recovery/check-name

dws:cluster:checkConnection

-

dws:cluster:checkDisasterRecoveryName

-

POST /v1/{project_id}/clusters/{cluster_id}/check-instance-storage

dws:cluster:expandDisk

-

dws:cluster:resize

-

dws:cluster:checkRestoreTable

-

dws:cluster:scaleIn

-

dws:cluster:checkSupportFineGrainedBackup

-

dws:cluster:configureNetwork

-

POST /v1.0/{project_id}/snapshots/{snapshot_id}/linked-copy

dws:cluster:copySnapshot

-

POST /v1.0/{project_id}/clusters

dws:cluster:create

  • ecs:cloudServerQuotas:get
  • ecs:cloudServerFlavors:get
  • bms:serverQuotas:get
  • bms:serverFlavors:get
  • vpc:subnets:get
  • vpc:vpcs:list
  • vpc:ports:get
  • vpc:ports:create
  • vpc:ports:update
  • vpc:securityGroups:get
  • vpc:securityGroups:create
  • vpc:securityGroups:delete
  • vpc:securityGroupRules:create
  • vpc:securityGroupRules:delete
  • vpc:quotas:list
  • eip:publicIps:list
  • eip:publicIps:get
  • eip:publicIps:create
  • evs:quotas:get

POST /v2/{project_id}/clusters

dws:cluster:create

-

POST /v2/{project_id}/cluster-precheck

dws:cluster:create

-

POST /v1.0/{project_id}/clusters/{cluster_id}/dns

dws:cluster:createConnection

-

dws:cluster:createDataSource

-

POST /v2/{project_id}/clusters/{cluster_id}/workload

dws:cluster:setFunctionStatusForWLM

-

POST /v1.0/{project_id}/snapshots

dws:cluster:createSnapshot

-

PUT /v2/{project_id}/clusters/{cluster_id}/snapshot-policies

dws:cluster:createSnapshotPolicy

-

DELETE /v1.0/{project_id}/clusters/{cluster_id}

dws:cluster:delete

-

POST /v1.0/{project_id}/clusters/{cluster_id}/cns/batch-delete

dws:cluster:deleteCN

-

DELETE /v1.0/{project_id}/clusters/{cluster_id}/dns

dws:cluster:deleteConnection

-

DELETE /v1.0/{project_id}/clusters/{cluster_id}/ext-data-sources/{ext_data_source_id}

