1. Packages
  2. Packages
  3. Tencentcloud Provider
  4. API Docs
  5. DlcAttachWorkGroupPolicyAttachment
Viewing docs for tencentcloud 1.83.23
published on Friday, Aug 14, 2026 by tencentcloudstack
Viewing docs for tencentcloud 1.83.23
published on Friday, Aug 14, 2026 by tencentcloudstack

    Provides a resource to create a DLC attach work group policy attachment

    NOTE: policy_id format: v1|{SubjectType}|{SubjectId}|{PolicyType}|{Mode}|{Catalog}|{Database}|{Table}|{View}|{Function}|{Column}|{DataEngine}|{Operation}

    Example Usage

    If policy_type is ENGINE

    import * as pulumi from "@pulumi/pulumi";
    import * as tencentcloud from "@pulumi/tencentcloud";
    
    const example = new tencentcloud.DlcAttachWorkGroupPolicyAttachment("example", {
        workGroupId: 21420,
        policySet: {
            policyType: "ENGINE",
            catalog: "",
            database: "",
            table: "",
            dataEngine: "test",
            operation: "USE,MONITOR,MODIFY",
            source: "WORKGROUP",
        },
    });
    
    import pulumi
    import pulumi_tencentcloud as tencentcloud
    
    example = tencentcloud.DlcAttachWorkGroupPolicyAttachment("example",
        work_group_id=21420,
        policy_set={
            "policy_type": "ENGINE",
            "catalog": "",
            "database": "",
            "table": "",
            "data_engine": "test",
            "operation": "USE,MONITOR,MODIFY",
            "source": "WORKGROUP",
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := tencentcloud.NewDlcAttachWorkGroupPolicyAttachment(ctx, "example", &tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs{
    			WorkGroupId: pulumi.Float64(21420),
    			PolicySet: &tencentcloud.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs{
    				PolicyType: pulumi.String("ENGINE"),
    				Catalog:    pulumi.String(""),
    				Database:   pulumi.String(""),
    				Table:      pulumi.String(""),
    				DataEngine: pulumi.String("test"),
    				Operation:  pulumi.String("USE,MONITOR,MODIFY"),
    				Source:     pulumi.String("WORKGROUP"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Tencentcloud = Pulumi.Tencentcloud;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Tencentcloud.DlcAttachWorkGroupPolicyAttachment("example", new()
        {
            WorkGroupId = 21420,
            PolicySet = new Tencentcloud.Inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs
            {
                PolicyType = "ENGINE",
                Catalog = "",
                Database = "",
                Table = "",
                DataEngine = "test",
                Operation = "USE,MONITOR,MODIFY",
                Source = "WORKGROUP",
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachment;
    import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs;
    import com.pulumi.tencentcloud.inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new DlcAttachWorkGroupPolicyAttachment("example", DlcAttachWorkGroupPolicyAttachmentArgs.builder()
                .workGroupId(21420.0)
                .policySet(DlcAttachWorkGroupPolicyAttachmentPolicySetArgs.builder()
                    .policyType("ENGINE")
                    .catalog("")
                    .database("")
                    .table("")
                    .dataEngine("test")
                    .operation("USE,MONITOR,MODIFY")
                    .source("WORKGROUP")
                    .build())
                .build());
    
        }
    }
    
    resources:
      example:
        type: tencentcloud:DlcAttachWorkGroupPolicyAttachment
        properties:
          workGroupId: 21420
          policySet:
            policyType: ENGINE
            catalog: ""
            database: ""
            table: ""
            dataEngine: test
            operation: USE,MONITOR,MODIFY
            source: WORKGROUP
    
    Example coming soon!
    

