Tables in the Policies Module

This chapter describes the tables that make up the Oracle Identity Analytics Policies module.

POLICIES Table

Structure

POLICIES PK PK POLICYKEY NAMESPACEKEY POLICYNAME POLICYCOMMENTS CREATEUSER UPDATEUSER CREATEDATE UPDATEDATE SERVICEDESKTICKETNUMBER TEMPLATE RISK_LEVEL CURRENT_VERSION_ID VERSION_COUNT STATUS_ID LAST_SYNCHRONIZED

Indexes

Index PK Unique Keys PK_POLICIES      ✓ Yes POLICYKEY, NAMESPACEKEY

Description

Each role is assigned one or more policies. The POLICES table contains information about these policies, which are identified by a unique POLICYKEY and a POLICYNAME. Each policy is associated with its resource type from the NAMESPACES table using the NAMESPACEKEY as a reference. For auditing purposes CREATEUSER, UPDATEUSER, CREATEDATE, and UPDATEDATE data is populated on every policy in this table.

Primary Keys

PK_POLICIES - composite primary key on columns POLICYKEY and NAMESPACEKEY

Foreign Keys

None

Indexes

None

POLICY_ATTR_HIER_NODES Table

Structure

POLICY_ATTR_HIER_NODES PK ID ROOT_ID PARENT_ID ATTRIBUTE_VALUE_ID LFT RGT UPDATE_DATE

Index

Index PK Unique Keys PK_POLICY_ATTR_HIER_NODES      ✓ Yes ID IX_POL_ATTR_HIER_AVID No ATTRIBUTE_VALUE_ID IX_POL_ATTR_HIER_RID No ROOT_ID IX_POL_ATTR_HIER_PID No PARENT_ID

Description

The POLICY_ATTR_HIER_NODES table maintains policy attribute hierarchy information. It has a unique ID, a ROOT_ID, and a PARENT_ID representing the root nodes and parent nodes respectively in the hierarchy. The ATTRIBUTE_VALUE_ID is a reference key to the ATTRIBUTE_VALUES table that contains the actual values of the attributes. UPDATE_DATE stores information in case of a modification to the account. Fields LFT and RGT are used to maintain hierarchy information as well.

Primary Key

PK_ID- primary key on column ID

Foreign Key

None

Indexes

None

POLICY_VERSIONS Table

Structure

POLICY_VERSIONS PK PK PK PK ID VERSION_NUMBER POLICY_ID NAMESPACEKEY STATUS_ID POLICYNAME POLICYCOMMENTS CREATEUSER UPDATEUSER CREATEDATE UPDATEDATE SERVICEDESKTICKETNUMBER TEMPLATE RISK_LEVEL WORKFLOW_ID VERSION_STATUS_ID BASE_VERSION_ID VERSION_COUNT LAST_APPROVER LAST_APPROVAL_DATE LAST_APPROVER_COMMENTS LAST_SYNCHRONIZED

Indexes

Index PK Unique Keys PK_POLICY_VERSIONS      ✓ Yes ID, POLICY_ID, NAMESPACEKEY, VERSION_NUMBER

Description

Any modifications made to policies within the Oracle Identity Analytics Identity Warehouse module results in the creation of a new policy version. This policy version undergoes a Policy Approval Process. A snapshot of the existing policy is captured and saved in the POLICY_VERSIONS table prior to the initiation of the Policy Approval process.

Primary Keys

PK_POLICY_VERSIONS - composite primary key on column POLICY_ID, NAMESPACEKEY and VERSION_NUMBER

Foreign Keys

None

Indexes

None

POLICY_ATTRIBUTES Table

Structure

POLICY_ATTRIBUTES PK ID POLICY_ID PARENT_ID POLICY_ATTR_HIER_ID RISK_LEVEL REQUIRED UPDATE_DATE POLICY_VERSION_ID

Indexes

Index PK Unique Keys PK_POLICY_ATTRIBUTES_T      ✓ Yes ID IX_POLICY_ATTRIBUTES_PID No POLICY_ID IX_POLICY_ATTRIBUTES_PRID No PARENT_ID

Description

Each policy has multiple attributes defined in it. (This is similar to the relationship between accounts and attributes.) The relationship between policies and attributes is defined in the POLICY_ATTRIBUTES table. The POLICY_ATTR_HIER_ID field references the ID of the POLICY_ATTR_HIER_NODES table, which links to the ATTRIBUTE_VALUES table.

Primary Keys

PK_POLICY_ATTRIBUTES_T - primary key on column ID

Foreign Keys

None

Indexes

IX_POLICY_ATTRIBUTES_PID - non-unique index on column POLICY_ID

IX_POLICY_ATTRIBUTES_PID - non-unique index on column PARENT_ID

POLICY_EXCLUSIONPOLICIES Table

Structure

POLICY_EXCLUSIONPOLICIES PK PK PK POLICYKEY EXCLUSIONPOLICYKEY POLICY_VERSION_ID EXCLUSION COMMENTS

Indexes

Index PK Unique Keys PK_POLICY_EXCLUSIONPOLICIES      ✓ Yes POLICYKEY, POLICY_VERSION_ID, EXCLUSIONPOLICYKEY

Description

The POLICY_EXCLUSIONPOLICIES table defines the segregation of duties (SoD) between policies. Each policy defined for SoD has the policy's POLICYKEY and the corresponding SoD policy's key defined in the EXCLUSIONPOLICYKEY column.

Primary Keys

PK_POLICY_EXCLUSIONPOLICIES - composite primary key on columns POLICYKEY, POLICY_VERSION_ID and EXCLUSIONPOLICYKEY

Foreign Keys

None

Indexes

None

POLICY_OWNERS Table

Structure

POLICY_OWNERS PK ID POLICY_ID OWNER_ID OWNER_TYPE POLICY_VERSION_ID

Indexes

Index PK Unique Keys PK_POLICY_OWNERS      ✓ Yes ID

Description

This table defines the relationship between a policy that is owned by a global user or a policy in Oracle Identity Analytics. POLICY_ID refers to the policy owned in the POLICIES table, whereas OWNER_ID refers to the GLOBALUSERS table.

Primary Keys

PK_POLICY_OWNERS - primary key on column ID

Foreign Keys

None

Indexes

None