Details for Stack Monitoring

This topic covers details for writing policies to control access to the Stack Monitoring service.

Individual Resource-Types

appmgmt-monitored-instance

appmgmt-work-request

stack-monitoring-resource

stack-monitoring-resource-type

stack-monitoring-task

stack-monitoring-discovery-job

stack-monitoring-work-request

stack-monitoring-metric-extension

stack-monitoring-config

stack-monitoring-baselineable-metric

stack-monitoring-process-set

Aggregate Resource-Types

appmgmt-family

stack-monitoring-family

Comments

See the table in Permissions Required for each API Operation for details of the API operations covered by each verb, for each individual resource-type.

Supported Variables

Only the general variables are supported (see General Variables for All Requests).

Details for Verb + Resource-Type Combinations

The following tables shows the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

appmgmt-monitored-instance


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	APPMGMT_MONITORED_INSTANCE_INSPECT	`ListMonitoredInstances`	none
read	INSPECT + APPMGMT_MONITORED_INSTANCE_READ	`GetMonitoredInstance`	none
use	READ + APPMGMT_MONITORED_INSTANCE_PROCESS_PUBLISH	`PublishTopProcessesMetrics`	none
manage	USE + APPMGMT_MONITORED_INSTANCE_ACTIVATE	`ActivateMonitoringPlugin`	none

appmgmt-work-request


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	APPMGMT_WORK_REQUEST_INSPECT	`ListWorkRequests` `ListWorkRequestErrors` `ListWorkRequestLogs`	none
read	INSPECT+ APPMGMT_WORK_REQUEST_READ	`GetWorkRequest`	none

appmgmt-family


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	APPMGMT_MONITORED_INSTANCE_INSPECT APPMGMT_WORK_REQUEST_INSPECT	`ListMonitoredInstances` `ListWorkRequests` `ListWorkRequestErrors` `ListWorkRequestLogs`	none
read	INSPECT + APPMGMT_MONITORED_INSTANCE_READ APPMGMT_WORK_REQUEST_READ	`GetMonitoredInstance` `GetWorkRequest`	none
use	READ + APPMGMT_MONITORED_INSTANCE_PROCESS_PUBLISH	`PublishTopProcessesMetrics`	none
manage	USE + APPMGMT_MONITORED_INSTANCE_ACTIVATE	`ActivateMonitoringPlugin`	none

stack-monitoring-resource


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_RESOURCE_INSPECT STACK_MONITORING_RESOURCE_ASSOC_INSPECT	`SearchMonitoredResources` `SearchMonitoredResourceMembers` `SearchMonitoredResourceAssociations`	none
read	INSPECT + STACK_MONITORING_RESOURCE_READ	`GetMonitoredResource`	none
use	READ +	none	none
manage	USE + STACK_MONITORING_RESOURCE_CREATE STACK_MONITORING_RESOURCE_UPDATE STACK_MONITORING_RESOURCE_DELETE STACK_MONITORING_RESOURCE_MOVE STACK_MONITORING_RESOURCE_ASSOC_CREATE STACK_MONITORING_RESOURCE_ASSOC_DELETE	`CreateMonitoredResource` `UpdateMonitoredResource` `DeleteMonitoredResource` `ChangeMonitoredResourceCompartment` `DisableExternalDatabase` `AssociateMonitoredResources` `DisassociateMonitoredResources`	none

stack-monitoring-resource-type


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_RESOURCE_TYPE_INSPECT	`ListMonitoredResourceTypes`	none
read	INSPECT + STACK_MONITORING_RESOURCE_TYPE_READ	`GetMonitoredResourceType`	none
use	READ +	none	none
manage	USE + STACK_MONITORING_RESOURCE_TYPE_CREATE STACK_MONITORING_RESOURCE_TYPE_UPDATE STACK_MONITORING_RESOURCE_TYPE_DELETE	`CreateMonitoredResourceType` `UpdateMonitoredResourceType` `DeleteMonitoredResourceType`	none

