云数据库 GeminiDB授权项说明

表1 实例管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
创建数据库实例	POST /v3/{project_id}/instances	nosql:instance:create	√	√
删除数据库实例	DELETE /v3/{project_id}/instances/{instance_id}	nosql:instance:delete	√	√
查询数据库实例列表	GET /v3/{project_id}/instances?id={id}&name={name}&mode={mode}&datastore_type={datastore_type}&vpc_id={vpc_id}&subnet_id={subnet_id}&offset={offset}&limit={limit}	nosql:instance:list	√	√
扩容实例存储容量	POST /v3/{project_id}/instances/{instance_id}/extend-volume	nosql:instance:modifyStorageSize	√	√
扩容集群实例的节点数量	POST /v3/{project_id}/instances/{instance_id}/enlarge-node	nosql:instance:extendNode	√	√
缩容集群实例的节点数量	POST /v3/{project_id}/instances/{instance_id}/reduce-node	nosql:instance:reduceNode	√	√
变更实例规格	PUT /v3/{project_id}/instances/{instance_id}/resize	nosql:instance:modifySpecification	√	√
修改实例管理员密码	PUT /v3/{project_id}/instances/{instance_id}/password	nosql:instance:modifyPasswd	√	√
修改实例名称	PUT /v3/{project_id}/instances/{instance_id}/name	nosql:instance:rename	√	√
变更实例安全组	PUT /v3/{project_id}/instances/{instance_id}/security-group	nosql:instance:modifySecurityGroup	√	√
数据库补丁升级	POST /v3/{project_id}/instances/{instance_id}/db-upgrade	nosql:instance:upgradeDatabaseVersion	√	√
批量数据库补丁升级	/v3/{projectId}/instances/db-upgrade	nosql:instance:batchUpgradeDatabaseVersion	√	√
创建冷数据存储	POST /v3/{project_id}/instances/{instance_id}/cold-volume	nosql:instance:modifyStorageSize	√	√
扩容冷数据存储	PUT /v3/{project_id}/instances/{instance_id}/cold-volume	nosql:instance:modifyStorageSize	√	√
绑定/解绑弹性公网IP	POST /v3/{project_id}/instances/{instance_id}/nodes/{node_id}/public-ip	nosql:instance:bindPublicIp	√	√
切换SSL开关	POST /v3/{project_id}/instances/{instance_id}/ssl-option	nosql:instance:switchSSL	√	√
重启数据库实例	POST /v3/{project_id}/instances/{instance_id}/restart	nosql:instance:restart	√	√
设置磁盘自动扩容策略	PUT /v3/{project_id}/instances/disk-auto-expansion	nosql:instance:modifyStorageSize	√	√
修改高危命令	PUT /v3/{projectId}/instances/{instanceId}/high-risk-commands	nosql:instances:modifyHighRiskCommands	√	√
设置实例可维护时间段	PUT /v3/{project_id}/instances/{instance_id}/maintenance-window	nosql:instance:modifyMaintenanceWindow	√	√
获取GeminiDB Redis的免密配置	Get /v3/{project_id}/instances/{instance_id}/passwordless-config	nosql:instance:getPasswordlessConfig	√	√
支持修改GeminiDB Redis的免密配置	PUT /v3/{project_id}/instances/{instance_id}/passwordless-config	nosql:instance:setPasswordlessConfig	√	√
更新委托权限策略	x	nosql:instance:updateAgency	√	√
查询委托权限详情	x	nosql:instance:listAgency	√	√
查询内存加速映射列表和详情	GET /v3/{project_id}/dbcache/mappings	nosql:instance:listDBCacheMappings	√	√
创建内存加速规则	POST /v3/{project_id}/dbcache/rule	nosql:instance:listDBCacheRules	√	√
删除内存加速映射	DELETE /v3/{project_id}/dbcache/mapping	nosql:instance:deleteDBCacheMapping	√	√
创建内存加速映射	POST /v3/{project_id}/dbcache/mapping	nosql:instance:createDBCacheMapping	√	√
修改内存加速规则	PUT /v3/{project_id}/dbcache/rule	nosql:instance:updateDBCacheRule	√	√
查询内存加速规则列表和详情	GET /v3/{project_id}/dbcache/rules	nosql:instance:listDBCacheRules	√	√
删除内存加速规则	DELETE /v3/{project_id}/dbcache/rule	nosql:instance:deleteDBCacheRule	√	√
开启/关闭实例数据导出	PUT /v3/{project_id}/instances/{instance_id}/data-dump	nosql:instance:operateDataDump	√	√
开启/关闭秒级监控	PUT /v3/{project_id}/instances/{instance_id}/monitoring-by-seconds/switch	nosql:instance:secondLevelMonitoring	√	√
查询秒级监控配置	GET /v3/{project_id}/instances/{instance_id}/monitoring-by-seconds/switch	nosql:instance:secondLevelMonitoring	√	√
查询Redis实例的热key	GET /v3/{project_id}/instances/{instance_id}/hot-keys	nosql:instance:getHotKeys	√	√
Redis主备切换	PUT /v3/{project_id}/instance/{instance_id}/switchover	nosql:instance:switchover	√	√
查询Redis禁用命令	GET /v3/{project_id}/redis/instances/{instance_id}/disabled-commands	nosql:instance:queryRedisDisabledCommands	√	√
设置Redis禁用命令	POST /v3/{project_id}/redis/instances/{instance_id}/disabled-commands	nosql:instance:setRedisDisabledCommands	√	√
删除Redis禁用命令	DELETE /v3/{project_id}/redis/instances/{instance_id}/disabled-commands	nosql:instance:setRedisDisabledCommands	√	√