dws:cluster:deleteDataSource

-

POST /v2/{project_id}/clusters/{cluster_id}/nodes/delete

dws:cluster:deleteNode

-

DELETE /v1.0/{project_id}/snapshots/{snapshot_id}

dws:cluster:deleteSnapshot

-

DELETE /v1.0/{project_id}/clusters/{cluster_id}/snapshot-policies/{id}

dws:cluster:deleteSnapshotPolicy

-

DELETE /v2/{project_id}/clusters/{cluster_id}/workload/queues

dws:cluster:deleteQueueForWLM

-

POST /v1.0/{project_id}/clusters/{cluster_id}/expand-instance-storage

dws:cluster:expandDisk

-

dws:cluster:expandWithExistedNodes

-

dws:cluster:getAntiAffinity

-

dws:cluster:getCnCount

-

dws:cluster:listConfig

-

dws:cluster:getCredential

-

GET /v1.0/{project_id}/clusters/{cluster_id}

dws:cluster:getDetail

-

GET /v2/{project_id}/disaster-recoveries

dws:cluster:getDisasterRecovery

-

dws:cluster:getDiskExpandScope

-

dws:cluster:getEncryptInfo

-

dws:cluster:getHistoryConfigDetail

-

dws:cluster:getInstanceDetail

-

GET /v2/{project_id}/disaster-recovery/{disaster_recovery_id}

dws:cluster:getDisasterRecovery

-

dws:cluster:getInstanceDetail

-

dws:cluster:getProcessTopo

-

dws:cluster:getRedistribution

-

dws::listResourceByTag

-

dws::countResourceByTag

-

dws:cluster:getRestoreDatabase

-

dws:cluster:getRoachConfig

-

dws:cluster:getSnapshotEncryptInfo

-

dws:cluster:getSnapshotPolicy

-

dws:cluster:getSnapshotStorage

-

dws:cluster:getTaskDetail

-

dws:cluster:getVolumeInfo

-

GET /v1.0/{project_id}/clusters

dws:cluster:list

-

GET /v1.0/{project_id}/clusters/{cluster_id}/audit-log-records

dws:cluster:listAuditLog

-

dws:cluster:listBucket

-

GET /v1.0/{project_id}/clusters/{cluster_id}/cns

dws:cluster:listCN

-

GET /v1.0/{project_id}/clusters/{cluster_id}/configurations

dws:cluster:listConfig

-

GET /v1.0/{project_id}/clusters/{cluster_id}/configurations/{configuration_id}

dws:cluster:listConfig

-

dws:cluster:listConnection

-

dws:cluster:listDatabase

-

GET /v1.0/{project_id}/clusters/{cluster_id}/ext-data-sources

dws:cluster:listDataSource

-

GET /v2/{project_id}/clusters/{cluster_id}/elbs

dws:cluster:listDN

-

dws:cluster:listELB

-

dws:cluster:listFlavorForResize

-

dws:cluster:listFlavorForRestore

-

dws:cluster:listHistoryConfig

-

dws:cluster:listNode

-

dws::listResourceByTag

-

dws:cluster:listRing

-

GET /v1.0/{project_id}/clusters/{cluster_id}/shrink-numbers

dws:cluster:listRingForScaleIn

-

dws:cluster:listSchema

-

dws:cluster:listScaleInNode

-

GET /v1.0/{project_id}/clusters/{cluster_id}/snapshots

dws:cluster:listSnapshot

-

GET /v1.0/{project_id}/snapshots

dws:cluster:listSnapshot

-

GET /v1.0/{project_id}/snapshots/{snapshot_id}

dws:cluster:getSnapshotDetail

-

GET /v2/{project_id}/clusters/{cluster_id}/snapshot-policies

dws:cluster:listSnapshotPolicy

-

GET /v1.0/{project_id}/clusters/{cluster_id}/snapshots/statistics

dws:cluster:listSnapshotStatistics

-

dws:cluster:listTable

-

GET /v2/{project_id}/clusters/{cluster_id}/workload

dws:cluster:getFunctionStatusForWLM

-

GET /v2/{project_id}/clusters/{cluster_id}/workload/queues

dws:cluster:listQueueForWLM

-

POST /v2/{project_id}/disaster-recovery/{disaster_recovery_id}/pause

dws:cluster:pauseDisasterRecovery

-

dws:cluster:recoverRedistribution

-

POST /v2/{project_id}/clusters/{cluster_id}/redistribution

dws:cluster:redistribution

-

POST /v1.0/{project_id}/clusters/{cluster_id}/reset-password

dws:cluster:resetPassword

-

POST /v1.0/{project_id}/clusters/{cluster_id}/resize

dws:cluster:resize

-

dws:cluster:resizeFlavor

-

dws:cluster:resizeRetry

-

POST /v1.0/{project_id}/clusters/{cluster_id}/restart

dws:cluster:restart

-

POST /v2/{project_id}/disaster-recovery/{disaster_recovery_id}/recovery

dws:cluster:restore

-

dws:cluster:restoreDisaster

-

POST /v1.0/{project_id}/snapshots/{snapshot_id}/actions

dws:cluster:restoreSnapshot

-

dws:cluster:restoreTable

-

dws:cluster:retryELBSwitch

-

PUT /v1.0/{project_id}/clusters/{cluster_id}/maintenance-window

dws:cluster:scaleOut

-

dws:cluster:setMaintainceWindow

-

POST /v1.0/{project_id}/clusters/{cluster_id}/cluster-shrink

dws:cluster:scaleIn

-

POST /v1/{project_id}/snapshots/{snapshot_id}/stop

dws:cluster:stopSnapshot

-

dws:cluster:suspendRedistribution

-

POST /v1.0/{project_id}/clusters/{cluster_id}/switchover

dws:cluster:switchover

-

DELETE /v2/{project_id}/clusters/{cluster_id}/eips/{eip_id}

dws:cluster:unbindEIP

-

DELETE /v2/{project_id}/clusters/{cluster_id}/elbs/{elb_id}

dws:cluster:unbindELB

-

PUT /v2/{project_id}/clusters/{cluster_id}/configurations/{configuration_id}

dws:cluster:updateConfig

-

PUT /v1.0/{project_id}/clusters/{cluster_id}/dns

dws:cluster:updateConnection

-

PUT /v1.0/{project_id}/clusters/{cluster_id}/ext-data-sources/{ext_data_source_id}