stack-monitoring-task


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_TASK_INSPECT	`ListTasks`	none
read	INSPECT + STACK_MONITORING_TASK_READ	`GetTask`	none
use	READ +	none	none
manage	USE + STACK_MONITORING_TASK_CREATE STACK_MONITORING_TASK_UPDATE STACK_MONITORING_TASK_DELETE STACK_MONITORING_TASK_MOVE	`CreateTask` `UpdateTask` `DeleteTask` `MoveTask`	none

stack-monitoring-discovery-job


Verb	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_DISCOVERY_JOB_INSPECT	`ListDiscoveryJobs`	none
read	INSPECT + STACK_MONITORING_DISCOVERY_JOB_READ	`GetDiscoveryJob`	none
use	READ +	none	none
manage	USE + STACK_MONITORING_DISCOVERY_JOB_CREATE STACK_MONITORING_DISCOVERY_JOB_DELETE STACK_MONITORING_DISCOVERY_JOB_RESULT_SUBMI T	`CreateDiscoveryJob` `DeleteDiscoveryJob` `SubmitDiscoveryJobResult` `SubmitDiscoveryJobFailure`	none

stack-monitoring-work-request


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_WORK_REQUEST_INSPECT	`ListWorkRequests` `ListWorkRequestErrors` `ListWorkRequestLogs`	none
read	INSPECT + STACK_MONITORING_WORK_REQUEST_READ	`GetWorkRequest`	none

stack-monitoring-metric-extension


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_METRIC_EXTENSION_INSPECT	`ListMetricExtensions`	none
read	INSPECT + STACK_MONITORING_METRIC_EXTENSION_READ	`GetMetricExtension`	none
use	READ + STACK_MONITORING_METRIC_EXTENSION_ENABLE STACK_MONITORING_METRIC_EXTENSION_DISABLE	`EnableMetricExtension` `DisableMetricExtension`	none
manage	USE + STACK_MONITORING_METRIC_EXTENSION_CREATE STACK_MONITORING_METRIC_EXTENSION_UPDATE STACK_MONITORING_METRIC_EXTENSION_DELETE STACK_MONITORING_METRIC_EXTENSION_TEST STACK_MONITORING_METRIC_EXTENSION_PUBLISH STACK_MONITORING_METRIC_EXTENSION_MOVE	`CreateMetricExtension` `UpdateMetricExtension` `DeleteMetricExtension` `TestMetricExtension` `PublishMetricExtension` `ChangeMetricExtensionCompartment`	none

stack-monitoring-config


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_CONFIG_INSPECT	`ListConfigs`	none
read	INSPECT + STACK_MONITORING_CONFIG_READ	`GetConfig`	none
use	READ +	none	none
manage	USE + STACK_MONITORING_CONFIG_CREATE STACK_MONITORING_CONFIG_UPDATE STACK_MONITORING_CONFIG_DELETE STACK_MONITORING_CONFIG_MOVE	`CreateConfig` `UpdateConfig` `DeleteConfig` `ChangeConfigCompartment`	none

stack-monitoring-baselineable-metric


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_BASELINEABLE_METRIC_INSPECT	`ListBaselineableMetrics`	none
read	INSPECT + STACK_MONITORING_BASELINEABLE_METRIC_READ	`GetBaselineableMetric`	none
use	READ + STACK_MONITORING_BASELINEABLE_METRIC_EVALUAT E	`EvaluateBaselineableMetric`	none
manage	USE + STACK_MONITORING_BASELINEABLE_METRIC_CREATE STACK_MONITORING_BASELINEABLE_METRIC_UPDATE STACK_MONITORING_BASELINEABLE_METRIC_DELETE	`CreateBaselineableMetric` `UpdateBaselineableMetric` `DeleteBaselineableMetric`	none

stack-monitoring-process-set


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_PROCESS_SET_INSPECT	`ListProcessSets`	none
read	INSPECT + STACK_MONITORING_PROCESS_SET_READ	`GetProcessSet`	none
use	READ +	none	none
	USE + STACK_MONITORING_PROCESS_SET_CREATE STACK_MONITORING_PROCESS_SET_UPDATE STACK_MONITORING_PROCESS_SET_DELETE STACK_MONITORING_PROCESS_SET_MOVE	`CreateProcessSet` `UpdateProcessSet` `DeleteProcessSet` `ChangeProcessSetCompartment`	none