    If policy_type is DATABASE

    import * as pulumi from "@pulumi/pulumi";
    import * as tencentcloud from "@pulumi/tencentcloud";
    
    const example1 = new tencentcloud.DlcAttachWorkGroupPolicyAttachment("example1", {
        workGroupId: 21420,
        policySet: {
            policyType: "DATABASE",
            catalog: "DataLakeCatalog",
            database: "test_database",
            table: "",
            operation: "OWNER",
            source: "WORKGROUP",
            mode: "COMMON",
        },
    });
    
    import pulumi
    import pulumi_tencentcloud as tencentcloud
    
    example1 = tencentcloud.DlcAttachWorkGroupPolicyAttachment("example1",
        work_group_id=21420,
        policy_set={
            "policy_type": "DATABASE",
            "catalog": "DataLakeCatalog",
            "database": "test_database",
            "table": "",
            "operation": "OWNER",
            "source": "WORKGROUP",
            "mode": "COMMON",
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := tencentcloud.NewDlcAttachWorkGroupPolicyAttachment(ctx, "example1", &tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs{
    			WorkGroupId: pulumi.Float64(21420),
    			PolicySet: &tencentcloud.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs{
    				PolicyType: pulumi.String("DATABASE"),
    				Catalog:    pulumi.String("DataLakeCatalog"),
    				Database:   pulumi.String("test_database"),
    				Table:      pulumi.String(""),
    				Operation:  pulumi.String("OWNER"),
    				Source:     pulumi.String("WORKGROUP"),
    				Mode:       pulumi.String("COMMON"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Tencentcloud = Pulumi.Tencentcloud;
    
    return await Deployment.RunAsync(() => 
    {
        var example1 = new Tencentcloud.DlcAttachWorkGroupPolicyAttachment("example1", new()
        {
            WorkGroupId = 21420,
            PolicySet = new Tencentcloud.Inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs
            {
                PolicyType = "DATABASE",
                Catalog = "DataLakeCatalog",
                Database = "test_database",
                Table = "",
                Operation = "OWNER",
                Source = "WORKGROUP",
                Mode = "COMMON",
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachment;
    import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs;
    import com.pulumi.tencentcloud.inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example1 = new DlcAttachWorkGroupPolicyAttachment("example1", DlcAttachWorkGroupPolicyAttachmentArgs.builder()
                .workGroupId(21420.0)
                .policySet(DlcAttachWorkGroupPolicyAttachmentPolicySetArgs.builder()
                    .policyType("DATABASE")
                    .catalog("DataLakeCatalog")
                    .database("test_database")
                    .table("")
                    .operation("OWNER")
                    .source("WORKGROUP")
                    .mode("COMMON")
                    .build())
                .build());
    
        }
    }
    
    resources:
      example1:
        type: tencentcloud:DlcAttachWorkGroupPolicyAttachment
        properties:
          workGroupId: 21420
          policySet:
            policyType: DATABASE
            catalog: DataLakeCatalog
            database: test_database
            table: ""
            operation: OWNER
            source: WORKGROUP
            mode: COMMON
    
    Example coming soon!
    

    If policy_type is ROWFILTER

    import * as pulumi from "@pulumi/pulumi";
    import * as tencentcloud from "@pulumi/tencentcloud";
    
    const example2 = new tencentcloud.DlcAttachWorkGroupPolicyAttachment("example2", {
        workGroupId: 21420,
        policySet: {
            policyType: "ROWFILTER",
            catalog: "DataLakeCatalog",
            database: "test_database",
            table: "test_table",
            operation: "year > 2026 and country == 'US'",
            source: "WORKGROUP",
            mode: "SENIOR",
        },
    });
    
    import pulumi
    import pulumi_tencentcloud as tencentcloud
    
    example2 = tencentcloud.DlcAttachWorkGroupPolicyAttachment("example2",
        work_group_id=21420,
        policy_set={
            "policy_type": "ROWFILTER",
            "catalog": "DataLakeCatalog",
            "database": "test_database",
            "table": "test_table",
            "operation": "year > 2026 and country == 'US'",
            "source": "WORKGROUP",
            "mode": "SENIOR",
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := tencentcloud.NewDlcAttachWorkGroupPolicyAttachment(ctx, "example2", &tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs{
    			WorkGroupId: pulumi.Float64(21420),
    			PolicySet: &tencentcloud.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs{
    				PolicyType: pulumi.String("ROWFILTER"),
    				Catalog:    pulumi.String("DataLakeCatalog"),
    				Database:   pulumi.String("test_database"),
    				Table:      pulumi.String("test_table"),
    				Operation:  pulumi.String("year > 2026 and country == 'US'"),
    				Source:     pulumi.String("WORKGROUP"),
    				Mode:       pulumi.String("SENIOR"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Tencentcloud = Pulumi.Tencentcloud;
    