dws:cluster:updateDataSource

-

dws:cluster:updateInstanceAliasName

-

dws:cluster:updateRoachConfig

-

dws:cluster:updateScheduleConfig

-

dws:cluster:updateSnapshotPolicy

-

dws::updateTag

-

POST /v2/{project_id}/event-subs

dws::updateTag

-

dws:event:createSpec

-

dws:event:createSubscription

-

DELETE /v2/{project_id}/event-subs/{event_sub_id}

dws:event:deleteSpec

-

dws:event:deleteSubscription

-

GET /v2/{project_id}/event-subs

dws:event:listSubscription

-

dws:event:report

-

PUT /v2/{project_id}/event-subs/{event_sub_id}

dws:event:updateSubscription

-

dws:service:authorize

-

dws:service:checkAuthorize

-

dws:service:getClusterSum

-

dws:service:getResourceStatistics

-

dws:service:getStorageStatistics

-

GET /v1.0/{project_id}/dss-pools

dws:service:listDssPools

-

dws:service:listEps

-

GET /v2/{project_id}/node-types

dws:service:listSpec

-

GET /v1.0/{project_id}/statistics

dws:service:listStatistics

-

GET /v1.0/{project_id}/tags

dws::listTagsForProject

-

dws:cluster:addOperationalTask

-

dws:cluster:bindManageIp

-

dws:cluster:checkAccessLts

-

dws:cluster:checkDisasterRecoveryName

-

dws:cluster:checkLogicalClusterData

-

dws:cluster:closeAccessLts

-

dws:cluster:createDisasterRecovery

-

POST /v2/{project_id}/clusters/{cluster_id}/logical-clusters

dws:cluster:createLogicalCluster

-

dws:cluster:createApplicationForDM

-

dws:cluster:createClusterForDM

-

dws:cluster:createConnectionForDM

-

dws:cluster:createMappingForDM

-

dws:cluster:deleteApplicationForDM

-

dws:cluster:deleteClusterForDM

-

dws:cluster:deleteConnectionForDM

-

dws:cluster:deleteMappingForDM

-

dws:cluster:dialsConnectionForDM

-

dws:cluster:getApplicationForDM

-

dws:cluster:listApplicationConfigForDM

-

dws:cluster:listApplicationForDM

-

dws:cluster:getClusterForDM

-

dws:cluster:listClusterForDM

-

dws:cluster:listConfigurationTemplateForDM

-

dws:cluster:getConnectionForDM

-

dws:cluster:listConnectionForDM

-

dws:cluster:listDependApplicationForDM

-

dws:cluster:getMappingForDM

-

dws:cluster:listMappingForDM

-

dws:cluster:listProductForDM

-

dws:cluster:updateConnectionForDM

-

dws:cluster:updateMappingForDM

-

dws:cluster:startApplicationForDM

-

dws:cluster:stopApplicationForDM

-

dws:cluster:deleteCrossRegionSnapshotPolicy

-

dws:cluster:deleteDisasterRecovery

-

DELETE /v2/{project_id}/clusters/{cluster_id}/logical-clusters/{logical_cluster_id}

dws:cluster:deleteLogicalCluster

-

dws:cluster:deleteOperationalTask

-

dws:cluster:operateDisasterRecovery

-

PUT /v2/{project_id}/clusters/{cluster_id}/logical-clusters/{logical_cluster_id}

dws:cluster:updateLogicalCluster

-

dws:cluster:listAllCrossRegionSnapshotConfig

-

dws:cluster:getDisasterRecoveryProject

-

dws:cluster:getDisasterRecoveryRegion

-

dws:cluster:getLastOperationalTask

-

dws:cluster:getLogicalClusterRings

-

dws:cluster:getLogicalClusterVolume

-

dws:cluster:getOperationalTaskConfig

-

dws:cluster:getOperationalTaskDetail

-

dws:cluster:getOperationalTaskStatus

-

dws:cluster:listSnapshotRegion

-

dws:cluster:getTargetAllCrossRegionSnapshotConfig

-

dws:cluster:initLogicalClusterSwitch

-

dws:cluster:listAccessLts

-

dws:cluster:listDisasterRecovery

-

dws:cluster:listLogicalCluster

-

dws:cluster:listLogicalClusterTask

-

dws:cluster:listOperationalTask

-

dws:cluster:openAccessLts

-

dws:cluster:pauseOperationalTask

-

dws:cluster:getDisasterRecoveryDetail

-

dws:cluster:refreshOperationalTask

-

POST /v2/{project_id}/clusters/{cluster_id}/logical-clusters/{logical_cluster_id}/restart

