Oracle Cloud Infrastructure Documentation

Prerequisites

Table 1-1 Permissions to View Metrics, Events and Billing

Task Cloud Persona Permissions
  • View Metrics
 AWS CloudOps 
{ "Version": "2012-10-17", "Statement": [ {  "Sid": "CloudWatchOperations", "Action": [ "cloudwatch:GetMetricData", "cloudwatch:ListMetrics" ], "Effect": "Allow", "Resource": "*" } ] }

For the managed policy granting full access to CloudWatch, see CloudWatchFullAccess.

  • View Billing
 AWS FinOps Administrator For billing and invoices:
{ "Version": "2012-10-17", "Statement": [ { "Sid": "BillingAndInvoices", "Action": [ "ce:GetCostAndUsage", "ce:GetCostForecast", "billing:GetBillingData", "billing:GetBillingDetails", "billing:GetBillingNotifications", "account:GetAccountInformation", "ce:DescribeReport", "ce:GetDimensionValues", "ce:GetTags", "ce:ListCostAllocationTags", "ce:UpdateCostAllocationTagsStatus" ], "Effect": "Allow", "Resource": "*" } ] }

For read-only policies about billing that includes payments and invoices, see AWSBillingReadOnlyAccess.

  • Events Exporter
 AWS CloudOps 
{ "Version": "2012-10-17", "Statement": [ { "Sid": "EventBridgePermissions", "Effect": "Allow", "Action": [ "events:ListPartnerEventSources", "events:ListEventSources", "events:DescribeEventSource", "events:CreateEventBus", "events:DescribeEventBus", "events:ListEventBuses", "events:AssociateWithPartnerEventSource", "events:ListRules", "events:PutRule", "events:DeleteRule", "events:DescribeRule", "events:EnableRule", "events:DisableRule", "events:ListTargetsByRule", "events:PutTargets", "events:RemoveTargets", "events:TestEventPattern", "events:PutPermission", "events:TagResource", "events:UntagResource", "events:ListTagsForResource", "events:CreateArchive", "events:DescribeArchive", "events:ListArchives", "events:DeleteArchive", "events:StartReplay", "events:StopReplay", "events:DescribeReplay", "events:ListReplays" ], "Resource": "*" }, { "Sid": "LogsPermissions", "Effect": "Allow", "Action": "logs:*", "Resource": "*" } ] }
  • For these permissions, AWS CloudWatch is used as target service in the event bus configuration.
  • To learn about managed policy for full access to Amazon EventBridge, see AmazonEventBridgeFullAccess.
View Metric OCI CloudOps 
allow group  to inspect metrics in compartment  allow group  to read metrics in compartment </code></pre></div> </td>
    </tr>
View OCI Logging OCI CloudOps 
allow group  to read log-groups in tenancy allow group  to read log-content in tenancy </code></pre></div> </td>
    </tr>
View OCI Logging Analytics OCI CloudOps 
allow group  to USE loganalytics-entity-type in tenancy </code></pre></div> </td>
    </tr>
View OCI Logging Analytics - Logan AI OCI CloudOps 
allow group  to use generative-ai-chat in compartment id  allow group  to read generative-ai-model in compartment id  allow group  to read generative-ai-endpoint in compartment id </code></pre></div> </td>
    </tr>
View OCI Alarms OCI CloudOps 
allow group  to manage alarms in tenancy allow group  to read metrics in tenancy allow group  to manage ons-topics in tenancy allow group  to use streams in tenancy</code></pre></div> </td>
    </tr>
View Dashboards OCI CloudOps 
Allow group  to manage dashboards-family in tenancy</code></pre></div> </td>
    </tr>
  </tbody>
</table>

For more information on managed policies in AWS, see the following:
- [CloudWatchFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/CloudWatchFullAccess.html)

- [AWSBillingReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSBillingReadOnlyAccess.html)

- [AmazonEventBridgeFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonEventBridgeFullAccess.html)

For more information on managed policies in OCI, see the following:
- [Monitoring](/iaas/Content/scanning/using/metrics-prereq.htm)

- [Logging](/iaas/Content/Logging/Task/managinglogs.htm#required_iam_policy)

- [Dashboard](/iaas/Content/Dashboards/Tasks/dashboards-getting-started.htm#policies)

- [Log Analytics](/iaas/log-analytics/doc/iam-policies-catalog-logging-analytics.html)