diff --git a/.changelog/3310.txt b/.changelog/3310.txt
new file mode 100644
index 0000000000..8d1d917a88
--- /dev/null
+++ b/.changelog/3310.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/tencentcloud_teo_l7_acc_rule: Change the field `private_access` type to `string`.
+```
\ No newline at end of file
diff --git a/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule_extension.go b/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule_extension.go
index ff3a5d12a7..b6be4c9c84 100644
--- a/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule_extension.go
+++ b/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule_extension.go
@@ -847,7 +847,7 @@ func TencentTeoL7RuleBranchBasicInfo(depth int) map[string]*schema.Schema {
 									Description: "Ports for https origin-pull requests. value range: 1-65535. this parameter takes effect only when the origin-pull protocol originprotocol is https or follow.",
 								},
 								"private_access": {
-									Type:        schema.TypeInt,
+									Type:        schema.TypeString,
 									Optional:    true,
 									Description: "Whether access to the private object storage origin server is allowed. this parameter is valid only when the origin server type origintype is COS or awss3. valid values: on: enable private authentication; off: disable private authentication. if not specified, the default value is off.",
 								},
diff --git a/website/docs/r/teo_l7_acc_rule.html.markdown b/website/docs/r/teo_l7_acc_rule.html.markdown
index 09b6d2a9e9..bbcd8a687d 100644
--- a/website/docs/r/teo_l7_acc_rule.html.markdown
+++ b/website/docs/r/teo_l7_acc_rule.html.markdown
@@ -572,7 +572,7 @@ The `modify_origin_parameters` object of `actions` supports the following:
 * `origin_protocol` - (Optional, String) Origin-Pull protocol configuration. this parameter is required when origintype is ipdomain, origingroup, or loadbalance. valid values are: Http: use http protocol; Https: use https protocol; Follow: follow the protocol.
 * `origin_type` - (Optional, String) The origin type. values: IPDomain: ipv4, ipv6, or domain name type origin server; OriginGroup: origin server group type origin server; LoadBalance: cloud load balancer (clb), this feature is in beta test. to use it, please submit a ticket or contact smart customer service; COS: tencent cloud COS origin server; AWSS3: all object storage origin servers that support the aws s3 protocol.
 * `origin` - (Optional, String) Origin server address, which varies according to the value of origintype: When origintype = ipdomain, fill in an ipv4 address, an ipv6 address, or a domain name; When origintype = cos, please fill in the access domain name of the cos bucket; When origintype = awss3, fill in the access domain name of the s3 bucket; When origintype = origingroup, fill in the origin server group id; When origintype = loadbalance, fill in the cloud load balancer instance id. this feature is currently only available to the allowlist.
-* `private_access` - (Optional, Int) Whether access to the private object storage origin server is allowed. this parameter is valid only when the origin server type origintype is COS or awss3. valid values: on: enable private authentication; off: disable private authentication. if not specified, the default value is off.
+* `private_access` - (Optional, String) Whether access to the private object storage origin server is allowed. this parameter is valid only when the origin server type origintype is COS or awss3. valid values: on: enable private authentication; off: disable private authentication. if not specified, the default value is off.
 * `private_parameters` - (Optional, List) Private authentication parameter. this parameter is valid only when origintype = awss3 and privateaccess = on.
 
 The `modify_request_header_parameters` object of `actions` supports the following: