1. Packages
  2. Packages
  3. Tencentcloud Provider
  4. API Docs
  5. DlcAttachUserPolicyAttachment
Viewing docs for tencentcloud 1.83.23
published on Friday, Aug 14, 2026 by tencentcloudstack
Viewing docs for tencentcloud 1.83.23
published on Friday, Aug 14, 2026 by tencentcloudstack

    Provides a resource to create a DLC attach user policy attachment

    NOTE: policy_id format: v1|{SubjectType}|{SubjectId}|{PolicyType}|{Mode}|{Catalog}|{Database}|{Table}|{View}|{Function}|{Column}|{DataEngine}|{Operation}

    Example Usage

    If policy_type is ENGINE

    import * as pulumi from "@pulumi/pulumi";
    import * as tencentcloud from "@pulumi/tencentcloud";
    
    const example = new tencentcloud.DlcAttachUserPolicyAttachment("example", {
        userId: "100010109702",
        accountType: "TencentAccount",
        policySet: {
            policyType: "ENGINE",
            dataEngine: "test_engine",
            operation: "USE,MONITOR",
            source: "USER",
        },
    });
    
    import pulumi
    import pulumi_tencentcloud as tencentcloud
    
    example = tencentcloud.DlcAttachUserPolicyAttachment("example",
        user_id="100010109702",
        account_type="TencentAccount",
        policy_set={
            "policy_type": "ENGINE",
            "data_engine": "test_engine",
            "operation": "USE,MONITOR",
            "source": "USER",
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := tencentcloud.NewDlcAttachUserPolicyAttachment(ctx, "example", &tencentcloud.DlcAttachUserPolicyAttachmentArgs{
    			UserId:      pulumi.String("100010109702"),
    			AccountType: pulumi.String("TencentAccount"),
    			PolicySet: &tencentcloud.DlcAttachUserPolicyAttachmentPolicySetArgs{
    				PolicyType: pulumi.String("ENGINE"),
    				DataEngine: pulumi.String("test_engine"),
    				Operation:  pulumi.String("USE,MONITOR"),
    				Source:     pulumi.String("USER"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Tencentcloud = Pulumi.Tencentcloud;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Tencentcloud.DlcAttachUserPolicyAttachment("example", new()
        {
            UserId = "100010109702",
            AccountType = "TencentAccount",
            PolicySet = new Tencentcloud.Inputs.DlcAttachUserPolicyAttachmentPolicySetArgs
            {
                PolicyType = "ENGINE",
                DataEngine = "test_engine",
                Operation = "USE,MONITOR",
                Source = "USER",
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachment;
    import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachmentArgs;
    import com.pulumi.tencentcloud.inputs.DlcAttachUserPolicyAttachmentPolicySetArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new DlcAttachUserPolicyAttachment("example", DlcAttachUserPolicyAttachmentArgs.builder()
                .userId("100010109702")
                .accountType("TencentAccount")
                .policySet(DlcAttachUserPolicyAttachmentPolicySetArgs.builder()
                    .policyType("ENGINE")
                    .dataEngine("test_engine")
                    .operation("USE,MONITOR")
                    .source("USER")
                    .build())
                .build());
    
        }
    }
    
    resources:
      example:
        type: tencentcloud:DlcAttachUserPolicyAttachment
        properties:
          userId: '100010109702'
          accountType: TencentAccount
          policySet:
            policyType: ENGINE
            dataEngine: test_engine
            operation: USE,MONITOR
            source: USER
    
    Example coming soon!
    

    If policy_type is DATABASE

    import * as pulumi from "@pulumi/pulumi";
    import * as tencentcloud from "@pulumi/tencentcloud";
    
    const example1 = new tencentcloud.DlcAttachUserPolicyAttachment("example1", {
        userId: "100010109702",
        accountType: "TencentAccount",
        policySet: {
            policyType: "DATABASE",
            catalog: "DataLakeCatalog",
            database: "test_database",
            mode: "COMMON",
            operation: "ASSAYER",
            source: "USER",
        },
    });
    