dws:cluster:restartLogicalCluster

-

dws:cluster:resumeOperationalTask

-

dws:cluster:setCrossRegionSnapshotPolicy

-

dws:cluster:startOperationalTask

-

dws:cluster:stopOperationalTask

-

dws:cluster:switchLogicalCluster

-

dws:cluster:syncCrossRegionBackupClusterInfo

-

dws:cluster:syncCrossRegionBackupConfig

-

dws:cluster:syncCrossRegionBackupInfo

-

dws:cluster:syncLogicalCluster

-

dws:cluster:updateDisasterRecoveryConfig

-

dws:cluster:updateOperationalTaskConfig

-

dws:cluster:updateOperationalTask

-

dws:cluster:addPlanForWLM

-

dws:cluster:addPlanStageForWLM

-

dws:cluster:addQueueForWLM

-

dws:cluster:addQueueUserForWLM

-

dws:cluster:deletePlanForWLM

-

dws:cluster:deletePlanStageForWLM

-

dws:cluster:deleteQueueForWLM

-

dws:cluster:deleteQueueUserForWLM

-

dws:cluster:exportPlanForWLM

-

dws:cluster:getPlanDetailForWLM

-

dws:cluster:getPlanDetailForWLM

-

dws:cluster:getPlanLogForWLM

-

dws:cluster:getPlanQueueForWLM

-

dws:cluster:getPlanStageForWLM

-

dws:cluster:listQueueForWLM

-

dws:cluster:getQueueDetailForWLM

-

dws:cluster:getQueueRuleForWLM

-

dws:cluster:importPlanForWLM

-

dws:cluster:listPlanQueueForWLM

-

dws:cluster:listPlanForWLM

-

dws:cluster:listQueueUserForWLM

-

dws:cluster:listUserForWLM

-

dws:cluster:getClusterDBInfoForWLM

-

dws:cluster:listClusterPlanForWLM

-

dws:cluster:getClusterSchemaInfoForWLM

-

dws:cluster:getClusterVersionForWLM

-

dws:cluster:getFunctionStatusForWLM

-

dws:cluster:setFunctionStatusForWLM

-

dws:cluster:startPlanForWLM

-

dws:cluster:startPlanForWLM

-

dws:cluster:stopPlanForWLM

-

dws:cluster:stopPlanForWLM

-

dws:cluster:switchPlanStageForWLM

-

dws:cluster:switchPlanStageForWLM

-

dws:cluster:updatePlanStageForWLM

-

dws:cluster:updateQueueBaseForWLM

-

dws:cluster:updateQueueResourceForWLM

-

dws:cluster:updateQueueRuleForWLM

-

dws:cluster:updateSchemaLimitForWLM

-

dws:cluster:getMonitorConfigForDMS

-

dws:monitor:listClusterOverview

-

dws:cluster:listClusterInstanceForDMS

-

dws:cluster:getDDLExamineDetailForDMS

-

dws:cluster:getClusterDnStreamForDMS

-

dws:cluster:listClusterAlarmRuleForDMS

-

dws:cluster:getClusterInstanceForDMS

-

dws:cluster:getDDLExamineDetailForDMS

-

dws:cluster:getHostNetMetricsForDMS

-

dws:monitor:getHistoryMetrics

-

dws:cluster:getMonitoringInfoForDMS

-

dws:cluster:listAlarmRuleForDMS

-

dws:cluster:updateCollectionItemForDMS

-

dws:cluster:doDDLExamineActionForDMS

-

dws:cluster:downloadDDLExamineDetailForDMS

-

dws:cluster:listInstanceDiskIOForDMS

-

dws:cluster:resetCollectionItemForDMS

-

dws:monitor:listClusterOverview

-

dws:monitor:listClusterOverview

-

dws:cluster:getQueryRangeForDMS

-

dws:monitor:getAlarmConfig

-

dws:cluster:switchoverCollectionItemForDMS

-

dws:monitor:listClusterOverview

-

dws:monitor:listClusterOverview

-

dws:monitor:getOSMetrics

-

dws:cluster:listPerfDashboardForDMS

-

dws:cluster:disableCollectionItemForDMS

-

dws:monitor:listClusterOverview

-

dws:monitor:getAggregationOSMetrics

-

dws:cluster:terminateSessionForDMS

