published on Friday, Aug 14, 2026 by tencentcloudstack
published on Friday, Aug 14, 2026 by tencentcloudstack
Provides a resource to create a DLC attach user policy attachment
NOTE:
policy_idformat:v1|{SubjectType}|{SubjectId}|{PolicyType}|{Mode}|{Catalog}|{Database}|{Table}|{View}|{Function}|{Column}|{DataEngine}|{Operation}
Example Usage
If policy_type is ENGINE
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.DlcAttachUserPolicyAttachment("example", {
userId: "100010109702",
accountType: "TencentAccount",
policySet: {
policyType: "ENGINE",
dataEngine: "test_engine",
operation: "USE,MONITOR",
source: "USER",
},
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.DlcAttachUserPolicyAttachment("example",
user_id="100010109702",
account_type="TencentAccount",
policy_set={
"policy_type": "ENGINE",
"data_engine": "test_engine",
"operation": "USE,MONITOR",
"source": "USER",
})
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewDlcAttachUserPolicyAttachment(ctx, "example", &tencentcloud.DlcAttachUserPolicyAttachmentArgs{
UserId: pulumi.String("100010109702"),
AccountType: pulumi.String("TencentAccount"),
PolicySet: &tencentcloud.DlcAttachUserPolicyAttachmentPolicySetArgs{
PolicyType: pulumi.String("ENGINE"),
DataEngine: pulumi.String("test_engine"),
Operation: pulumi.String("USE,MONITOR"),
Source: pulumi.String("USER"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.DlcAttachUserPolicyAttachment("example", new()
{
UserId = "100010109702",
AccountType = "TencentAccount",
PolicySet = new Tencentcloud.Inputs.DlcAttachUserPolicyAttachmentPolicySetArgs
{
PolicyType = "ENGINE",
DataEngine = "test_engine",
Operation = "USE,MONITOR",
Source = "USER",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachment;
import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachmentArgs;
import com.pulumi.tencentcloud.inputs.DlcAttachUserPolicyAttachmentPolicySetArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new DlcAttachUserPolicyAttachment("example", DlcAttachUserPolicyAttachmentArgs.builder()
.userId("100010109702")
.accountType("TencentAccount")
.policySet(DlcAttachUserPolicyAttachmentPolicySetArgs.builder()
.policyType("ENGINE")
.dataEngine("test_engine")
.operation("USE,MONITOR")
.source("USER")
.build())
.build());
}
}
resources:
example:
type: tencentcloud:DlcAttachUserPolicyAttachment
properties:
userId: '100010109702'
accountType: TencentAccount
policySet:
policyType: ENGINE
dataEngine: test_engine
operation: USE,MONITOR
source: USER
Example coming soon!
If policy_type is DATABASE
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example1 = new tencentcloud.DlcAttachUserPolicyAttachment("example1", {
userId: "100010109702",
accountType: "TencentAccount",
policySet: {
policyType: "DATABASE",
catalog: "DataLakeCatalog",
database: "test_database",
mode: "COMMON",
operation: "ASSAYER",
source: "USER",
},
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example1 = tencentcloud.DlcAttachUserPolicyAttachment("example1",
user_id="100010109702",
account_type="TencentAccount",
policy_set={
"policy_type": "DATABASE",
"catalog": "DataLakeCatalog",
"database": "test_database",
"mode": "COMMON",
"operation": "ASSAYER",
"source": "USER",
})
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewDlcAttachUserPolicyAttachment(ctx, "example1", &tencentcloud.DlcAttachUserPolicyAttachmentArgs{
UserId: pulumi.String("100010109702"),
AccountType: pulumi.String("TencentAccount"),
PolicySet: &tencentcloud.DlcAttachUserPolicyAttachmentPolicySetArgs{
PolicyType: pulumi.String("DATABASE"),
Catalog: pulumi.String("DataLakeCatalog"),
Database: pulumi.String("test_database"),
Mode: pulumi.String("COMMON"),
Operation: pulumi.String("ASSAYER"),
Source: pulumi.String("USER"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example1 = new Tencentcloud.DlcAttachUserPolicyAttachment("example1", new()
{
UserId = "100010109702",
AccountType = "TencentAccount",
PolicySet = new Tencentcloud.Inputs.DlcAttachUserPolicyAttachmentPolicySetArgs
{
PolicyType = "DATABASE",
Catalog = "DataLakeCatalog",
Database = "test_database",
Mode = "COMMON",
Operation = "ASSAYER",
Source = "USER",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachment;
import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachmentArgs;
import com.pulumi.tencentcloud.inputs.DlcAttachUserPolicyAttachmentPolicySetArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example1 = new DlcAttachUserPolicyAttachment("example1", DlcAttachUserPolicyAttachmentArgs.builder()
.userId("100010109702")
.accountType("TencentAccount")
.policySet(DlcAttachUserPolicyAttachmentPolicySetArgs.builder()
.policyType("DATABASE")
.catalog("DataLakeCatalog")
.database("test_database")
.mode("COMMON")
.operation("ASSAYER")
.source("USER")
.build())
.build());
}
}
resources:
example1:
type: tencentcloud:DlcAttachUserPolicyAttachment
properties:
userId: '100010109702'
accountType: TencentAccount
policySet:
policyType: DATABASE
catalog: DataLakeCatalog
database: test_database
mode: COMMON
operation: ASSAYER
source: USER
Example coming soon!
If policy_type is ROWFILTER
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example2 = new tencentcloud.DlcAttachUserPolicyAttachment("example2", {
userId: "100010109702",
accountType: "TencentAccount",
policySet: {
policyType: "ROWFILTER",
catalog: "DataLakeCatalog",
database: "test_database",
table: "test_table",
mode: "SENIOR",
operation: "year > 2026 and country == 'US'",
source: "USER",
},
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example2 = tencentcloud.DlcAttachUserPolicyAttachment("example2",
user_id="100010109702",
account_type="TencentAccount",
policy_set={
"policy_type": "ROWFILTER",
"catalog": "DataLakeCatalog",
"database": "test_database",
"table": "test_table",
"mode": "SENIOR",
"operation": "year > 2026 and country == 'US'",
"source": "USER",
})
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewDlcAttachUserPolicyAttachment(ctx, "example2", &tencentcloud.DlcAttachUserPolicyAttachmentArgs{
UserId: pulumi.String("100010109702"),
AccountType: pulumi.String("TencentAccount"),
PolicySet: &tencentcloud.DlcAttachUserPolicyAttachmentPolicySetArgs{
PolicyType: pulumi.String("ROWFILTER"),
Catalog: pulumi.String("DataLakeCatalog"),
Database: pulumi.String("test_database"),
Table: pulumi.String("test_table"),
Mode: pulumi.String("SENIOR"),
Operation: pulumi.String("year > 2026 and country == 'US'"),
Source: pulumi.String("USER"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example2 = new Tencentcloud.DlcAttachUserPolicyAttachment("example2", new()
{
UserId = "100010109702",
AccountType = "TencentAccount",
PolicySet = new Tencentcloud.Inputs.DlcAttachUserPolicyAttachmentPolicySetArgs
{
PolicyType = "ROWFILTER",
Catalog = "DataLakeCatalog",
Database = "test_database",
Table = "test_table",
Mode = "SENIOR",
Operation = "year > 2026 and country == 'US'",
Source = "USER",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachment;
import com.pulumi.tencentcloud.DlcAttachUserPolicyAttachmentArgs;
import com.pulumi.tencentcloud.inputs.DlcAttachUserPolicyAttachmentPolicySetArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example2 = new DlcAttachUserPolicyAttachment("example2", DlcAttachUserPolicyAttachmentArgs.builder()
.userId("100010109702")
.accountType("TencentAccount")
.policySet(DlcAttachUserPolicyAttachmentPolicySetArgs.builder()
.policyType("ROWFILTER")
.catalog("DataLakeCatalog")
.database("test_database")
.table("test_table")
.mode("SENIOR")
.operation("year > 2026 and country == 'US'")
.source("USER")
.build())
.build());
}
}
resources:
example2:
type: tencentcloud:DlcAttachUserPolicyAttachment
properties:
userId: '100010109702'
accountType: TencentAccount
policySet:
policyType: ROWFILTER
catalog: DataLakeCatalog
database: test_database
table: test_table
mode: SENIOR
operation: year > 2026 and country == 'US'
source: USER
Example coming soon!
Create DlcAttachUserPolicyAttachment Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new DlcAttachUserPolicyAttachment(name: string, args: DlcAttachUserPolicyAttachmentArgs, opts?: CustomResourceOptions);@overload
def DlcAttachUserPolicyAttachment(resource_name: str,
args: DlcAttachUserPolicyAttachmentArgs,
opts: Optional[ResourceOptions] = None)
@overload
def DlcAttachUserPolicyAttachment(resource_name: str,
opts: Optional[ResourceOptions] = None,
policy_set: Optional[DlcAttachUserPolicyAttachmentPolicySetArgs] = None,
user_id: Optional[str] = None,
account_type: Optional[str] = None,
dlc_attach_user_policy_attachment_id: Optional[str] = None)func NewDlcAttachUserPolicyAttachment(ctx *Context, name string, args DlcAttachUserPolicyAttachmentArgs, opts ...ResourceOption) (*DlcAttachUserPolicyAttachment, error)public DlcAttachUserPolicyAttachment(string name, DlcAttachUserPolicyAttachmentArgs args, CustomResourceOptions? opts = null)
public DlcAttachUserPolicyAttachment(String name, DlcAttachUserPolicyAttachmentArgs args)
public DlcAttachUserPolicyAttachment(String name, DlcAttachUserPolicyAttachmentArgs args, CustomResourceOptions options)
type: tencentcloud:DlcAttachUserPolicyAttachment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "tencentcloud_dlc_attach_user_policy_attachment" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args DlcAttachUserPolicyAttachmentArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args DlcAttachUserPolicyAttachmentArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args DlcAttachUserPolicyAttachmentArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DlcAttachUserPolicyAttachmentArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args DlcAttachUserPolicyAttachmentArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
DlcAttachUserPolicyAttachment Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The DlcAttachUserPolicyAttachment resource accepts the following input properties:
- Policy
Set DlcAttach User Policy Attachment Policy Set - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- User
Id string - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- Account
Type string - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - Dlc
Attach stringUser Policy Attachment Id - ID of the resource.
- Policy
Set DlcAttach User Policy Attachment Policy Set Args - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- User
Id string - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- Account
Type string - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - Dlc
Attach stringUser Policy Attachment Id - ID of the resource.
- policy_
set object - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- user_
id string - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- account_
type string - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - dlc_
attach_ stringuser_ policy_ attachment_ id - ID of the resource.
- policy
Set DlcAttach User Policy Attachment Policy Set - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- user
Id String - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- account
Type String - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - dlc
Attach StringUser Policy Attachment Id - ID of the resource.
- policy
Set DlcAttach User Policy Attachment Policy Set - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- user
Id string - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- account
Type string - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - dlc
Attach stringUser Policy Attachment Id - ID of the resource.
- policy_
set DlcAttach User Policy Attachment Policy Set Args - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- user_
id str - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- account_
type str - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - dlc_
attach_ struser_ policy_ attachment_ id - ID of the resource.
- policy
Set Property Map - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- user
Id String - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- account
Type String - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - dlc
Attach StringUser Policy Attachment Id - ID of the resource.
Outputs
All input properties are implicitly available as output properties. Additionally, the DlcAttachUserPolicyAttachment resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing DlcAttachUserPolicyAttachment Resource
Get an existing DlcAttachUserPolicyAttachment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: DlcAttachUserPolicyAttachmentState, opts?: CustomResourceOptions): DlcAttachUserPolicyAttachment@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
account_type: Optional[str] = None,
dlc_attach_user_policy_attachment_id: Optional[str] = None,
policy_set: Optional[DlcAttachUserPolicyAttachmentPolicySetArgs] = None,
user_id: Optional[str] = None) -> DlcAttachUserPolicyAttachmentfunc GetDlcAttachUserPolicyAttachment(ctx *Context, name string, id IDInput, state *DlcAttachUserPolicyAttachmentState, opts ...ResourceOption) (*DlcAttachUserPolicyAttachment, error)public static DlcAttachUserPolicyAttachment Get(string name, Input<string> id, DlcAttachUserPolicyAttachmentState? state, CustomResourceOptions? opts = null)public static DlcAttachUserPolicyAttachment get(String name, Output<String> id, DlcAttachUserPolicyAttachmentState state, CustomResourceOptions options)resources: _: type: tencentcloud:DlcAttachUserPolicyAttachment get: id: ${id}import {
to = tencentcloud_dlc_attach_user_policy_attachment.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Account
Type string - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - Dlc
Attach stringUser Policy Attachment Id - ID of the resource.
- Policy
Set DlcAttach User Policy Attachment Policy Set - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- User
Id string - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- Account
Type string - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - Dlc
Attach stringUser Policy Attachment Id - ID of the resource.
- Policy
Set DlcAttach User Policy Attachment Policy Set Args - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- User
Id string - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- account_
type string - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - dlc_
attach_ stringuser_ policy_ attachment_ id - ID of the resource.
- policy_
set object - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- user_
id string - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- account
Type String - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - dlc
Attach StringUser Policy Attachment Id - ID of the resource.
- policy
Set DlcAttach User Policy Attachment Policy Set - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- user
Id String - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- account
Type string - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - dlc
Attach stringUser Policy Attachment Id - ID of the resource.
- policy
Set DlcAttach User Policy Attachment Policy Set - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- user
Id string - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- account_
type str - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - dlc_
attach_ struser_ policy_ attachment_ id - ID of the resource.
- policy_
set DlcAttach User Policy Attachment Policy Set Args - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- user_
id str - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
- account
Type String - User source type. Valid values:
TencentAccount(common Tencent Cloud user) andEntraAccount(Microsoft user). - dlc
Attach StringUser Policy Attachment Id - ID of the resource.
- policy
Set Property Map - Collection of authentication policies. Only one policy is allowed to be attached per resource.
- user
Id String - User ID, which is the same as the sub-user UIN. The CreateUser API is needed to create a user at first. The DescribeUsers API can be used for viewing.
Supporting Types
DlcAttachUserPolicyAttachmentPolicySet, DlcAttachUserPolicyAttachmentPolicySetArgs
- Catalog string
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. - Column string
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - Create
Time string - The permission policy creation time, which is not required as an input parameter.
- Data
Engine string - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - Database string
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - Engine
Generation string - Engine type.
- Function string
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - Id double
- ID of the resource.
- Is
Admin boolPolicy - Whether the permission source is admin.
- Mode string
- The grant mode, Valid values:
COMMONandSENIOR. - Model string
- The name of the target Model.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - Operation string
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. - Operator string
- The operator, which is not required as an input parameter.
- Policy
Id string - The deterministic string PolicyId corresponding to the user and workgroup.
- Policy
Type string - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - Re
Auth bool - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - Source string
- The permission source, Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - Source
Id double - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - Source
Name string - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - Table string
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - View string
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- Catalog string
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. - Column string
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - Create
Time string - The permission policy creation time, which is not required as an input parameter.
- Data
Engine string - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - Database string
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - Engine
Generation string - Engine type.
- Function string
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - Id float64
- ID of the resource.
- Is
Admin boolPolicy - Whether the permission source is admin.
- Mode string
- The grant mode, Valid values:
COMMONandSENIOR. - Model string
- The name of the target Model.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - Operation string
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. - Operator string
- The operator, which is not required as an input parameter.
- Policy
Id string - The deterministic string PolicyId corresponding to the user and workgroup.
- Policy
Type string - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - Re
Auth bool - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - Source string
- The permission source, Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - Source
Id float64 - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - Source
Name string - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - Table string
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - View string
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- catalog string
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. - column string
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - create_
time string - The permission policy creation time, which is not required as an input parameter.