    import pulumi
    import pulumi_tencentcloud as tencentcloud
    
    example1 = tencentcloud.DlcAttachUserPolicyAttachment("example1",
        user_id="100010109702",
        account_type="TencentAccount",
        policy_set={
            "policy_type": "DATABASE",
            "catalog": "DataLakeCatalog",
            "database": "test_database",
            "mode": "COMMON",
            "operation": "ASSAYER",
            "source": "USER",
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := tencentcloud.NewDlcAttachUserPolicyAttachment(ctx, "example1", &tencentcloud.DlcAttachUserPolicyAttachmentArgs{
    			UserId:      pulumi.String("100010109702"),
    			AccountType: pulumi.String("TencentAccount"),
    			PolicySet: &tencentcloud.DlcAttachUserPolicyAttachmentPolicySetArgs{
    				PolicyType: pulumi.String("DATABASE"),
    				Catalog:    pulumi.String("DataLakeCatalog"),
    				Database:   pulumi.String("test_database"),
    				Mode:       pulumi.String("COMMON"),
    				Operation:  pulumi.String("ASSAYER"),
    				Source:     pulumi.String("USER"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Tencentcloud = Pulumi.Tencentcloud;
    
    return await Deployment.RunAsync(() => 
    {
        var example1 = new Tencentcloud.DlcAttachUserPolicyAttachment("example1", new()
        {
            UserId = "100010109702",
            AccountType = "TencentAccount",
            PolicySet = new Tencentcloud.Inputs.DlcAttachUserPolicyAttachmentPolicySetArgs
            {
                PolicyType = "DATABASE",
                Catalog = "DataLakeCatalog",
                Database = "test_database",
                Mode = "COMMON",
                Operation = "ASSAYER",
                Source = "USER",
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachment;
    import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachmentArgs;
    import com.pulumi.tencentcloud.inputs.DlcAttachUserPolicyAttachmentPolicySetArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example1 = new DlcAttachUserPolicyAttachment("example1", DlcAttachUserPolicyAttachmentArgs.builder()
                .userId("100010109702")
                .accountType("TencentAccount")
                .policySet(DlcAttachUserPolicyAttachmentPolicySetArgs.builder()
                    .policyType("DATABASE")
                    .catalog("DataLakeCatalog")
                    .database("test_database")
                    .mode("COMMON")
                    .operation("ASSAYER")
                    .source("USER")
                    .build())
                .build());
    
        }
    }
    
    resources:
      example1:
        type: tencentcloud:DlcAttachUserPolicyAttachment
        properties:
          userId: '100010109702'
          accountType: TencentAccount
          policySet:
            policyType: DATABASE
            catalog: DataLakeCatalog
            database: test_database
            mode: COMMON
            operation: ASSAYER
            source: USER
    
    Example coming soon!
    

    If policy_type is ROWFILTER

    import * as pulumi from "@pulumi/pulumi";
    import * as tencentcloud from "@pulumi/tencentcloud";
    
    const example2 = new tencentcloud.DlcAttachUserPolicyAttachment("example2", {
        userId: "100010109702",
        accountType: "TencentAccount",
        policySet: {
            policyType: "ROWFILTER",
            catalog: "DataLakeCatalog",
            database: "test_database",
            table: "test_table",
            mode: "SENIOR",
            operation: "year > 2026 and country == 'US'",
            source: "USER",
        },
    });
    
    import pulumi
    import pulumi_tencentcloud as tencentcloud
    
    example2 = tencentcloud.DlcAttachUserPolicyAttachment("example2",
        user_id="100010109702",
        account_type="TencentAccount",
        policy_set={
            "policy_type": "ROWFILTER",
            "catalog": "DataLakeCatalog",
            "database": "test_database",
            "table": "test_table",
            "mode": "SENIOR",
            "operation": "year > 2026 and country == 'US'",
            "source": "USER",
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := tencentcloud.NewDlcAttachUserPolicyAttachment(ctx, "example2", &tencentcloud.DlcAttachUserPolicyAttachmentArgs{
    			UserId:      pulumi.String("100010109702"),
    			AccountType: pulumi.String("TencentAccount"),
    			PolicySet: &tencentcloud.DlcAttachUserPolicyAttachmentPolicySetArgs{
    				PolicyType: pulumi.String("ROWFILTER"),
    				Catalog:    pulumi.String("DataLakeCatalog"),
    				Database:   pulumi.String("test_database"),
    				Table:      pulumi.String("test_table"),
    				Mode:       pulumi.String("SENIOR"),
    				Operation:  pulumi.String("year > 2026 and country == 'US'"),
    				Source:     pulumi.String("USER"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Tencentcloud = Pulumi.Tencentcloud;
    
    return await Deployment.RunAsync(() => 
    {
        var example2 = new Tencentcloud.DlcAttachUserPolicyAttachment("example2", new()
        {
            UserId = "100010109702",
            AccountType = "TencentAccount",
            PolicySet = new Tencentcloud.Inputs.DlcAttachUserPolicyAttachmentPolicySetArgs
            {
                PolicyType = "ROWFILTER",
                Catalog = "DataLakeCatalog",
                Database = "test_database",
                Table = "test_table",
                Mode = "SENIOR",
                Operation = "year > 2026 and country == 'US'",
                Source = "USER",
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachment;
    import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachmentArgs;
    import com.pulumi.tencentcloud.inputs.DlcAttachUserPolicyAttachmentPolicySetArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example2 = new DlcAttachUserPolicyAttachment("example2", DlcAttachUserPolicyAttachmentArgs.builder()
                .userId("100010109702")
                .accountType("TencentAccount")
                .policySet(DlcAttachUserPolicyAttachmentPolicySetArgs.builder()
                    .policyType("ROWFILTER")
                    .catalog("DataLakeCatalog")
                    .database("test_database")
                    .table("test_table")
                    .mode("SENIOR")
                    .operation("year > 2026 and country == 'US'")
                    .source("USER")
                    .build())
                .build());
    
        }
    }
    
    resources:
      example2:
        type: tencentcloud:DlcAttachUserPolicyAttachment
        properties:
          userId: '100010109702'
          accountType: TencentAccount
          policySet:
            policyType: ROWFILTER
            catalog: DataLakeCatalog
            database: test_database
            table: test_table
            mode: SENIOR
            operation: year > 2026 and country == 'US'
            source: USER
    
    Example coming soon!
    

    Create DlcAttachUserPolicyAttachment Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DlcAttachUserPolicyAttachment(name: string, args: DlcAttachUserPolicyAttachmentArgs, opts?: CustomResourceOptions);
    @overload
    def DlcAttachUserPolicyAttachment(resource_name: str,
                                      args: DlcAttachUserPolicyAttachmentArgs,
                                      opts: Optional[ResourceOptions] = None)
    
    @overload
    def DlcAttachUserPolicyAttachment(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      policy_set: Optional[DlcAttachUserPolicyAttachmentPolicySetArgs] = None,
                                      user_id: Optional[str] = None,
                                      account_type: Optional[str] = None,
                                      dlc_attach_user_policy_attachment_id: Optional[str] = None)
    func NewDlcAttachUserPolicyAttachment(ctx *Context, name string, args DlcAttachUserPolicyAttachmentArgs, opts ...ResourceOption) (*DlcAttachUserPolicyAttachment, error)
    public DlcAttachUserPolicyAttachment(string name, DlcAttachUserPolicyAttachmentArgs args, CustomResourceOptions? opts = null)
    public DlcAttachUserPolicyAttachment(String name, DlcAttachUserPolicyAttachmentArgs args)
    public DlcAttachUserPolicyAttachment(String name, DlcAttachUserPolicyAttachmentArgs args, CustomResourceOptions options)
    
    type: tencentcloud:DlcAttachUserPolicyAttachment
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "tencentcloud_dlc_attach_user_policy_attachment" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args DlcAttachUserPolicyAttachmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DlcAttachUserPolicyAttachmentArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DlcAttachUserPolicyAttachmentArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DlcAttachUserPolicyAttachmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DlcAttachUserPolicyAttachmentArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    DlcAttachUserPolicyAttachment Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DlcAttachUserPolicyAttachment resource accepts the following input properties:

    PolicySet DlcAttachUserPolicyAttachmentPolicySet
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    UserId string
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    AccountType string
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    DlcAttachUserPolicyAttachmentId string
    ID of the resource.
    PolicySet DlcAttachUserPolicyAttachmentPolicySetArgs
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    UserId string
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    AccountType string
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    DlcAttachUserPolicyAttachmentId string
    ID of the resource.
    policy_set object
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    user_id string
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    account_type string
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    dlc_attach_user_policy_attachment_id string
    ID of the resource.
    policySet DlcAttachUserPolicyAttachmentPolicySet
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    userId String
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    accountType String
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    dlcAttachUserPolicyAttachmentId String
    ID of the resource.
    policySet DlcAttachUserPolicyAttachmentPolicySet
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    userId string
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    accountType string
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    dlcAttachUserPolicyAttachmentId string
    ID of the resource.
    policy_set DlcAttachUserPolicyAttachmentPolicySetArgs
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    user_id str
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    account_type str
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    dlc_attach_user_policy_attachment_id str
    ID of the resource.
    policySet Property Map
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    userId String
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    accountType String
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    dlcAttachUserPolicyAttachmentId String
    ID of the resource.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DlcAttachUserPolicyAttachment resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing DlcAttachUserPolicyAttachment Resource