表2 连接管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
获取实例的会话	GET /v3/{project_id}/instances/{instance_id}/sessions	nosql:session:list	√	√
关闭实例所有节点会话	DELETE /v3/{project_id}/instances/{instance_id}/sessions	nosql:session:delete	√	√

表3 备份与恢复
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询自动备份策略	GET /v3.1/{project_id}/instances/{instance_id}/backups/policy	nosql:backup:list	√	√
设置自动备份策略	PUT /v3/{project_id}/instances/{instance_id}/backups/policy	nosql:instance:modifyBackupPolicy	√	√
查询可恢复的实例列表	GET /v3/{project_id}/backups/{backup_id}/restorable-instances	nosql:instance:list	√	√
查询实例可恢复的时间段	GET /v3/{project_id}/instances/{instance_id}/backups/restorable-time-periods	nosql:backup:list	√	√
创建手动备份	POST /v3/{project_id}/instances/{instance_id}/backups	nosql:backup:create	√	√
删除手动备份	DELETE /v3/{project_id}/backups/{backup_id}	nosql:backup:delete	√	√
恢复到已有实例	POST /v3/{project_id}/instances/{instance_id}/recovery	nosql:backup:refreshInstanceFromBacku	√	√
恢复当前Redis实例到指定时间点	PUT /v3/{project_id}/redis/instances/{instance_id}/pitr	nosql:instance:redisPitrRestore	√	√
设置Redis恢复到指定时间点策略	PUT /v3/{project_id}/redis/instances/{instance_id}/pitr/policy	nosql:instance:setRedisPitrPolicy	√	√
查询Redis恢复到指定时间点策略	GET /v3/{project_id}/redis/instances/{instance_id}/pitr/policy	nosql:instance:showRedisPitrPolicy	√	√
查询Redis可恢复时间点	GET /v3/{project_id}/redis/instances/{instance_id}/pitr/restorable-time-periods	nosql:instance:queryRedisPitrRestoreTime	√	√
查询Redis实例指定时间点恢复所占用的存储空间	GET /v3/{project_id}/redis/instances/{instance_id}/pitr	nosql:instance:showRedisPitrInfo	√	√
停止备份	PUT /v3/{project_id}/backups/{backup_id}	nosql:backup:stop	√	√
批量删除手动备份	DELETE /v3/{project_id}/instances/backups	nosql:backup:delete	√	√

表4 参数模板管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
获取参数模板列表	GET /v3/{project_id}/configurations	nosql:param:list	√	√
创建参数模板	POST /v3/{project_id}/configurations	nosql:param:create	√	√
修改参数模板的参数	PUT /v3/{project_id}/configurations/{config_id}	nosql:param:modify	√	√
应用参数模板	PUT /v3.1/{project_id}/configurations/{config_id}/apply	nosql:instance:modifyParameter	√	√
修改指定实例的参数	PUT /v3.1/{project_id}/instances/{instance_id}/configurations	nosql:instance:modifyParameter	√	√
获取指定实例的参数	GET /v3/{project_id}/instances/{instance_id}/configurations	nosql:param:list	√	√
获取指定参数模板的参数	GET /v3/{project_id}/configurations/{config_id}	nosql:param:list	√	√
删除参数模板	DELETE /v3/{project_id}/configurations/{config_id}	nosql:param:delete	√	√
查询参数模板可应用的实例列表	GET /v3/{project_id}/configurations/{config_id}/applicable-instances	nosql:instance:list	√	√
查询实例参数的修改历史	GET /v3/{project_id}/instances/{instance_id}/configuration-histories	nosql:param:list	√	√
查询参数模板应用历史	GET /v3/{project_id}/configurations/{config_id}/applied-histories	nosql:param:list	√	√

表5 标签管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询资源实例	POST /v3/{project_id}/instances/resource_instances/action	nosql:instance:list nosql:tag:list	√	√
批量添加或删除资源标签	POST /v3/{project_id}/instances/{instance_id}/tags/action	nosql:instance:tag	√	√
查询资源标签	GET /v3/{project_id}/instances/{instance_id}/tags	nosql:instance:list nosql:tag:list	√	√

表6 日志管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询数据库慢日志	GET /v3/{project_id}/instances/{instance_id}/slowlog?start_date={start_date}&end_date={end_date}	nosql:instance:list	√	√

表7 配额管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询配额	GET /v3/{project_id}/quotas	nosql:instance:list	√	√

表8 容灾管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询实例可搭建双活关系的Region	GET /v3/{project_id}/instances/{instance_id}/disaster-recovery/regions	nosql:instance:list	√	√
设置实例容灾切换的故障节点比例	PUT /v3/{project_id}/instances/disaster-recovery/settings	nosql:dr:setDisasterRecoverySettings	√	√
查询实例容灾切换的故障节点比例	GET /v3/{project_id}/instances/disaster-recovery/settings	nosql:dr:listDisasterRecoverySettings	√	√

表9 任务管理
权限	对应API接口	授权项(Action)	IAM项目(Project)	企业项目(Enterprise Project)
查询实例可维护时间段	GET /v3/{project_id}/instances/{instance_id}/ops-window	nosql:instance:maintenanceWindow	√	√
取消定时任务	DELETE /v3/{project_id}/scheduled-jobs/{job_id}	nosql:instance:cancleScheduleJob	√	√
查询定时任务列表	GET /v3/{projectId}/scheduled-jobs	nosql:task:list	√	√