- data_
engine string - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - database string
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - engine_
generation string - Engine type.
- function string
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - id number
- ID of the resource.
- is_
admin_ boolpolicy - Whether the permission source is admin.
- mode string
- The grant mode, Valid values:
COMMONandSENIOR. - model string
- The name of the target Model.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - operation string
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. - operator string
- The operator, which is not required as an input parameter.
- policy_
id string - The deterministic string PolicyId corresponding to the user and workgroup.
- policy_
type string - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - re_
auth bool - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - source string
- The permission source, Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - source_
id number - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - source_
name string - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - table string
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - view string
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- catalog String
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. - column String
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - create
Time String - The permission policy creation time, which is not required as an input parameter.
- data
Engine String - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - database String
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - engine
Generation String - Engine type.
- function String
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - id Double
- ID of the resource.
- is
Admin BooleanPolicy - Whether the permission source is admin.
- mode String
- The grant mode, Valid values:
COMMONandSENIOR. - model String
- The name of the target Model.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - operation String
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. - operator String
- The operator, which is not required as an input parameter.
- policy
Id String - The deterministic string PolicyId corresponding to the user and workgroup.
- policy
Type String - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - re
Auth Boolean - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - source String
- The permission source, Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - source
Id Double - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - source
Name String - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - table String
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - view String
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- catalog string
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. - column string
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - create
Time string - The permission policy creation time, which is not required as an input parameter.
- data
Engine string - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - database string
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - engine
Generation string - Engine type.
- function string
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - id number
- ID of the resource.
- is
Admin booleanPolicy - Whether the permission source is admin.
- mode string
- The grant mode, Valid values:
COMMONandSENIOR. - model string
- The name of the target Model.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - operation string
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. - operator string
- The operator, which is not required as an input parameter.
- policy
Id string - The deterministic string PolicyId corresponding to the user and workgroup.
- policy
Type string - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - re
Auth boolean - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - source string
- The permission source, Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - source
Id number - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - source
Name string - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - table string
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - view string
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- catalog str
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. - column str
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - create_
time str - The permission policy creation time, which is not required as an input parameter.
- data_
engine str - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - database str
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - engine_
generation str - Engine type.
- function str
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - id float
- ID of the resource.
- is_
admin_ boolpolicy - Whether the permission source is admin.
- mode str
- The grant mode, Valid values:
COMMONandSENIOR. - model str
- The name of the target Model.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - operation str
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. - operator str
- The operator, which is not required as an input parameter.
- policy_
id str - The deterministic string PolicyId corresponding to the user and workgroup.
- policy_
type str - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - re_
auth bool - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - source str
- The permission source, Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - source_
id float - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - source_
name str - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - table str
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - view str
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- catalog String
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. - column String
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - create
Time String - The permission policy creation time, which is not required as an input parameter.
- data
Engine String - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - database String
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - engine
Generation String - Engine type.
- function String
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - id Number
- ID of the resource.
- is
Admin BooleanPolicy - Whether the permission source is admin.
- mode String
- The grant mode, Valid values:
COMMONandSENIOR. - model String
- The name of the target Model.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - operation String
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. - operator String
- The operator, which is not required as an input parameter.
- policy
Id String - The deterministic string PolicyId corresponding to the user and workgroup.
- policy
Type String - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - re
Auth Boolean - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - source String
- The permission source, Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - source
Id Number - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - source
Name String - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - table String
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - view String
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
Import
DLC attach user policy attachment can be imported using the composite id (user_id#policy_id), e.g.
$ pulumi import tencentcloud:index/dlcAttachUserPolicyAttachment:DlcAttachUserPolicyAttachment example 100010109702#v1|USER|100010109702|DATABASE|COMMON|DataLakeCatalog|test_database||||||ASSAYER
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- tencentcloud tencentcloudstack/terraform-provider-tencentcloud
- License
- Notes
- This Pulumi package is based on the
tencentcloudTerraform Provider.
published on Friday, Aug 14, 2026 by tencentcloudstack