    return await Deployment.RunAsync(() => 
    {
        var example2 = new Tencentcloud.DlcAttachWorkGroupPolicyAttachment("example2", new()
        {
            WorkGroupId = 21420,
            PolicySet = new Tencentcloud.Inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs
            {
                PolicyType = "ROWFILTER",
                Catalog = "DataLakeCatalog",
                Database = "test_database",
                Table = "test_table",
                Operation = "year > 2026 and country == 'US'",
                Source = "WORKGROUP",
                Mode = "SENIOR",
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachment;
    import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs;
    import com.pulumi.tencentcloud.inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example2 = new DlcAttachWorkGroupPolicyAttachment("example2", DlcAttachWorkGroupPolicyAttachmentArgs.builder()
                .workGroupId(21420.0)
                .policySet(DlcAttachWorkGroupPolicyAttachmentPolicySetArgs.builder()
                    .policyType("ROWFILTER")
                    .catalog("DataLakeCatalog")
                    .database("test_database")
                    .table("test_table")
                    .operation("year > 2026 and country == 'US'")
                    .source("WORKGROUP")
                    .mode("SENIOR")
                    .build())
                .build());
    
        }
    }
    
    resources:
      example2:
        type: tencentcloud:DlcAttachWorkGroupPolicyAttachment
        properties:
          workGroupId: 21420
          policySet:
            policyType: ROWFILTER
            catalog: DataLakeCatalog
            database: test_database
            table: test_table
            operation: year > 2026 and country == 'US'
            source: WORKGROUP
            mode: SENIOR
    
    Example coming soon!
    

    Create DlcAttachWorkGroupPolicyAttachment Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DlcAttachWorkGroupPolicyAttachment(name: string, args: DlcAttachWorkGroupPolicyAttachmentArgs, opts?: CustomResourceOptions);
    @overload
    def DlcAttachWorkGroupPolicyAttachment(resource_name: str,
                                           args: DlcAttachWorkGroupPolicyAttachmentArgs,
                                           opts: Optional[ResourceOptions] = None)
    
    @overload
    def DlcAttachWorkGroupPolicyAttachment(resource_name: str,
                                           opts: Optional[ResourceOptions] = None,
                                           policy_set: Optional[DlcAttachWorkGroupPolicyAttachmentPolicySetArgs] = None,
                                           work_group_id: Optional[float] = None,
                                           dlc_attach_work_group_policy_attachment_id: Optional[str] = None)
    func NewDlcAttachWorkGroupPolicyAttachment(ctx *Context, name string, args DlcAttachWorkGroupPolicyAttachmentArgs, opts ...ResourceOption) (*DlcAttachWorkGroupPolicyAttachment, error)
    public DlcAttachWorkGroupPolicyAttachment(string name, DlcAttachWorkGroupPolicyAttachmentArgs args, CustomResourceOptions? opts = null)
    public DlcAttachWorkGroupPolicyAttachment(String name, DlcAttachWorkGroupPolicyAttachmentArgs args)
    public DlcAttachWorkGroupPolicyAttachment(String name, DlcAttachWorkGroupPolicyAttachmentArgs args, CustomResourceOptions options)
    
    type: tencentcloud:DlcAttachWorkGroupPolicyAttachment
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "tencentcloud_dlc_attach_work_group_policy_attachment" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args DlcAttachWorkGroupPolicyAttachmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DlcAttachWorkGroupPolicyAttachmentArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DlcAttachWorkGroupPolicyAttachmentArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DlcAttachWorkGroupPolicyAttachmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DlcAttachWorkGroupPolicyAttachmentArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    DlcAttachWorkGroupPolicyAttachment Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DlcAttachWorkGroupPolicyAttachment resource accepts the following input properties:

    PolicySet DlcAttachWorkGroupPolicyAttachmentPolicySet
    Collection of policies to be bound.
    WorkGroupId double
    Work group ID.
    DlcAttachWorkGroupPolicyAttachmentId string
    ID of the resource.
    PolicySet DlcAttachWorkGroupPolicyAttachmentPolicySetArgs
    Collection of policies to be bound.
    WorkGroupId float64
    Work group ID.
    DlcAttachWorkGroupPolicyAttachmentId string
    ID of the resource.
    policy_set object
    Collection of policies to be bound.
    work_group_id number
    Work group ID.
    dlc_attach_work_group_policy_attachment_id string
    ID of the resource.
    policySet DlcAttachWorkGroupPolicyAttachmentPolicySet
    Collection of policies to be bound.
    workGroupId Double
    Work group ID.
    dlcAttachWorkGroupPolicyAttachmentId String
    ID of the resource.
    policySet DlcAttachWorkGroupPolicyAttachmentPolicySet
    Collection of policies to be bound.
    workGroupId number
    Work group ID.
    dlcAttachWorkGroupPolicyAttachmentId string
    ID of the resource.
    policy_set DlcAttachWorkGroupPolicyAttachmentPolicySetArgs
    Collection of policies to be bound.
    work_group_id float
    Work group ID.
    dlc_attach_work_group_policy_attachment_id str
    ID of the resource.
    policySet Property Map
    Collection of policies to be bound.
    workGroupId Number
    Work group ID.
    dlcAttachWorkGroupPolicyAttachmentId String
    ID of the resource.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DlcAttachWorkGroupPolicyAttachment resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing DlcAttachWorkGroupPolicyAttachment Resource

    Get an existing DlcAttachWorkGroupPolicyAttachment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DlcAttachWorkGroupPolicyAttachmentState, opts?: CustomResourceOptions): DlcAttachWorkGroupPolicyAttachment
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            dlc_attach_work_group_policy_attachment_id: Optional[str] = None,
            policy_set: Optional[DlcAttachWorkGroupPolicyAttachmentPolicySetArgs] = None,
            work_group_id: Optional[float] = None) -> DlcAttachWorkGroupPolicyAttachment
    func GetDlcAttachWorkGroupPolicyAttachment(ctx *Context, name string, id IDInput, state *DlcAttachWorkGroupPolicyAttachmentState, opts ...ResourceOption) (*DlcAttachWorkGroupPolicyAttachment, error)
    public static DlcAttachWorkGroupPolicyAttachment Get(string name, Input<string> id, DlcAttachWorkGroupPolicyAttachmentState? state, CustomResourceOptions? opts = null)
    public static DlcAttachWorkGroupPolicyAttachment get(String name, Output<String> id, DlcAttachWorkGroupPolicyAttachmentState state, CustomResourceOptions options)
    resources:  _:    type: tencentcloud:DlcAttachWorkGroupPolicyAttachment    get:      id: ${id}
    import {
      to = tencentcloud_dlc_attach_work_group_policy_attachment.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    DlcAttachWorkGroupPolicyAttachmentId string
    ID of the resource.
    PolicySet DlcAttachWorkGroupPolicyAttachmentPolicySet
    Collection of policies to be bound.
    WorkGroupId double
    Work group ID.
    DlcAttachWorkGroupPolicyAttachmentId string
    ID of the resource.
    PolicySet DlcAttachWorkGroupPolicyAttachmentPolicySetArgs
    Collection of policies to be bound.
    WorkGroupId float64
    Work group ID.
    dlc_attach_work_group_policy_attachment_id string
    ID of the resource.
    policy_set object
    Collection of policies to be bound.
    work_group_id number
    Work group ID.
    dlcAttachWorkGroupPolicyAttachmentId String
    ID of the resource.
    policySet DlcAttachWorkGroupPolicyAttachmentPolicySet
    Collection of policies to be bound.
    workGroupId Double
    Work group ID.
    dlcAttachWorkGroupPolicyAttachmentId string
    ID of the resource.
    policySet DlcAttachWorkGroupPolicyAttachmentPolicySet
    Collection of policies to be bound.
    workGroupId number
    Work group ID.
    dlc_attach_work_group_policy_attachment_id str
    ID of the resource.
    policy_set DlcAttachWorkGroupPolicyAttachmentPolicySetArgs
    Collection of policies to be bound.
    work_group_id float
    Work group ID.
    dlcAttachWorkGroupPolicyAttachmentId String
    ID of the resource.
    policySet Property Map
    Collection of policies to be bound.
    workGroupId Number
    Work group ID.

    Supporting Types

    DlcAttachWorkGroupPolicyAttachmentPolicySet, DlcAttachWorkGroupPolicyAttachmentPolicySetArgs

    Catalog string
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console.
    Database string
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    Operation string
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE. Note: For table permissions, if a data source other than COSDataCatalog is specified, only the SELECT permission can be granted here.
    Table string
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    Column string
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    CreateTime string
    The permission policy creation time, which is not required as an input parameter.
    DataEngine string
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    EngineGeneration string
    The engine generation/type.
    Function string
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    Id double
    ID of the resource.
    IsAdminPolicy bool
    Whether the permission source is admin, which is not required as an input parameter.
    Mode string
    The grant mode, which is not required as an input parameter. Valid values: COMMON and SENIOR.
    Model string
    The name of the target Model. * represents all models in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model.
    Operator string
    The operator, which is not required as an input parameter.
    PolicyId string
    The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
    PolicyType string
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    ReAuth bool
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    Source string
    The permission source, which is not required when input parameters are passed in. Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    SourceId double
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    SourceName string
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    View string
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    Catalog string
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console.
    Database string
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    Operation string
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE. Note: For table permissions, if a data source other than COSDataCatalog is specified, only the SELECT permission can be granted here.
    Table string
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    Column string
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    CreateTime string
    The permission policy creation time, which is not required as an input parameter.
    DataEngine string
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    EngineGeneration string
    The engine generation/type.
    Function string
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    Id float64
    ID of the resource.
    IsAdminPolicy bool
    Whether the permission source is admin, which is not required as an input parameter.
    Mode string
    The grant mode, which is not required as an input parameter. Valid values: COMMON and SENIOR.
    Model string
    The name of the target Model. * represents all models in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model.
    Operator string
    The operator, which is not required as an input parameter.
    PolicyId string
    The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
    PolicyType string
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    ReAuth bool
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    Source string
    The permission source, which is not required when input parameters are passed in. Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    SourceId float64
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    SourceName string
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    View string
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    catalog string
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console.
    database string
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    operation string
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE. Note: For table permissions, if a data source other than COSDataCatalog is specified, only the SELECT permission can be granted here.
    table string
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    column string
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    create_time string
    The permission policy creation time, which is not required as an input parameter.
    data_engine string
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    engine_generation string
    The engine generation/type.
    function string
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    id number
    ID of the resource.
    is_admin_policy bool
    Whether the permission source is admin, which is not required as an input parameter.
    mode string
    The grant mode, which is not required as an input parameter. Valid values: COMMON and SENIOR.
    model string
    The name of the target Model. * represents all models in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model.
    operator string
    The operator, which is not required as an input parameter.
    policy_id string
    The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
    policy_type string
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    re_auth bool
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    source string
    The permission source, which is not required when input parameters are passed in. Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    source_id number
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    source_name string
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    view string
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    catalog String
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console.
    database String
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    operation String
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE. Note: For table permissions, if a data source other than COSDataCatalog is specified, only the SELECT permission can be granted here.
    table String
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    column String
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    createTime String
    The permission policy creation time, which is not required as an input parameter.
    dataEngine String
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    engineGeneration String
    The engine generation/type.
    function String
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    id Double
    ID of the resource.
    isAdminPolicy Boolean
    Whether the permission source is admin, which is not required as an input parameter.
    mode String
    The grant mode, which is not required as an input parameter. Valid values: COMMON and SENIOR.
    model String
    The name of the target Model. * represents all models in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model.
    operator String
    The operator, which is not required as an input parameter.
    policyId String
    The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
    policyType String
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    reAuth Boolean
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    source String
    The permission source, which is not required when input parameters are passed in. Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    sourceId Double
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    sourceName String
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    view String
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    catalog string