-

dws:cluster:getPerfDashboardDetailForDMS

-

dws:monitor:createAlarmRule

-

dws:cluster:enableCollectionItemForDMS

-

dws:monitor:listClusterOverview

-

dws:cluster:listInstanceNetworkMetricsForDMS

-

dws:cluster:createPerfDashboardForDMS

-

dws:cluster:getMonitorMetricsForDMS

-

dws:monitor:listClusterOverview

-

dws:cluster:createSQLProbeForDMS

-

dws:cluster:listInstanceIOStatusForDMS

-

dws:cluster:getMonitorMetricsByDimensionForDMS

-

dws:cluster:updateStorageConfigForDMS

-

dws:monitor:listClusterOverview

-

dws:monitor:updateAlarmRule

-

dws:cluster:getInstanceIOAggResultForDMS

-

dws:cluster:updatePerfDashboardForDMS

-

dws:cluster:getMonitorHistoryMetricsCost

-

dws:monitor:deleteAlarmRule

-

dws:cluster:updateSQLProbeForDMS

-

dws:cluster:startMonitorMetricsCollectionForDMS

-

dws:cluster:listInstanceStorageForDMS

-

dws:cluster:deletePerfDashboardForDMS

-

dws:cluster:getMonitorMetricsDetailForDMS

-

dws:cluster:deleteSQLProbeForDMS

-

dws:monitor:stopAlarmRule

-

dws:cluster:stopMonitorMetricsCollectionForDMS

-

dws:cluster:listExceptionTableForDMS

-

dws:cluster:getInstanceStorageAggForDMS

-

dws:cluster:getWDRSnapShotForDMS

-

dws:cluster:getPerfMetricsDataForDMS

-

dws:cluster:listQueryForDMS

-

dws:cluster:getInstanceIOMetricsForDMS

-

dws:cluster:getSQLProbeDetailForDMS

-

dws:cluster:switchoverMonitorMetricStatusForDMS

-

dws:monitor:startAlarmRule

-

dws:monitor:getClusterStatus

-

dws:cluster:getPerfMetricsDetailForDMS

-

dws:cluster:listSlowInstanceForDMS

-

dws:cluster:getDDLExamineConfigForDMS

-

dws:cluster:getMonitoringViewStatusForDMS

-

dws:monitor:enableAlarm

-

dws:cluster:createWDRSnapShotForDMS

-

dws:cluster:listExecuteStatusForDMS

-

dws:cluster:listQueryForDMS

-

dws:cluster:getSlowInstanceDetailForDMS

-

dws:cluster:enableSQLProbeForDMS

-

dws:cluster:getWDRConfigForDMS

-

dws:monitor:disableAlarm

-

dws:cluster:getMonitoringViewForDMS

-

dws:cluster:createWDRSnapShotForDMS

-

dws:cluster:getDatabaseUsageForDMS

-

dws:cluster:listSQLProbeForDMS

-

dws:monitor:getAlarmMetrics

-

dws:monitor:listMetricStatus

-

dws:cluster:listSessionStatusForDMS

-

dws:cluster:downloadPerfHistoryForDMS

-

dws:cluster:addPerfItemForDMS

-

dws:cluster:listClusterSessionForDMS

-

dws:cluster:getSQLDiagnosticsForDMS

-

dws:cluster:updateWDRSnapShotForDMS

-

dws:monitor:clearAlarm

-

dws:cluster:executeSQLProbeForDMS

-

dws:cluster:listQueryStatusForDMS

-

dws:cluster:getWDRReportForDMS

-

dws:cluster:listWLMQueueForDMS

-

dws:cluster:updatePerfItemForDMS

-

dws:cluster:executeSQLProbeForDMS

-

dws:cluster:getQueryCostForDMS

-

dws:cluster:createWDRReportForDMS

-

dws:cluster:downloadWDRReportForDMS

-

dws:cluster:listDatabaseForDMS

-

dws:cluster:listUserWLMQueueForDMS

-

dws:cluster:deletePerfItemForDMS

-

dws:cluster:createWDRReportForDMS

-

dws:cluster:getQueryCostForDMS

-

dws:monitor:getExceptionAlarmRule

-

dws:cluster:getWDRHostForDMS

-

dws:cluster:getHistoryPerfDataForDMS

-

dws:cluster:deleteWDRReportForDMS

-

dws:cluster:getQueryCostForDMS

-

dws:cluster:getPerfDetailByDimensionForDMS

-

dws:cluster:downloadPerfHistoryByIdForDMS

-

dws:cluster:listWaitingWLMForDMS

-

dws:cluster:downloadWDRReportForDMS

-

dws:cluster:getQueryPropertyForDMS

-

dws:cluster:listBucketForDMS

-

dws:cluster:getHistoryQueryPropertyForDMS

-

dws:cluster:listExceptionWLMForDMS

-

dws:cluster:addPerfItemForDMS

-

dws:cluster:terminateQueryForDMS

-

dws:cluster:updateTaskForDMS

-

dws:cluster:retryTaskForDMS

-

dws:cluster:listTaskForDMS

-

GET /v1/{project_id}/clusters/{cluster_id}/db-manager/om-user/status

dws:cluster:getDatabaseOmUserStatus

-

POST /v1/{project_id}/clusters/{cluster_id}/db-manager/om-user/action

dws:cluster:executeDatabaseOmUserAction

-

GET /v2/{project_id}/clusters/{cluster_id}/instances

dws:cluster:getClusterInstancesInfo

-

dws:cluster:getMetadataSyncStatus

-

dws:cluster:startMetadataSync

-

dws:cluster:stopMetadataSync

-

dws:cluster:updatePeriodCluster

-

dws:cluster:createPeriodCluster

-

dws:cluster:deleteConfigTemplate

-

dws:cluster:getCountDown

-

dws:cluster:getObsHotStorage

-

dws:cluster:listConfigTemplate

-

dws:cluster:listDwsResource

-

dws:cluster:listDiscountNode

-

dws:cluster:changeToPeriod

-

dws:cluster:rotateKey

-

dws:cluster:operateCluster

-

dws:cluster:setMaintainceWindow

-

dws:cluster:doUpgrade

-

dws:cluster:listUpgradePath

-

dws:cluster:listUpgradeRecord

-

dws:cluster:delete

-

GET /v1/{project_id}/clusters/{cluster_id}/db-manager/objects

dws:cluster:getDatabaseObjects

-

dws:cluster:listLogicalClusterPlans

-

dws:cluster:createLogicalClusterPlan

-

dws:cluster:deleteLogicalClusterPlan

-

dws:cluster:listDatabaseUsers

-

dws:cluster:switchLogicalClusterPlan

-

dws:cluster:updateLogicalClusterPlan

-

dws:cluster:getAccessWhitelistStatus

-

POST /v1/{project_id}/clusters/{cluster_id}/access-whitelist

dws:cluster:addAccessWhitelist

-

dws:cluster:getAccessWhitelist

-

PUT /v1/{project_id}/clusters/{cluster_id}/access-whitelist/{whitelist_id}

dws:cluster:getAccessWhitelistDetail

-

dws:cluster:setAccessWhitelistDetail

-

DELETE /v2/{project_id}/clusters/{cluster_id}

dws:cluster:delete

-

Resource Type

A resource type indicates the resources that an SCP applies to. If you specify a resource type for any action in Table 3, the resource URN must be specified in the SCP statements using that action, and the SCP applies only to resources of this type. If no resource type is specified, the Resource element is marked with an asterisk (*) and the SCP applies to all resources. You can also set condition keys in an SCP to define resource types.

The following table lists the resource types that you can define in the SCP statements for GaussDB(DWS).

Table 3 Resource types supported by GaussDB(DWS)

Resource Type

URN

cluster

dws:<region>:<account-id>:cluster:<cluster-id>

Conditions

GaussDB(DWS) does not support service-specific condition keys in an SCP.

It can only use global condition keys applicable to all services. For details, see Global Condition Keys.