stack-monitoring-family


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_RESOURCE_INSPECT STACK_MONITORING_RESOURCE_ASSOC_INSPECT STACK_MONITORING_RESOURCE_TYPE_INSPECT STACK_MONITORING_PROCESS_SET_INSPECT STACK_MONITORING_BASELINEABLE_METRIC_INSPECT STACK_MONITORING_CONFIG_INSPECT STACK_MONITORING_METRIC_EXTENSION_INSPECT STACK_MONITORING_WORK_REQUEST_INSPECT STACK_MONITORING_DISCOVERY_JOB_INSPECT STACK_MONITORING_TASK_INSPECT	`SearchMonitoredResources` `SearchMonitoredResourceMembers` `SearchMonitoredResourceAssociations` `ListMonitoredResourceTypes` `ListTasks` `ListDiscoveryJobs` `ListWorkRequests` `ListWorkRequestErrors` `ListWorkRequestLogs` `ListMetricExtensionsListConfigs` `ListBaselineableMetrics` `ListProcessSets`	none
read	INSPECT + STACK_MONITORING_RESOURCE_READ STACK_MONITORING_RESOURCE_TYPE_READ STACK_MONITORING_TASK_READ STACK_MONITORING_DISCOVERY_JOB_READ STACK_MONITORING_WORK_REQUEST_READ STACK_MONITORING_METRIC_EXTENSION_READ STACK_MONITORING_CONFIG_READ STACK_MONITORING_BASELINEABLE_METRIC_READ STACK_MONITORING_PROCESS_SET_READ	`GetMonitoredResource` `GetMonitoredResourceType` `GetTask` `GetDiscoveryJob` `GetWorkRequest` `GetMetricExtension` `GetConfig` `GetBaselineableMetric` `GetProcessSet`	none
use	READ + STACK_MONITORING_METRIC_EXTENSION_ENABLE STACK_MONITORING_METRIC_EXTENSION_DISABLE STACK_MONITORING_BASELINEABLE_METRIC_EVALUATE	`EnableMetricExtension` `DisableMetricExtension` `EvaluateBaselineableMetric`	none
manage	USE + STACK_MONITORING_RESOURCE_CREATE STACK_MONITORING_RESOURCE_UPDATE STACK_MONITORING_RESOURCE_DELETE STACK_MONITORING_RESOURCE_MOVE STACK_MONITORING_RESOURCE_ASSOC_CREATE STACK_MONITORING_RESOURCE_ASSOC_DELETE STACK_MONITORING_RESOURCE_TYPE_CREATE STACK_MONITORING_RESOURCE_TYPE_UPDATE STACK_MONITORING_RESOURCE_TYPE_DELETE STACK_MONITORING_TASK_CREATE STACK_MONITORING_TASK_UPDATE STACK_MONITORING_TASK_DELETE STACK_MONITORING_TASK_MOVE STACK_MONITORING_DISCOVERY_JOB_CREATE STACK_MONITORING_DISCOVERY_JOB_DELETE STACK_MONITORING_DISCOVERY_JOB_RESULT_SUBMIT STACK_MONITORING_METRIC_EXTENSION_CREATE STACK_MONITORING_METRIC_EXTENSION_UPDATE STACK_MONITORING_METRIC_EXTENSION_DELETE STACK_MONITORING_METRIC_EXTENSION_TEST STACK_MONITORING_METRIC_EXTENSION_PUBLISH STACK_MONITORING_METRIC_EXTENSION_MOVE STACK_MONITORING_CONFIG_CREATE STACK_MONITORING_CONFIG_UPDATE STACK_MONITORING_CONFIG_DELETE STACK_MONITORING_CONFIG_MOVE STACK_MONITORING_BASELINEABLE_METRIC_CREATE STACK_MONITORING_BASELINEABLE_METRIC_UPDATE STACK_MONITORING_BASELINEABLE_METRIC_DELETE STACK_MONITORING_PROCESS_SET_CREATE STACK_MONITORING_PROCESS_SET_UPDATE STACK_MONITORING_PROCESS_SET_DELETE STACK_MONITORING_PROCESS_SET_MOVE	`CreateMonitoredResource` `UpdateMonitoredResource` `DeleteMonitoredResource` `ChangeMonitoredResourceCompartment` `DisableExternalDatabase` `AssociateMonitoredResources` `DisassociateMonitoredResources` `CreateMonitoredResourceType` `UpdateMonitoredResourceType` `DeleteMonitoredResourceType` `CreateTask` `UpdateTask` `DeleteTask` `MoveTask` `CreateDiscoveryJob` `DeleteDiscoveryJob` `SubmitDiscoveryJobResult` `SubmitDiscoveryJobFailure` `CreateMetricExtension` `UpdateMetricExtension` `DeleteMetricExtension` `TestMetricExtension` `PublishMetricExtension` `ChangeMetricExtensionCompartment` `CreateConfig` `UpdateConfig` `DeleteConfig` `ChangeConfigCompartment` `CreateBaselineableMetric` `UpdateBaselineableMetric` `DeleteBaselineableMetric` `CreateProcessSet` `UpdateProcessSet` `DeleteProcessSet` `ChangeProcessSetCompartment`	none