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console.
    database string
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    operation string
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE. Note: For table permissions, if a data source other than COSDataCatalog is specified, only the SELECT permission can be granted here.
    table string
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    column string
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    createTime string
    The permission policy creation time, which is not required as an input parameter.
    dataEngine string
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    engineGeneration string
    The engine generation/type.
    function string
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    id number
    ID of the resource.
    isAdminPolicy boolean
    Whether the permission source is admin, which is not required as an input parameter.
    mode string
    The grant mode, which is not required as an input parameter. Valid values: COMMON and SENIOR.
    model string
    The name of the target Model. * represents all models in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model.
    operator string
    The operator, which is not required as an input parameter.
    policyId string
    The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
    policyType string
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    reAuth boolean
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    source string
    The permission source, which is not required when input parameters are passed in. Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    sourceId number
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    sourceName string
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    view string
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    catalog str
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console.
    database str
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    operation str
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE. Note: For table permissions, if a data source other than COSDataCatalog is specified, only the SELECT permission can be granted here.
    table str
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    column str
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    create_time str
    The permission policy creation time, which is not required as an input parameter.
    data_engine str
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    engine_generation str
    The engine generation/type.
    function str
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    id float
    ID of the resource.
    is_admin_policy bool
    Whether the permission source is admin, which is not required as an input parameter.
    mode str
    The grant mode, which is not required as an input parameter. Valid values: COMMON and SENIOR.
    model str
    The name of the target Model. * represents all models in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model.
    operator str
    The operator, which is not required as an input parameter.
    policy_id str
    The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
    policy_type str
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    re_auth bool
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    source str
    The permission source, which is not required when input parameters are passed in. Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    source_id float
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    source_name str
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    view str
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
    catalog String
    The name of the target data source. To grant admin permission, it must be * (all resources at this level); to grant data source and database permissions, it must be COSDataCatalog or *; to grant table permissions, it can be a custom data source; if it is left empty, DataLakeCatalog is used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console.
    database String
    The name of the target database. * represents all databases in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any database.
    operation String
    The target permissions, which vary by permission level. Admin: ALL (default); data connection: CREATE; database: ALL, CREATE, ALTER, and DROP; table: ALL, SELECT, INSERT, ALTER, DELETE, DROP, and UPDATE. Note: For table permissions, if a data source other than COSDataCatalog is specified, only the SELECT permission can be granted here.
    table String
    The name of the target table. * represents all tables in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table.
    column String
    The name of the target column. * represents all columns. To grant admin permissions, it must be *.
    createTime String
    The permission policy creation time, which is not required as an input parameter.
    dataEngine String
    The name of the target data engine. * represents all engines. To grant admin permissions, it must be *.
    engineGeneration String
    The engine generation/type.
    function String
    The name of the target function. * represents all functions in the current catalog. To grant admin permissions, it must be *; to grant data connection permissions, it must be null; to grant other permissions, it can be any function.
    id Number
    ID of the resource.
    isAdminPolicy Boolean
    Whether the permission source is admin, which is not required as an input parameter.
    mode String
    The grant mode, which is not required as an input parameter. Valid values: COMMON and SENIOR.
    model String
    The name of the target Model. * represents all models in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model.
    operator String
    The operator, which is not required as an input parameter.
    policyId String
    The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
    policyType String
    The permission type. Valid values: ADMIN, DATASOURCE, DATABASE, TABLE, VIEW, FUNCTION, COLUMN, and ENGINE. Note: If it is left empty, ADMIN is used.
    reAuth Boolean
    Whether the grantee is allowed to further grant the permissions. Valid values: false (default) and true (the grantee can grant permissions gained here to other sub-users).
    source String
    The permission source, which is not required when input parameters are passed in. Valid values: USER (from the user) and WORKGROUP (from one or more associated work groups).
    sourceId Number
    The ID of the work group, which applies only when the value of the Source field is WORKGROUP.
    sourceName String
    The name of the work group, which applies only when the value of the Source field is WORKGROUP.
    view String
    The name of the target view. * represents all views in the current database. To grant admin permissions, it must be *; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.

    Import

    DLC attach work group policy attachment can be imported using the composite id, e.g. The composite id is WorkGroupId#PolicyId.

    $ pulumi import tencentcloud:index/dlcAttachWorkGroupPolicyAttachment:DlcAttachWorkGroupPolicyAttachment example 21420#v1|WORKGROUP|21420|DATABASE|COMMON|DataLakeCatalog|test_database||||||OWNER
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    tencentcloud tencentcloudstack/terraform-provider-tencentcloud
    License
    Notes
    This Pulumi package is based on the tencentcloud Terraform Provider.
    Viewing docs for tencentcloud 1.83.23
    published on Friday, Aug 14, 2026 by tencentcloudstack

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial