Details for Stack Monitoring

Learn about details for writing policies to control access to the Stack Monitoring service.

Resource-Types

Aggregate Resource-Type

stack-monitoring-family

Individual Resource-Types

stack-monitoring-discovery-job
stack-monitoring-discovery-resource-type
stack-monitoring-resource
stack-monitoring-work-request

Comments

For details of the API operations covered by each verb, for each individual resource-type, see Permissions Required for Each API Operation.

Supported Variables

Only the general variables are supported (see General Variables for All Requests).

Details for Verb + Resource-Type Combinations

The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. For example, a group that can use a resource can also inspect and read that resource. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

stack-monitoring-discovery-job


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_DISCOVERY_JOB_INSPECT	`ListDiscoveryJobs`	none
read	INSPECT + STACK_MONITORING_DISCOVERY_JOB_READ STACK_MONITORING_DISCOVERY_JOB_READ	`GetDiscoveryJob` `GetDiscoveryJobActionReturnResult`	none
use	READ + no extra	no extra	none
manage	USE + STACK_MONITORING_DISCOVERY_JOB_CREATE STACK_MONITORING_DISCOVERY_JOB_DELETE	`CreateDiscoveryJob` `DeleteDiscoveryJob`	none

stack-monitoring-discovery-resource-type


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_DICSOVERY_RESOURCE_TYPE_INSPECT	`ListDiscoveryResourceTypes`	none
read	INSPECT + no extra	no extra	none
use	READ + no extra	no extra	none
manage	USE + no extra	no extra	none

stack-monitoring-resource


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_RESOURCE_INSPECT STACK_MONITORING_RESOURCE_ASSOC_INSPECT	`SearchMonitoredResources` `SearchMonitoredResourceMembers` `SearchMonitoredResourceAssociations`	none
read	INSPECT + STACK_MONITORING_RESOURCE_READ	`GetMonitoredResource`	none
use	READ + no extra	no extra	none
manage	USE + STACK_MONITORING_RESOURCE_CREATE STACK_MONITORING_RESOURCE_DELETE STACK_MONITORING_RESOURCE_MOVE STACK_MONITORING_RESOURCE_ASSOC_CREATE STACK_MONITORING_RESOURCE_ASSOC_DELETE STACK_MONITORING_RESOURCE_UPDATE STACK_MONITORING_RESOURCE_UPDATE	`CreateMonitoredResource` `DeleteMonitoredResource` `ChangeMonitoredResourceCompartment` `AssociateMonitoredResources` `DisassociateMonitoredResources` `UpdateMonitoredResource` `DisableExternalDatabase`	none

stack-monitoring-work-request


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	STACK_MONITORING_WORK_REQUEST_INSPECT	`ListWorkRequests`	none
read	INSPECT + STACK_MONITORING_WORK_REQUEST_READ STACK_MONITORING_WORK_REQUEST_READ STACK_MONITORING_WORK_REQUEST_READ	`GetWorkRequest` `ListWorkRequestErrors` `ListWorkRequestLogs`	none
use	READ + no extra	no extra	none
manage	USE + no extra	no extra	none

Permissions Required for Each API Operation

Each of the following tables list API operations in a logical order for a resource-type.

For information about permissions, see Permissions.

Permissions: stack-monitoring-discovery-job


API Operation	Permissions Required to Use the Operation
`CreateDiscoveryJob`	STACK_MONITORING_DISCOVERY_JOB_CREATE
`ListDiscoveryJobs`	STACK_MONITORING_DISCOVERY_JOB_INSPECT
`GetDiscoveryJob`	STACK_MONITORING_DISCOVERY_JOB_READ
`DeleteDiscoveryJob`	STACK_MONITORING_DISCOVERY_JOB_DELETE
`GetDiscoveryJobActionReturnResult`	STACK_MONITORING_DISCOVERY_JOB_READ

Permissions: stack-monitoring-discovery-resource-type


API Operation	Permissions Required to Use the Operation
`ListDiscoveryResourceTypes`	STACK_MONITORING_DISCOVERY_RESOURCE_TYPE_INSPECT

Permissions: stack-monitoring-resource


API Operation	Permissions Required to Use the Operation
`CreateMonitoredResource`	STACK_MONITORING_RESOURCE_CREATE
`GetMonitoredResource`	STACK_MONITORING_RESOURCE_READ
`UpdateMonitoredResource`	STACK_MONITORING_RESOURCE_UPDATE
`DeleteMonitoredResource`	STACK_MONITORING_RESOURCE_DELETE
`SearchMonitoredResources`	STACK_MONITORING_RESOURCE_INSPECT
`SearchMonitoredResourceMembers`	STACK_MONITORING_RESOURCE_INSPECT
`ChangeMonitoredResourceCompartment`	STACK_MONITORING_RESOURCE_MOVE
`AssociateMonitoredResources`	STACK_MONITORING_RESOURCE_ASSOC_CREATE
`DisassociateMonitoredResources`	STACK_MONITORING_RESOURCE_ASSOC_DELETE
`SearchMonitoredResourceAssociations`	STACK_MONITORING_RESOURCE_ASSOC_INSPECT
`DisableExternalDatabase`	STACK_MONITORING_RESOURCE_UPDATE

Permissions: stack-monitoring-work-request


API Operation	Permissions Required to Use the Operation
`ListWorkRequests`	STACK_MONITORING_WORK_REQUEST_INSPECT
`GetWorkRequest`	STACK_MONITORING_WORK_REQUEST_READ
`ListWorkRequestErrors`	STACK_MONITORING_WORK_REQUEST_READ
`ListWorkRequestLogs`	STACK_MONITORING_WORK_REQUEST_READ

Oracle Cloud Infrastructure Documentation