Permissions Required for each API Operation

The following tables list the API operations in alphabetical order. For information about permissions, see Permissions.

Appmgmt (Control Plane)


API Operation	Permissions Required to Use the Operation
`ListMonitoredInstances`	APPMGMT_MONITORED_INSTANCE_INSPECT
`GetMonitoredInstance`	APPMGMT_MONITORED_INSTANCE_READ
`ActivateMonitoringPlugin`	APPMGMT_MONITORED_INSTANCE_ACTIVATE
`PublishTopProcessesMetrics`	APPMGMT_MONITORED_INSTANCE_PROCESS_PUBLISH
`ListWorkRequests`	APPMGMT_WORK_REQUEST_INSPECT
`GetWorkRequest`	APPMGMT_WORK_REQUEST_READ
`ListWorkRequestErrors`	APPMGMT_WORK_REQUEST_READ
`ListWorkRequestLogs`	APPMGMT_WORK_REQUEST_READ

Stack Monitoring (Data Plane)


API Operation	PermissionsRequired to Use the Operation
`CreateMonitoredResourceType`	STACK_MONITORING_RESOURCE_TYPE_CREATE
`GetMonitoredResourceType`	STACK_MONITORING_RESOURCE_TYPE_READ
`UpdateMonitoredResourceType`	STACK_MONITORING_RESOURCE_TYPE_UPDATE
`DeleteMonitoredResourceType`	STACK_MONITORING_RESOURCE_TYPE_DELETE
`ListMonitoredResourceTypes`	STACK_MONITORING_RESOURCE_TYPE_INSPECT
`CreateTask`	STACK_MONITORING_TASK_CREATE
`GetTask`	STACK_MONITORING_TASK_READ
`UpdateTask`	STACK_MONITORING_TASK_UPDATE
`DeleteTask`	STACK_MONITORING_TASK_DELETE
`ListTasks`	STACK_MONITORING_TASK_INSPECT
`MoveTask`	STACK_MONITORING_TASK_MOVE
`CreateMonitoredResource`	STACK_MONITORING_RESOURCE_CREATE
`GetMonitoredResource`	STACK_MONITORING_RESOURCE_READ
`UpdateMonitoredResource`	STACK_MONITORING_RESOURCE_UPDATE
`DeleteMonitoredResource`	STACK_MONITORING_RESOURCE_DELETE
`SearchMonitoredResources`	STACK_MONITORING_RESOURCE_INSPECT
`SearchMonitoredResourceMembers`	STACK_MONITORING_RESOURCE_INSPECT
`ChangeMonitoredResourceCompartment`	STACK_MONITORING_RESOURCE_MOVE
`AssociateMonitoredResources`	STACK_MONITORING_RESOURCE_ASSOC_CREATE
`DisassociateMonitoredResources`	STACK_MONITORING_RESOURCE_ASSOC_DELETE
`SearchMonitoredResourceAssociations`	STACK_MONITORING_RESOURCE_ASSOC_INSPECT
`DisableExternalDatabase`	STACK_MONITORING_RESOURCE_UPDATE
`ListDiscoveryResourceTypes`	STACK_MONITORING_DISCOVERY_RESOURCE_TYPE_INSPECT
`ListWorkRequests`	STACK_MONITORING_WORK_REQUEST_INSPECT
`GetWorkRequest`	STACK_MONITORING_WORK_REQUEST_READ
`ListWorkRequestErrors`	STACK_MONITORING_WORK_REQUEST_READ
`ListWorkRequestLogs`	STACK_MONITORING_WORK_REQUEST_READ
`CreateDiscoveryJob`	STACK_MONITORING_DISCOVERY_JOB_CREATE
`ListDiscoveryJobs`	STACK_MONITORING_DISCOVERY_JOB_INSPECT
`GetDiscoveryJob`	STACK_MONITORING_DISCOVERY_JOB_READ
`DeleteDiscoveryJob`	STACK_MONITORING_DISCOVERY_JOB_DELETE
`SubmitDiscoveryJobResult`	STACK_MONITORING_DISCOVERY_JOB_RESULT_SUBMIT
`SubmitDiscoveryJobFailure`	STACK_MONITORING_DISCOVERY_JOB_RESULT_SUBMIT
`ListMetricExtensions`	STACK_MONITORING_METRIC_EXTENSION_INSPECT
`CreateMetricExtension`	STACK_MONITORING_METRIC_EXTENSION_CREATE
`GetMetricExtension`	STACK_MONITORING_METRIC_EXTENSION_READ
`UpdateMetricExtension`	STACK_MONITORING_METRIC_EXTENSION_UPDATE
`DeleteMetricExtension`	STACK_MONITORING_METRIC_EXTENSION_DELETE
`TestMetricExtension`	STACK_MONITORING_METRIC_EXTENSION_TEST
`PublishMetricExtension`	STACK_MONITORING_METRIC_EXTENSION_PUBLISH
`EnableMetricExtension`	STACK_MONITORING_METRIC_EXTENSION_ENABLE
`DisableMetricExtension`	STACK_MONITORING_METRIC_EXTENSION_DISABLE
`ChangeMetricExtensionCompartment`	STACK_MONITORING_METRIC_EXTENSION_MOVE
`ListConfigs`	STACK_MONITORING_CONFIG_INSPECT
`CreateConfig`	STACK_MONITORING_CONFIG_CREATE
`GetConfig`	STACK_MONITORING_CONFIG_READ
`UpdateConfig`	STACK_MONITORING_CONFIG_UPDATE
`DeleteConfig`	STACK_MONITORING_CONFIG_DELETE
`ChangeConfigCompartment`	STACK_MONITORING_CONFIG_MOVE
`ListBaselineableMetrics`	STACK_MONITORING_BASELINEABLE_METRIC_INSPECT
`CreateBaselineableMetric`	STACK_MONITORING_BASELINEABLE_METRIC_CREATE
`GetBaselineableMetric`	STACK_MONITORING_BASELINEABLE_METRIC_READ
`UpdateBaselineableMetric`	STACK_MONITORING_BASELINEABLE_METRIC_UPDATE
`DeleteBaselineableMetric`	STACK_MONITORING_BASELINEABLE_METRIC_DELETE
`EvaluateBaselineableMetric`	STACK_MONITORING_BASELINEABLE_METRIC_EVALUATE
`CreateProcessSet`	STACK_MONITORING_PROCESS_SET_CREATE
`ListProcessSets`	STACK_MONITORING_PROCESS_SET_INSPECT
`GetProcessSet`	STACK_MONITORING_PROCESS_SET_READ
`DeleteProcessSet`	STACK_MONITORING_PROCESS_SET_DELETE
`UpdateProcessSet`	STACK_MONITORING_PROCESS_SET_UPDATE
`ChangeProcessSetCompartment`	STACK_MONITORING_PROCESS_SET_MOVE

Oracle Cloud Infrastructure Documentation