Embodiments of the present invention provide a fault diagnosis method and apparatus. A service in the fault diagnosis method relates to at least one user, and the fault diagnosis method includes: determining whether a terminal of each user allows performing fault diagnosis for the service; and performing fault diagnosis for the service if the terminal of each user allows performing fault diagnosis for the service. In the embodiments of the present invention, fault diagnosis for the user related service cannot be performed unless allowed by a user terminal or allowed by both the user terminal and a system side. Thereby, it is ensured that fault diagnosis is performed in a secure environment, which better complies with security laws and regulations.