External Database Permissions

To enable SQL Performance Watch for External Databases, you must belong to a user group in your tenancy with the use permission on the External Database resource-types. When creating a policy, the aggregate resource-type for External Databases, external-database-family, can be used.

Here's an example of a policy that grants the DB-MGMT-ADMIN user group the permission to enable SQL Performance Watch for all the External Databases in the tenancy:

Allow group DB-MGMT-ADMIN to use external-database-family in tenancy

Note that if you want to register and add a connection to an External Database on the Managed databases page in Database Management, you need the manage permission on the External Database resource-types. Here's an example of a policy that grants the DB-MGMT-ADMIN user group the required permissions:

Allow group DB-MGMT-ADMIN to manage external-database-family in tenancy

In addition to the External Database permission, Management Agent permissions are required to create a connection with the External Database. Here's an example of a policy that grants the DB-MGMT-ADMIN user group the required Management Agent permissions:

Allow group DB-MGMT-ADMIN to manage management-agents in tenancy

For more information on the External Database service resource-types and permissions, see Details for External Database.

Database Management Permissions

To enable SQL Performance Watch, you must belong to a user group in your tenancy with the required permissions on the following Database Management resource-types:

• dbmgmt-work-requests: This resource-type allows a user group to monitor the work requests generated when SQL Performance Watch is being enabled.
• dbmgmt-family: This aggregate resource-type includes all individual Database Management resource-types and allows a user group to enable and use all Database Management features.

Here's an example of the policy that grants the DB-MGMT-ADMIN user group the permission to monitor the work requests generated when SQL Performance Watch is enabled:

Allow group DB-MGMT-ADMIN to read dbmgmt-work-requests in tenancy

For more information on Database Management resource-types and permissions, see Policy Details for Database Management.