Prerequisites for Sharing the Select AI Agent Framework Teams

Before you share or run the Select AI Agent Framework team:

• Complete the prerequisites described in Prerequisites for Using the Select AI Agent Framework.

• Create the required agents, tasks, tools, and team definition in the owner schema.

• DBMS_CLOUD_AI_AGENT uses the privileges of the user who calls the package. Shared-team operations run with the privileges of the user who calls them. The consumer needs EXECUTE on DBMS_CLOUD_AI_AGENT and on any owner-defined PL/SQL tool functions that the shared team calls; by default, this privilege is granted only to ADMIN. You need a credential object when an external URL is accessed.
  The following example grants EXECUTE privilege on the required owner-defined PL/SQL tool functions:

  GRANT EXECUTE ON <tool_function_name> TO <consumer_user_or_role>;
  GRANT EXECUTE ON <another_tool_function_name> TO <consumer_user_or_role>;

  The following example grants EXECUTE privilege on two owner-defined PL/SQL tool functions:

  GRANT EXECUTE ON search_product_catalog TO TEAM_CONSUMER;
  GRANT EXECUTE ON format_support_summary TO TEAM_CONSUMER;

• After granting the required object privileges, the team owner grants the consumer or role permission to run the shared team by using GRANT_TEAM_ACCESS. See GRANT_TEAM_ACCESS Procedure for more information.

• GRANT_TEAM_ACCESS grants permission to run the specified team. It does not grant access to credentials, database objects, PL/SQL functions, or other resources used by the team. For example:

  BEGIN
    DBMS_CLOUD_AI_AGENT.GRANT_TEAM_ACCESS(
      team_name => 'SHARED_SUPPORT_TEAM',
      user_or_role_name => 'TEAM_CONSUMER');
  END;
  /

• When a consumer activates a shared team with SET_TEAM, grant the team owner permission to translate the consumer user’s SQL. Without this privilege, SET_TEAM fails with insufficient privileges. See SET_TEAM Function for more information.

  GRANT TRANSLATE SQL ON USER <consumer_user> TO <owner_user>;