    Get an existing DlcAttachUserPolicyAttachment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DlcAttachUserPolicyAttachmentState, opts?: CustomResourceOptions): DlcAttachUserPolicyAttachment
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            account_type: Optional[str] = None,
            dlc_attach_user_policy_attachment_id: Optional[str] = None,
            policy_set: Optional[DlcAttachUserPolicyAttachmentPolicySetArgs] = None,
            user_id: Optional[str] = None) -> DlcAttachUserPolicyAttachment
    func GetDlcAttachUserPolicyAttachment(ctx *Context, name string, id IDInput, state *DlcAttachUserPolicyAttachmentState, opts ...ResourceOption) (*DlcAttachUserPolicyAttachment, error)
    public static DlcAttachUserPolicyAttachment Get(string name, Input<string> id, DlcAttachUserPolicyAttachmentState? state, CustomResourceOptions? opts = null)
    public static DlcAttachUserPolicyAttachment get(String name, Output<String> id, DlcAttachUserPolicyAttachmentState state, CustomResourceOptions options)
    resources:  _:    type: tencentcloud:DlcAttachUserPolicyAttachment    get:      id: ${id}
    import {
      to = tencentcloud_dlc_attach_user_policy_attachment.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountType string
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    DlcAttachUserPolicyAttachmentId string
    ID of the resource.
    PolicySet DlcAttachUserPolicyAttachmentPolicySet
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    UserId string
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    AccountType string
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    DlcAttachUserPolicyAttachmentId string
    ID of the resource.
    PolicySet DlcAttachUserPolicyAttachmentPolicySetArgs
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    UserId string
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    account_type string
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    dlc_attach_user_policy_attachment_id string
    ID of the resource.
    policy_set object
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    user_id string
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    accountType String
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    dlcAttachUserPolicyAttachmentId String
    ID of the resource.
    policySet DlcAttachUserPolicyAttachmentPolicySet
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    userId String
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    accountType string
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    dlcAttachUserPolicyAttachmentId string
    ID of the resource.
    policySet DlcAttachUserPolicyAttachmentPolicySet
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    userId string
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    account_type str
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    dlc_attach_user_policy_attachment_id str
    ID of the resource.
    policy_set DlcAttachUserPolicyAttachmentPolicySetArgs
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    user_id str
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
    accountType String
    User source type. Valid values: TencentAccount (common Tencent Cloud user) and EntraAccount (Microsoft user).
    dlcAttachUserPolicyAttachmentId String
    ID of the resource.
    policySet Property Map
    Collection of authentication policies. Only one policy is allowed to be attached per resource.
    userId String
    User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.

    Supporting Types

    DlcAttachUserPolicyAttachmentPolicySet, DlcAttachUserPolicyAttachmentPolicySetArgs

    Catalog string
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used.
    Column string
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    CreateTime string
    The permission policy creation time, which is not required as an input parameter.
    DataEngine string
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    Database string
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    EngineGeneration string
    Engine type.
    Function string
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    Id double
    ID of the resource.
    IsAdminPolicy bool
    Whether the permission source is admin.
    Mode string
    The grant mode, Valid values: COMMON and SENIOR.
    Model string
    The name of the target Model. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    Operation string
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE.
    Operator string
    The operator, which is not required as an input parameter.
    PolicyId string
    The deterministic string PolicyId corresponding to the user and workgroup.
    PolicyType string
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    ReAuth bool
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    Source string
    The permission source, Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    SourceId double
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    SourceName string
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    Table string
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    View string
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    Catalog string
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used.
    Column string
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    CreateTime string
    The permission policy creation time, which is not required as an input parameter.
    DataEngine string
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    Database string
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    EngineGeneration string
    Engine type.
    Function string
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    Id float64
    ID of the resource.
    IsAdminPolicy bool
    Whether the permission source is admin.
    Mode string
    The grant mode, Valid values: COMMON and SENIOR.
    Model string
    The name of the target Model. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    Operation string
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE.
    Operator string
    The operator, which is not required as an input parameter.
    PolicyId string
    The deterministic string PolicyId corresponding to the user and workgroup.
    PolicyType string
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    ReAuth bool
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    Source string
    The permission source, Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    SourceId float64
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    SourceName string
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    Table string
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    View string
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    catalog string
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used.
    column string
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    create_time string
    The permission policy creation time, which is not required as an input parameter.
    data_engine string
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    database string
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    engine_generation string
    Engine type.
    function string
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    id number
    ID of the resource.
    is_admin_policy bool
    Whether the permission source is admin.
    mode string
    The grant mode, Valid values: COMMON and SENIOR.
    model string
    The name of the target Model. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    operation string
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE.
    operator string
    The operator, which is not required as an input parameter.
    policy_id string
    The deterministic string PolicyId corresponding to the user and workgroup.
    policy_type string
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    re_auth bool
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    source string
    The permission source, Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    source_id number
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    source_name string
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    table string
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    view string
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    catalog String
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used.
    column String
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    createTime String
    The permission policy creation time, which is not required as an input parameter.
    dataEngine String
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    database String
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    engineGeneration String
    Engine type.
    function String
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    id Double
    ID of the resource.
    isAdminPolicy Boolean
    Whether the permission source is admin.
    mode String
    The grant mode, Valid values: COMMON and SENIOR.
    model String
    The name of the target Model. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    operation String
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE.
    operator String
    The operator, which is not required as an input parameter.
    policyId String
    The deterministic string PolicyId corresponding to the user and workgroup.
    policyType String
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    reAuth Boolean
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    source String
    The permission source, Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    sourceId Double
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    sourceName String
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    table String
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    view String
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    catalog string
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used.
    column string
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    createTime string
    The permission policy creation time, which is not required as an input parameter.
    dataEngine string
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    database string
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    engineGeneration string
    Engine type.
    function string
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    id number
    ID of the resource.
    isAdminPolicy boolean
    Whether the permission source is admin.
    mode string
    The grant mode, Valid values: COMMON and SENIOR.
    model string
    The name of the target Model. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    operation string
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE.
    operator string
    The operator, which is not required as an input parameter.
    policyId string
    The deterministic string PolicyId corresponding to the user and workgroup.
    policyType string
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    reAuth boolean
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    source string
    The permission source, Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    sourceId number
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    sourceName string
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    table string
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    view string
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    catalog str
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used.
    column str
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    create_time str
    The permission policy creation time, which is not required as an input parameter.
    data_engine str
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    database str
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    engine_generation str
    Engine type.
    function str
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    id float
    ID of the resource.
    is_admin_policy bool
    Whether the permission source is admin.
    mode str
    The grant mode, Valid values: COMMON and SENIOR.
    model str
    The name of the target Model. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    operation str
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE.
    operator str
    The operator, which is not required as an input parameter.
    policy_id str
    The deterministic string PolicyId corresponding to the user and workgroup.
    policy_type str
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    re_auth bool
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    source str
    The permission source, Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    source_id float
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    source_name str
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    table str
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    view str
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    catalog String
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used.
    column String
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    createTime String
    The permission policy creation time, which is not required as an input parameter.
    dataEngine String
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    database String
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    engineGeneration String
    Engine type.
    function String
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    id Number
    ID of the resource.
    isAdminPolicy Boolean
    Whether the permission source is admin.
    mode String
    The grant mode, Valid values: COMMON and SENIOR.
    model String
    The name of the target Model. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    operation String
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE.
    operator String
    The operator, which is not required as an input parameter.
    policyId String
    The deterministic string PolicyId corresponding to the user and workgroup.
    policyType String
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    reAuth Boolean
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    source String
    The permission source, Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    sourceId Number
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    sourceName String
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    table String
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    view String
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.

    Import

    DLC attach user policy attachment can be imported using the composite id (user_id#policy_id), e.g.

    $ pulumi import tencentcloud:index/dlcAttachUserPolicyAttachment:DlcAttachUserPolicyAttachment example 100010109702#v1|USER|100010109702|DATABASE|COMMON|DataLakeCatalog|test_database||||||ASSAYER
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    tencentcloud tencentcloudstack/terraform-provider-tencentcloud
    License
    Notes
    This Pulumi package is based on the tencentcloud Terraform Provider.
    Viewing docs for tencentcloud 1.83.23
    published on Friday, Aug 14, 2026 by tencentcloudstack

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial