published on Friday, Aug 14, 2026 by tencentcloudstack
published on Friday, Aug 14, 2026 by tencentcloudstack
Provides a resource to create a DLC attach work group policy attachment
NOTE:
policy_idformat:v1|{SubjectType}|{SubjectId}|{PolicyType}|{Mode}|{Catalog}|{Database}|{Table}|{View}|{Function}|{Column}|{DataEngine}|{Operation}
Example Usage
If policy_type is ENGINE
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.DlcAttachWorkGroupPolicyAttachment("example", {
workGroupId: 21420,
policySet: {
policyType: "ENGINE",
catalog: "",
database: "",
table: "",
dataEngine: "test",
operation: "USE,MONITOR,MODIFY",
source: "WORKGROUP",
},
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.DlcAttachWorkGroupPolicyAttachment("example",
work_group_id=21420,
policy_set={
"policy_type": "ENGINE",
"catalog": "",
"database": "",
"table": "",
"data_engine": "test",
"operation": "USE,MONITOR,MODIFY",
"source": "WORKGROUP",
})
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewDlcAttachWorkGroupPolicyAttachment(ctx, "example", &tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs{
WorkGroupId: pulumi.Float64(21420),
PolicySet: &tencentcloud.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs{
PolicyType: pulumi.String("ENGINE"),
Catalog: pulumi.String(""),
Database: pulumi.String(""),
Table: pulumi.String(""),
DataEngine: pulumi.String("test"),
Operation: pulumi.String("USE,MONITOR,MODIFY"),
Source: pulumi.String("WORKGROUP"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.DlcAttachWorkGroupPolicyAttachment("example", new()
{
WorkGroupId = 21420,
PolicySet = new Tencentcloud.Inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs
{
PolicyType = "ENGINE",
Catalog = "",
Database = "",
Table = "",
DataEngine = "test",
Operation = "USE,MONITOR,MODIFY",
Source = "WORKGROUP",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachment;
import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs;
import com.pulumi.tencentcloud.inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new DlcAttachWorkGroupPolicyAttachment("example", DlcAttachWorkGroupPolicyAttachmentArgs.builder()
.workGroupId(21420.0)
.policySet(DlcAttachWorkGroupPolicyAttachmentPolicySetArgs.builder()
.policyType("ENGINE")
.catalog("")
.database("")
.table("")
.dataEngine("test")
.operation("USE,MONITOR,MODIFY")
.source("WORKGROUP")
.build())
.build());
}
}
resources:
example:
type: tencentcloud:DlcAttachWorkGroupPolicyAttachment
properties:
workGroupId: 21420
policySet:
policyType: ENGINE
catalog: ""
database: ""
table: ""
dataEngine: test
operation: USE,MONITOR,MODIFY
source: WORKGROUP
Example coming soon!
If policy_type is DATABASE
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example1 = new tencentcloud.DlcAttachWorkGroupPolicyAttachment("example1", {
workGroupId: 21420,
policySet: {
policyType: "DATABASE",
catalog: "DataLakeCatalog",
database: "test_database",
table: "",
operation: "OWNER",
source: "WORKGROUP",
mode: "COMMON",
},
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example1 = tencentcloud.DlcAttachWorkGroupPolicyAttachment("example1",
work_group_id=21420,
policy_set={
"policy_type": "DATABASE",
"catalog": "DataLakeCatalog",
"database": "test_database",
"table": "",
"operation": "OWNER",
"source": "WORKGROUP",
"mode": "COMMON",
})
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewDlcAttachWorkGroupPolicyAttachment(ctx, "example1", &tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs{
WorkGroupId: pulumi.Float64(21420),
PolicySet: &tencentcloud.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs{
PolicyType: pulumi.String("DATABASE"),
Catalog: pulumi.String("DataLakeCatalog"),
Database: pulumi.String("test_database"),
Table: pulumi.String(""),
Operation: pulumi.String("OWNER"),
Source: pulumi.String("WORKGROUP"),
Mode: pulumi.String("COMMON"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example1 = new Tencentcloud.DlcAttachWorkGroupPolicyAttachment("example1", new()
{
WorkGroupId = 21420,
PolicySet = new Tencentcloud.Inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs
{
PolicyType = "DATABASE",
Catalog = "DataLakeCatalog",
Database = "test_database",
Table = "",
Operation = "OWNER",
Source = "WORKGROUP",
Mode = "COMMON",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachment;
import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs;
import com.pulumi.tencentcloud.inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example1 = new DlcAttachWorkGroupPolicyAttachment("example1", DlcAttachWorkGroupPolicyAttachmentArgs.builder()
.workGroupId(21420.0)
.policySet(DlcAttachWorkGroupPolicyAttachmentPolicySetArgs.builder()
.policyType("DATABASE")
.catalog("DataLakeCatalog")
.database("test_database")
.table("")
.operation("OWNER")
.source("WORKGROUP")
.mode("COMMON")
.build())
.build());
}
}
resources:
example1:
type: tencentcloud:DlcAttachWorkGroupPolicyAttachment
properties:
workGroupId: 21420
policySet:
policyType: DATABASE
catalog: DataLakeCatalog
database: test_database
table: ""
operation: OWNER
source: WORKGROUP
mode: COMMON
Example coming soon!
If policy_type is ROWFILTER
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example2 = new tencentcloud.DlcAttachWorkGroupPolicyAttachment("example2", {
workGroupId: 21420,
policySet: {
policyType: "ROWFILTER",
catalog: "DataLakeCatalog",
database: "test_database",
table: "test_table",
operation: "year > 2026 and country == 'US'",
source: "WORKGROUP",
mode: "SENIOR",
},
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example2 = tencentcloud.DlcAttachWorkGroupPolicyAttachment("example2",
work_group_id=21420,
policy_set={
"policy_type": "ROWFILTER",
"catalog": "DataLakeCatalog",
"database": "test_database",
"table": "test_table",
"operation": "year > 2026 and country == 'US'",
"source": "WORKGROUP",
"mode": "SENIOR",
})
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewDlcAttachWorkGroupPolicyAttachment(ctx, "example2", &tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs{
WorkGroupId: pulumi.Float64(21420),
PolicySet: &tencentcloud.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs{
PolicyType: pulumi.String("ROWFILTER"),
Catalog: pulumi.String("DataLakeCatalog"),
Database: pulumi.String("test_database"),
Table: pulumi.String("test_table"),
Operation: pulumi.String("year > 2026 and country == 'US'"),
Source: pulumi.String("WORKGROUP"),
Mode: pulumi.String("SENIOR"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example2 = new Tencentcloud.DlcAttachWorkGroupPolicyAttachment("example2", new()
{
WorkGroupId = 21420,
PolicySet = new Tencentcloud.Inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs
{
PolicyType = "ROWFILTER",
Catalog = "DataLakeCatalog",
Database = "test_database",
Table = "test_table",
Operation = "year > 2026 and country == 'US'",
Source = "WORKGROUP",
Mode = "SENIOR",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachment;
import com.pulumi.tencentcloud.DlcAttachWorkGroupPolicyAttachmentArgs;
import com.pulumi.tencentcloud.inputs.DlcAttachWorkGroupPolicyAttachmentPolicySetArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example2 = new DlcAttachWorkGroupPolicyAttachment("example2", DlcAttachWorkGroupPolicyAttachmentArgs.builder()
.workGroupId(21420.0)
.policySet(DlcAttachWorkGroupPolicyAttachmentPolicySetArgs.builder()
.policyType("ROWFILTER")
.catalog("DataLakeCatalog")
.database("test_database")
.table("test_table")
.operation("year > 2026 and country == 'US'")
.source("WORKGROUP")
.mode("SENIOR")
.build())
.build());
}
}
resources:
example2:
type: tencentcloud:DlcAttachWorkGroupPolicyAttachment
properties:
workGroupId: 21420
policySet:
policyType: ROWFILTER
catalog: DataLakeCatalog
database: test_database
table: test_table
operation: year > 2026 and country == 'US'
source: WORKGROUP
mode: SENIOR
Example coming soon!
Create DlcAttachWorkGroupPolicyAttachment Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new DlcAttachWorkGroupPolicyAttachment(name: string, args: DlcAttachWorkGroupPolicyAttachmentArgs, opts?: CustomResourceOptions);@overload
def DlcAttachWorkGroupPolicyAttachment(resource_name: str,
args: DlcAttachWorkGroupPolicyAttachmentArgs,
opts: Optional[ResourceOptions] = None)
@overload
def DlcAttachWorkGroupPolicyAttachment(resource_name: str,
opts: Optional[ResourceOptions] = None,
policy_set: Optional[DlcAttachWorkGroupPolicyAttachmentPolicySetArgs] = None,
work_group_id: Optional[float] = None,
dlc_attach_work_group_policy_attachment_id: Optional[str] = None)func NewDlcAttachWorkGroupPolicyAttachment(ctx *Context, name string, args DlcAttachWorkGroupPolicyAttachmentArgs, opts ...ResourceOption) (*DlcAttachWorkGroupPolicyAttachment, error)public DlcAttachWorkGroupPolicyAttachment(string name, DlcAttachWorkGroupPolicyAttachmentArgs args, CustomResourceOptions? opts = null)
public DlcAttachWorkGroupPolicyAttachment(String name, DlcAttachWorkGroupPolicyAttachmentArgs args)
public DlcAttachWorkGroupPolicyAttachment(String name, DlcAttachWorkGroupPolicyAttachmentArgs args, CustomResourceOptions options)
type: tencentcloud:DlcAttachWorkGroupPolicyAttachment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "tencentcloud_dlc_attach_work_group_policy_attachment" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args DlcAttachWorkGroupPolicyAttachmentArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args DlcAttachWorkGroupPolicyAttachmentArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args DlcAttachWorkGroupPolicyAttachmentArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DlcAttachWorkGroupPolicyAttachmentArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args DlcAttachWorkGroupPolicyAttachmentArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
DlcAttachWorkGroupPolicyAttachment Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The DlcAttachWorkGroupPolicyAttachment resource accepts the following input properties:
- Policy
Set DlcAttach Work Group Policy Attachment Policy Set - Collection of policies to be bound.
- Work
Group doubleId - Work group ID.
- Dlc
Attach stringWork Group Policy Attachment Id - ID of the resource.
- Policy
Set DlcAttach Work Group Policy Attachment Policy Set Args - Collection of policies to be bound.
- Work
Group float64Id - Work group ID.
- Dlc
Attach stringWork Group Policy Attachment Id - ID of the resource.
- policy_
set object - Collection of policies to be bound.
- work_
group_ numberid - Work group ID.
- dlc_
attach_ stringwork_ group_ policy_ attachment_ id - ID of the resource.
- policy
Set DlcAttach Work Group Policy Attachment Policy Set - Collection of policies to be bound.
- work
Group DoubleId - Work group ID.
- dlc
Attach StringWork Group Policy Attachment Id - ID of the resource.
- policy
Set DlcAttach Work Group Policy Attachment Policy Set - Collection of policies to be bound.
- work
Group numberId - Work group ID.
- dlc
Attach stringWork Group Policy Attachment Id - ID of the resource.
- policy_
set DlcAttach Work Group Policy Attachment Policy Set Args - Collection of policies to be bound.
- work_
group_ floatid - Work group ID.
- dlc_
attach_ strwork_ group_ policy_ attachment_ id - ID of the resource.
- policy
Set Property Map - Collection of policies to be bound.
- work
Group NumberId - Work group ID.
- dlc
Attach StringWork Group Policy Attachment Id - ID of the resource.
Outputs
All input properties are implicitly available as output properties. Additionally, the DlcAttachWorkGroupPolicyAttachment resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing DlcAttachWorkGroupPolicyAttachment Resource
Get an existing DlcAttachWorkGroupPolicyAttachment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: DlcAttachWorkGroupPolicyAttachmentState, opts?: CustomResourceOptions): DlcAttachWorkGroupPolicyAttachment@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
dlc_attach_work_group_policy_attachment_id: Optional[str] = None,
policy_set: Optional[DlcAttachWorkGroupPolicyAttachmentPolicySetArgs] = None,
work_group_id: Optional[float] = None) -> DlcAttachWorkGroupPolicyAttachmentfunc GetDlcAttachWorkGroupPolicyAttachment(ctx *Context, name string, id IDInput, state *DlcAttachWorkGroupPolicyAttachmentState, opts ...ResourceOption) (*DlcAttachWorkGroupPolicyAttachment, error)public static DlcAttachWorkGroupPolicyAttachment Get(string name, Input<string> id, DlcAttachWorkGroupPolicyAttachmentState? state, CustomResourceOptions? opts = null)public static DlcAttachWorkGroupPolicyAttachment get(String name, Output<String> id, DlcAttachWorkGroupPolicyAttachmentState state, CustomResourceOptions options)resources: _: type: tencentcloud:DlcAttachWorkGroupPolicyAttachment get: id: ${id}import {
to = tencentcloud_dlc_attach_work_group_policy_attachment.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Dlc
Attach stringWork Group Policy Attachment Id - ID of the resource.
- Policy
Set DlcAttach Work Group Policy Attachment Policy Set - Collection of policies to be bound.
- Work
Group doubleId - Work group ID.
- Dlc
Attach stringWork Group Policy Attachment Id - ID of the resource.
- Policy
Set DlcAttach Work Group Policy Attachment Policy Set Args - Collection of policies to be bound.
- Work
Group float64Id - Work group ID.
- dlc_
attach_ stringwork_ group_ policy_ attachment_ id - ID of the resource.
- policy_
set object - Collection of policies to be bound.
- work_
group_ numberid - Work group ID.
- dlc
Attach StringWork Group Policy Attachment Id - ID of the resource.
- policy
Set DlcAttach Work Group Policy Attachment Policy Set - Collection of policies to be bound.
- work
Group DoubleId - Work group ID.
- dlc
Attach stringWork Group Policy Attachment Id - ID of the resource.
- policy
Set DlcAttach Work Group Policy Attachment Policy Set - Collection of policies to be bound.
- work
Group numberId - Work group ID.
- dlc_
attach_ strwork_ group_ policy_ attachment_ id - ID of the resource.
- policy_
set DlcAttach Work Group Policy Attachment Policy Set Args - Collection of policies to be bound.
- work_
group_ floatid - Work group ID.
- dlc
Attach StringWork Group Policy Attachment Id - ID of the resource.
- policy
Set Property Map - Collection of policies to be bound.
- work
Group NumberId - Work group ID.
Supporting Types
DlcAttachWorkGroupPolicyAttachmentPolicySet, DlcAttachWorkGroupPolicyAttachmentPolicySetArgs
- Catalog string
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console. - Database string
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - Operation string
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. Note: For table permissions, if a data source other thanCOSDataCatalogis specified, only theSELECTpermission can be granted here. - Table string
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - Column string
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - Create
Time string - The permission policy creation time, which is not required as an input parameter.
- Data
Engine string - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - Engine
Generation string - The engine generation/type.
- Function string
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - Id double
- ID of the resource.
- Is
Admin boolPolicy - Whether the permission source is admin, which is not required as an input parameter.
- Mode string
- The grant mode, which is not required as an input parameter. Valid values:
COMMONandSENIOR. - Model string
- The name of the target Model.
*represents all models in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model. - Operator string
- The operator, which is not required as an input parameter.
- Policy
Id string - The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
- Policy
Type string - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - Re
Auth bool - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - Source string
- The permission source, which is not required when input parameters are passed in. Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - Source
Id double - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - Source
Name string - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - View string
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- Catalog string
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console. - Database string
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - Operation string
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. Note: For table permissions, if a data source other thanCOSDataCatalogis specified, only theSELECTpermission can be granted here. - Table string
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - Column string
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - Create
Time string - The permission policy creation time, which is not required as an input parameter.
- Data
Engine string - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - Engine
Generation string - The engine generation/type.
- Function string
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - Id float64
- ID of the resource.
- Is
Admin boolPolicy - Whether the permission source is admin, which is not required as an input parameter.
- Mode string
- The grant mode, which is not required as an input parameter. Valid values:
COMMONandSENIOR. - Model string
- The name of the target Model.
*represents all models in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model. - Operator string
- The operator, which is not required as an input parameter.
- Policy
Id string - The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
- Policy
Type string - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - Re
Auth bool - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - Source string
- The permission source, which is not required when input parameters are passed in. Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - Source
Id float64 - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - Source
Name string - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - View string
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- catalog string
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console. - database string
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - operation string
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. Note: For table permissions, if a data source other thanCOSDataCatalogis specified, only theSELECTpermission can be granted here. - table string
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - column string
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - create_
time string - The permission policy creation time, which is not required as an input parameter.
- data_
engine string - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - engine_
generation string - The engine generation/type.
- function string
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - id number
- ID of the resource.
- is_
admin_ boolpolicy - Whether the permission source is admin, which is not required as an input parameter.
- mode string
- The grant mode, which is not required as an input parameter. Valid values:
COMMONandSENIOR. - model string
- The name of the target Model.
*represents all models in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model. - operator string
- The operator, which is not required as an input parameter.
- policy_
id string - The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
- policy_
type string - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - re_
auth bool - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - source string
- The permission source, which is not required when input parameters are passed in. Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - source_
id number - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - source_
name string - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - view string
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- catalog String
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console. - database String
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - operation String
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. Note: For table permissions, if a data source other thanCOSDataCatalogis specified, only theSELECTpermission can be granted here. - table String
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - column String
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - create
Time String - The permission policy creation time, which is not required as an input parameter.
- data
Engine String - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - engine
Generation String - The engine generation/type.
- function String
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - id Double
- ID of the resource.
- is
Admin BooleanPolicy - Whether the permission source is admin, which is not required as an input parameter.
- mode String
- The grant mode, which is not required as an input parameter. Valid values:
COMMONandSENIOR. - model String
- The name of the target Model.
*represents all models in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model. - operator String
- The operator, which is not required as an input parameter.
- policy
Id String - The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
- policy
Type String - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - re
Auth Boolean - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - source String
- The permission source, which is not required when input parameters are passed in. Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - source
Id Double - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - source
Name String - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - view String
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- catalog string
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console. - database string
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - operation string
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. Note: For table permissions, if a data source other thanCOSDataCatalogis specified, only theSELECTpermission can be granted here. - table string
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - column string
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - create
Time string - The permission policy creation time, which is not required as an input parameter.
- data
Engine string - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - engine
Generation string - The engine generation/type.
- function string
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - id number
- ID of the resource.
- is
Admin booleanPolicy - Whether the permission source is admin, which is not required as an input parameter.
- mode string
- The grant mode, which is not required as an input parameter. Valid values:
COMMONandSENIOR. - model string
- The name of the target Model.
*represents all models in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model. - operator string
- The operator, which is not required as an input parameter.
- policy
Id string - The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
- policy
Type string - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - re
Auth boolean - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - source string
- The permission source, which is not required when input parameters are passed in. Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - source
Id number - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - source
Name string - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - view string
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- catalog str
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console. - database str
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - operation str
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. Note: For table permissions, if a data source other thanCOSDataCatalogis specified, only theSELECTpermission can be granted here. - table str
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - column str
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - create_
time str - The permission policy creation time, which is not required as an input parameter.
- data_
engine str - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - engine_
generation str - The engine generation/type.
- function str
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - id float
- ID of the resource.
- is_
admin_ boolpolicy - Whether the permission source is admin, which is not required as an input parameter.
- mode str
- The grant mode, which is not required as an input parameter. Valid values:
COMMONandSENIOR. - model str
- The name of the target Model.
*represents all models in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model. - operator str
- The operator, which is not required as an input parameter.
- policy_
id str - The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
- policy_
type str - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - re_
auth bool - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - source str
- The permission source, which is not required when input parameters are passed in. Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - source_
id float - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - source_
name str - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - view str
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
- catalog String
- The name of the target data source. To grant admin permission, it must be
*(all resources at this level); to grant data source and database permissions, it must beCOSDataCatalogor*; to grant table permissions, it can be a custom data source; if it is left empty,DataLakeCatalogis used. Note: To grant permissions on a custom data source, the permissions that can be managed in the Data Lake Compute console are subsets of the account permissions granted when you connect the data source to the console. - database String
- The name of the target database.
*represents all databases in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any database. - operation String
- The target permissions, which vary by permission level. Admin:
ALL(default); data connection:CREATE; database:ALL,CREATE,ALTER, andDROP; table:ALL,SELECT,INSERT,ALTER,DELETE,DROP, andUPDATE. Note: For table permissions, if a data source other thanCOSDataCatalogis specified, only theSELECTpermission can be granted here. - table String
- The name of the target table.
*represents all tables in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any table. - column String
- The name of the target column.
*represents all columns. To grant admin permissions, it must be*. - create
Time String - The permission policy creation time, which is not required as an input parameter.
- data
Engine String - The name of the target data engine.
*represents all engines. To grant admin permissions, it must be*. - engine
Generation String - The engine generation/type.
- function String
- The name of the target function.
*represents all functions in the current catalog. To grant admin permissions, it must be*; to grant data connection permissions, it must be null; to grant other permissions, it can be any function. - id Number
- ID of the resource.
- is
Admin BooleanPolicy - Whether the permission source is admin, which is not required as an input parameter.
- mode String
- The grant mode, which is not required as an input parameter. Valid values:
COMMONandSENIOR. - model String
- The name of the target Model.
*represents all models in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any model. - operator String
- The operator, which is not required as an input parameter.
- policy
Id String - The deterministic string PolicyId corresponding to user and workgroup, which is not required as an input parameter.
- policy
Type String - The permission type. Valid values:
ADMIN,DATASOURCE,DATABASE,TABLE,VIEW,FUNCTION,COLUMN, andENGINE. Note: If it is left empty,ADMINis used. - re
Auth Boolean - Whether the grantee is allowed to further grant the permissions. Valid values:
false(default) andtrue(the grantee can grant permissions gained here to other sub-users). - source String
- The permission source, which is not required when input parameters are passed in. Valid values:
USER(from the user) andWORKGROUP(from one or more associated work groups). - source
Id Number - The ID of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - source
Name String - The name of the work group, which applies only when the value of the
Sourcefield isWORKGROUP. - view String
- The name of the target view.
*represents all views in the current database. To grant admin permissions, it must be*; to grant data connection and database permissions, it must be null; to grant other permissions, it can be any view.
Import
DLC attach work group policy attachment can be imported using the composite id, e.g. The composite id is WorkGroupId#PolicyId.
$ pulumi import tencentcloud:index/dlcAttachWorkGroupPolicyAttachment:DlcAttachWorkGroupPolicyAttachment example 21420#v1|WORKGROUP|21420|DATABASE|COMMON|DataLakeCatalog|test_database||||||OWNER
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- tencentcloud tencentcloudstack/terraform-provider-tencentcloud
- License
- Notes
- This Pulumi package is based on the
tencentcloudTerraform Provider.
published on Friday, Aug 14, 2026 by tencentcloudstack