Policy Details for Database Management

The topics in this section provide details for writing Oracle Cloud Infrastructure Identity and Access Management (IAM) policies to control access to the Database Management service.

For detailed information and examples of the policies required to work with Database Management, see:

Resource-Types

Oracle Database, External Database System and Exadata Infrastructure Resource-types

Aggregate Resource-type

dbmgmt-family

Individual Resource-types

  • dbmgmt-jobs
  • dbmgmt-managed-database-groups
  • dbmgmt-managed-databases
  • dbmgmt-private-endpoints
  • dbmgmt-work-requests
  • dbmgmt-external-dbsystem-discoveries
  • dbmgmt-external-dbsystems
  • dbmgmt-external-exadata
  • dbmgmt-named-credentials

MySQL HeatWave Resource-types

Aggregate Resource-type

dbmgmt-mysql-family

Individual Resource-type

dbmgmt-managed-mysql-databases

Comments

A policy that uses <verb> dbmgmt-family is equivalent to writing one with a separate <verb> <individual resource-type> statement for each of the individual resource-types in the family.

See the tables in Details for Verb + Resource-Type Combinations for details of the API operations covered by each verb, for each individual resource-type.

Supported Variables

Only general variables are supported. For information, see General Variables for All Requests.

Details for Verb + Resource-Type Combinations

The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

dbmgmt-jobs

Verbs Permissions APIs Fully Covered APIs Partially Covered

inspect

DBMGMT_JOB_INSPECT

ListJobs

none

read

INSPECT +

DBMGMT_JOB_READ

GetJob

ListJobRuns

GetJobRun

ListJobExecutions

GetJobExecution

SummarizeJobExecutionsStatuses

none

use

READ +

no extra

no extra

none

manage

USE +

DBMGMT_JOB_CREATE

DBMGMT_JOB_DELETE

DBMGMT_JOB_MOVE

DBMGMT_JOB_UPDATE

ChangeJobCompartment

DeleteJob

UpdateJob

CreateJob (also needs use dbmgmt-managed-database-groups or use dbmgmt-managed-databases)

ImplementOptimizerStatisticsAdvisorRecommendations (also needs use dbmgmt-managed-databases)

dbmgmt-managed-database-groups

Verbs Permissions APIs Fully Covered APIs Partially Covered

inspect

DBMGMT_MANAGED_DB_GROUP_INSPECT

ListManagedDatabaseGroups

none

read

INSPECT +

DBMGMT_MANAGED_DB_GROUP_READ

GetManagedDatabaseGroup

GetDatabaseFleetHealthMetrics (also needs read dbmgmt-managed-databases)

use

READ +

DBMGMT_MANAGED_DB_GROUP_DB_CONTENT_READ

DBMGMT_MANAGED_DB_GROUP_DB_CONTENT_WRITE

DBMGMT_MANAGED_DB_GROUP_UPDATE

UpdateManagedDatabaseGroup

CreateJob (also needs manage dbmgmt-jobs)

manage

USE +

DBMGMT_MANAGED_DB_GROUP_ADD_DATABASE

DBMGMT_MANAGED_DB_GROUP_CREATE

DBMGMT_MANAGED_DB_GROUP_DELETE

DBMGMT_MANAGED_DB_GROUP_MOVE

DBMGMT_MANAGED_DB_GROUP_REMOVE_DATABASE

ChangeManagedDatabaseGroupCompartment

CreateManagedDatabaseGroup

DeleteManagedDatabaseGroup

AddManagedDatabaseToManagedDatabaseGroup (also needs use dbmgmt-managed-databases)

RemoveManagedDatabaseFromManagedDatabaseGroup (also needs use dbmgmt-managed-databases)

dbmgmt-managed-databases

Verbs Permissions APIs Fully Covered APIs Partially Covered

inspect

DBMGMT_MANAGED_DB_INSPECT

ListManagedDatabases

none

read

INSPECT +

DBMGMT_MANAGED_DB_READ

GetAwrDbReport

GetAwrDbSqlReport

GetClusterCacheMetric

GetDatabaseFleetHealthMetrics

GetDatabaseHomeMetrics

GetManagedDatabase

GetPreferredCredential

GetPdbMetrics

GetTablespace

ListAwrDbs

ListAwrDbSnapshots

ListPreferredCredentials

ListTablespaces

SummarizeAwrDbCpuUsages

SummarizeAwrDbMetrics

SummarizeAwrDbParameterChanges

SummarizeAwrDbParameters

SummarizeAwrDbSnapshotRanges

SummarizeAwrDbSysstats

SummarizeAwrDbTopWaitEvents

SummarizeAwrDbWaitEventBuckets

SummarizeAwrDbWaitEvents

TestPreferredCredential

none

use

READ +

DBMGMT_MANAGED_DB_CONTENT_READ

DBMGMT_MANAGED_DB_CONTENT_WRITE

DBMGMT_MANAGED_DB_UPDATE

AddmTasks

ChangeDatabaseParameters

ChangeDatafiles

ChangePlanRetention

ChangeSpaceBudget

ChangeSqlPlanBaselinesAttributes

CloneSqlTuningTask

CoalesceTablespace

ConfigureAutomaticCaptureFilters

ConfigureAutomaticSpmEvolveAdvisorTask

CreateSqlTuningSet

CreateTablespace

DeletePreferredCredential

DeleteTablespace

DisableAutomaticInitialPlanCapture

DisableAutomaticSpmEvolveAdvisorTask

DisableHighFrequencyAutomaticSpmEvolveAdvisorTask

DisableSqlPlanBaselinesUsage

DropSqlPlanBaselines

DropSqlsInSqlTuningSet

DropSqlTuningSet

DropSqlTuningTask

EnableAutomaticInitialPlanCapture

EnableAutomaticSpmEvolveAdvisorTask

EnableHighFrequencyAutomaticSpmEvolveAdvisorTask

EnableSqlPlanBaselinesUsage

FetchSqlTuningSet

GenerateAwrSnapshot

GetExecutionPlanStatsComparision

GetOptimizerStatisticsAdvisorExecution

GetOptimizerStatisticsAdvisorExecutionScript

GetOptimizerStatisticsCollectionOperation

GetSqlExecutionPlan

GetSqlPlanBaseline

GetSqlPlanBaselineConfiguration

GetSqlTuningAdvisorTaskSummaryReport

GetUser

ListAlertLogs

ListAttentionLogs

ListConsumerGroupPrivileges

ListCursorCacheStatements

ListDataAccessContainers

ListDatabaseParameters

ListObjectPrivileges

ListOptimizerStatisticsAdvisorExecutions

ListOptimizerStatisticsCollectionAggregations

ListOptimizerStatisticsCollectionOperations

ListProxiedForUsers

ListProxyUsers

ListRoles

ListSpmJobs

ListSqlPlanBaselines

ListSqlTuningAdvisorTaskFindings

ListSqlTuningAdvisorTaskRecommendations

ListSqlTuningAdvisorTasks

ListSqlTuningSets

ListSystemPrivileges

ListTableStatistics

ListUsers

LoadSqlPlanBaselinesFromAwr

LoadSqlPlanBaselinesFromCursorCache

LoadSqlTuningSet

ModifySnapshotSettings

ResetDatabaseParameters

RunHistoricAddm

SaveSqlTuningSetAs

ShrinkTablespace

StartSqlTuningTask

SummarizeSqlPlanBaselines

SummarizeSqlPlanBaselinesByLastExecution

UpdatePreferredCredential

UpdateTablespace

ValidateBasicFilter

AddManagedDatabaseToManagedDatabaseGroup (also needs manage dbmgmt-managed-database-groups)

CreateJob (also needs manage dbmgmt-jobs)

CreateNamedCredential (also needs manage dbmgmt-named-credentials)

ImplementOptimizerStatisticsAdvisorRecommendations (also needs manage dbmgmt-jobs)

ListExternalListenerServices (also needs read dbmgmt-external-dbsystems)

RemoveManagedDatabaseFromManagedDatabaseGroup (also needs manage dbmgmt-managed-database-groups)

TestNamedCredential (also needs read dbmgmt-named-credentials)

UpdateNamedCredential (also needs use dbmgmt-named-credentials)

manage

USE +

no extra

no extra

none

dbmgmt-private-endpoints

Verbs Permissions APIs Fully Covered APIs Partially Covered

inspect

DBMGMT_PRIVATE_ENDPOINT_INSPECT

ListDbManagementPrivateEndpoints

none

read

INSPECT +

DBMGMT_PRIVATE_ENDPOINT_READ

GetDbManagementPrivateEndpoint

none

use

READ +

DBMGMT_PRIVATE_ENDPOINT_UPDATE

UpdateDbManagementPrivateEndpoint

none

manage

USE +

DBMGMT_PRIVATE_ENDPOINT_CREATE

DBMGMT_PRIVATE_ENDPOINT_DELETE

DBMGMT_PRIVATE_ENDPOINT_MOVE

CreateDbManagementPrivateEndpoint

DeleteDbManagementPrivateEndpoint

ChangeDbManagementPrivateEndpointCompartment

none

dbmgmt-work-requests

Verbs Permissions APIs Fully Covered APIs Partially Covered

inspect

DBMGMT_WORK_REQUEST_INSPECT

ListWorkRequests

none

read

INSPECT +

DBMGMT_WORK_REQUEST_READ

ListWorkRequestLogs

ListWorkRequestErrors

GetWorkRequest

none

use

READ +

no extra

no extra

none

manage

READ +

USE +

no extra

no extra

none

dbmgmt-external-dbsystem-discoveries

Verbs Permissions APIs Fully Covered APIs Partially Covered

inspect

DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_INSPECT

ListExternalDbSystemDiscoveries

none

read

INSPECT +

DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_READ

GetExternalDbSystemDiscovery

CreateExternalDbSystem (also needs manage dbmgmt-external-dbsystems)

use

READ +

DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_UPDATE

PatchExternalDbSystemDiscovery

UpdateExternalDbSystemDiscovery

none

manage

USE +

DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_CREATE

DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_DELETE

CreateExternalDbSystemDiscovery

DeleteExternalDbSystemDiscovery

none

dbmgmt-external-dbsystems

Verbs Permissions APIs Fully Covered APIs Partially Covered

inspect

DBMGMT_EXTERNAL_DBSYSTEM_INSPECT

ListExternalAsmInstances

ListExternalAsms

ListExternalClusterInstances

ListExternalClusters

ListExternalDatabases

ListExternalDbHomes

ListExternalDbNodes

ListExternalDbSystemConnectors

ListExternalDbSystems

ListExternalListeners

none

read

INSPECT +

DBMGMT_EXTERNAL_DBSYSTEM_READ

CheckExternalDbSystemConnectorConnectionStatus

GetExternalAsm

GetExternalAsmInstance

GetExternalAsmMetrics

GetExternalCluster

GetExternalClusterInstance

GetExternalClusterMetrics

GetExternalDbHome

GetExternalDbNode

GetExternalDbNodeMetrics

GetExternalDbSystem

GetExternalDbSystemAvailabilityMetrics

GetExternalDbSystemConnector

GetExternalListener

GetExternalListenerMetrics

ListExternalListenerServices (also needs use dbmgmt-managed-databases)

use

READ +

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

DBMGMT_EXTERNAL_DBSYSTEM_CONTENT_READ

DBMGMT_EXTERNAL_DBSYSTEM_CONTENT_WRITE

DisableExternalDbSystemDatabaseManagement

DisableExternalDbSystemStackMonitoring

EnableExternalDbSystemDatabaseManagement

EnableExternalDbSystemStackMonitoring

GetExternalAsmConfiguration

ListExternalAsmDiskGroups

ListExternalAsmUsers

UpdateExternalAsm

UpdateExternalCluster

UpdateExternalClusterInstance

UpdateExternalDbNode

UpdateExternalDbSystem

UpdateExternalDbSystemConnector

UpdateExternalListener

none

manage

USE +

DBMGMT_EXTERNAL_DBSYSTEM_CREATE

DBMGMT_EXTERNAL_DBSYSTEM_DELETE

DBMGMT_EXTERNAL_DBSYSTEM_MOVE

ChangeExternalDbSystemCompartment

CreateExternalDbSystemConnector

DeleteExternalDbSystem

DeleteExternalDbSystemConnector

CreateExternalDbSystem (also needs read dbmgmt-external-dbsystem-discoveries)

dbmgmt-external-exadata

Verbs Permissions APIs Fully Covered APIs Partially Covered

inspect

DBMGMT_EXTERNAL_EXADATA_INSPECT

ListExternalExadataInfrastructures

ListExternalExadataStorageServerConnectors

ListExternalExadataStorageServers

none

read

INSPECT +

DBMGMT_EXTERNAL_EXADATA_READ

CheckExternalExadataStorageServerConnector

GetExternalExadataInfrastructure

GetExternalExadataStorageGrid

GetExternalExadataStorageServer

GetExternalExadataStorageServerConnector

none

use

READ +

DBMGMT_EXTERNAL_EXADATA_UPDATE

DBMGMT_EXTERNAL_EXADATA_CONTENT_READ

DBMGMT_EXTERNAL_EXADATA_CONTENT_WRITE

DisableExternalExadataInfrastructureManagement

EnableExternalExadataInfrastructureManagement

GetIormPlan

GetOpenAlertHistory

GetTopSqlCpuActivity

UpdateExternalExadataInfrastructure

UpdateExternalExadataStorageServerConnector

none

manage

USE +

DBMGMT_EXTERNAL_EXADATA_CREATE

DBMGMT_EXTERNAL_EXADATA_DELETE

DBMGMT_EXTERNAL_EXADATA_MOVE

ChangeExternalExadataInfrastructureCompartment

CreateExternalExadataInfrastructure

CreateExternalExadataStorageServerConnector

DeleteExternalExadataInfrastructure

DeleteExternalExadataStorageServerConnector

DiscoverExternalExadataInfrastructure

none

dbmgmt-named-credentials

Verbs Permissions APIs Fully Covered APIs Partially Covered

inspect

DBMGMT_NAMED_CREDENTIAL_INSPECT

ListNamedCredentials

none

read

INSPECT +

DBMGMT_NAMED_CREDENTIAL_READ

GetNamedCredential

TestNamedCredential (also needs use dbmgmt-managed-databases)

use

READ +

DBMGMT_NAMED_CREDENTIAL_UPDATE

none

UpdateNamedCredential (also needs use dbmgmt-managed-databases)

manage

USE +

DBMGMT_NAMED_CREDENTIAL_CREATE

DBMGMT_NAMED_CREDENTIAL_DELETE

DBMGMT_NAMED_CREDENTIAL_MOVE

ChangeNamedCredentialCompartment

DeleteNamedCredential

CreateNamedCredential (also needs use dbmgmt-managed-databases)

dbmgmt-managed-mysql-databases

Verbs Permissions APIs Fully Covered APIs Partially Covered

inspect

DBMGMT_MANAGED_MYSQL_DB_INSPECT

ListManagedMySqlDatabases

none

read

INSPECT +

DBMGMT_MANAGED_MYSQL_DB_READ

GetManagedMySqlDatabase

GetMySqlFleetMetric

SummarizeManagedMySqlDatabaseAvailabilityMetrics

none

use

READ +

DBMGMT_MANAGED_MYSQL_DB_CONTENT_READ

ListManagedMySqlDatabaseConfigurationData

ListManagedMySqlDatabaseSqlData

none

manage

USE +

no extra

no extra

none

Permissions Required for Each API Operation

The following table lists the API operations in alphabetical order.

Note

If using named credentials to perform an API operation pertaining to Oracle Databases and External Database Systems, the DBMGMT_NAMED_CREDENTIAL_READ permission may be required in addition to the permissions listed for the API operation.

For information on permissions, see Permissions.

API Operation Permissions Required to Use the Operation

AddManagedDatabaseToManagedDatabaseGroup

DBMGMT_MANAGED_DB_GROUP_ADD_DATABASE and DBMGMT_MANAGED_DB_UPDATE

AddmTasks

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ChangeDatabaseParameters

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

ChangeDatafiles

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

ChangeDbManagementPrivateEndpointCompartment

DBMGMT_PRIVATE_ENDPOINT_MOVE

ChangeExternalDbSystemCompartment

DBMGMT_EXTERNAL_DBSYSTEM_MOVE

ChangeExternalExadataInfrastructureCompartment

DBMGMT_EXTERNAL_EXADATA_MOVE

ChangeJobCompartment

DBMGMT_JOB_MOVE

ChangeManagedDatabaseGroupCompartment

DBMGMT_MANAGED_DB_GROUP_MOVE

ChangeNamedCredentialCompartment

DBMGMT_NAMED_CREDENTIAL_MOVE

ChangePlanRetention

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

ChangeSpaceBudget

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

ChangeSqlPlanBaselinesAttributes

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

CheckExternalDbSystemConnectorConnectionStatus

DBMGMT_EXTERNAL_DBSYSTEM_READ

CheckExternalExadataStorageServerConnector

DBMGMT_EXTERNAL_EXADATA_READ

CloneSqlTuningTask

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

CoalesceTablespace

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

ConfigureAutomaticCaptureFilters

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

ConfigureAutomaticSpmEvolveAdvisorTask

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

CreateDbManagementPrivateEndpoint

DBMGMT_PRIVATE_ENDPOINT_CREATE

CreateExternalDbSystem

DBMGMT_EXTERNAL_DBSYSTEM_CREATE and DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_READ

CreateExternalDbSystemConnector

DBMGMT_EXTERNAL_DBSYSTEM_CREATE

CreateExternalDbSystemDiscovery

DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_CREATE

CreateExternalExadataInfrastructure

DBMGMT_EXTERNAL_EXADATA_CREATE

CreateExternalExadataStorageServerConnector

DBMGMT_EXTERNAL_EXADATA_CREATE

CreateJob

The permissions required depend on the SQL type for SQL jobs and the resource-type.

  • Query: Along with the DBMGMT_JOB_CREATE permission, the following CONTENT_READ permission is required:
    • For a Managed Database: DBMGMT_MANAGED_DB_CONTENT_READ
    • For a Database Group: DBMGMT_MANAGED_DB_GROUP_DB_CONTENT_READ
  • DDL/DML/PLSQL: Along with the DBMGMT_JOB_CREATE permission, the following CONTENT_READ and CONTENT_WRITE permissions are required:
    • For a Managed Database: DBMGMT_MANAGED_DB_CONTENT_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
    • For a Database Group: DBMGMT_MANAGED_DB_GROUP_DB_CONTENT_READ and DBMGMT_MANAGED_DB_GROUP_DB_CONTENT_WRITE

CreateManagedDatabaseGroup

DBMGMT_MANAGED_DB_GROUP_CREATE

CreateNamedCredential

DBMGMT_NAMED_CREDENTIAL_CREATE, DBMGMT_MANAGED_DB_READ, and DBMGMT_MANAGED_DB_CONTENT_READ

CreateSqlTuningSet

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

CreateTablespace

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

DeleteDbManagementPrivateEndpoint

DBMGMT_PRIVATE_ENDPOINT_DELETE

DeleteExternalDbSystem

DBMGMT_EXTERNAL_DBSYSTEM_DELETE

DeleteExternalDbSystemConnector

DBMGMT_EXTERNAL_DBSYSTEM_DELETE

DeleteExternalDbSystemDiscovery

DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_DELETE

DeleteExternalExadataInfrastructure

DBMGMT_EXTERNAL_EXADATA_DELETE

DeleteExternalExadataStorageServerConnector

DBMGMT_EXTERNAL_EXADATA_DELETE

DeleteJob

DBMGMT_JOB_DELETE

DeleteManagedDatabaseGroup

DBMGMT_MANAGED_DB_GROUP_DELETE

DeleteNamedCredential

DBMGMT_NAMED_CREDENTIAL_DELETE

DeletePreferredCredential

DBMGMT_MANAGED_DB_UPDATE

DeleteTablespace

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

DisableAutomaticInitialPlanCapture

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

DisableAutomaticSpmEvolveAdvisorTask

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

DisableExternalDbSystemDatabaseManagement

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

DisableExternalDbSystemStackMonitoring

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

DisableExternalExadataInfrastructureManagement

DBMGMT_EXTERNAL_EXADATA_UPDATE

DisableHighFrequencyAutomaticSpmEvolveAdvisorTask

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

DisableSqlPlanBaselinesUsage

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

DiscoverExternalExadataInfrastructure

DBMGMT_EXTERNAL_EXADATA_CREATE

DropSqlPlanBaselines

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

DropSqlsInSqlTuningSet

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

DropSqlTuningSet

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

DropSqlTuningTask

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

EnableAutomaticInitialPlanCapture

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

EnableAutomaticSpmEvolveAdvisorTask

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

EnableExternalDbSystemDatabaseManagement

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

EnableExternalDbSystemStackMonitoring

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

EnableExternalExadataInfrastructureManagement

DBMGMT_EXTERNAL_EXADATA_UPDATE

EnableHighFrequencyAutomaticSpmEvolveAdvisorTask

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

EnableSqlPlanBaselinesUsage

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

FetchSqlTuningSet

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

GenerateAwrSnapshot

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

GetAwrDbReport

DBMGMT_MANAGED_DB_READ

GetAwrDbSqlReport

DBMGMT_MANAGED_DB_READ

GetClusterCacheMetric

DBMGMT_MANAGED_DB_READ

GetDatabaseFleetHealthMetrics

  • For a fleet of Managed Databases in a specific compartment: DBMGMT_MANAGED_DB_READ

  • For a fleet of Managed Databases in a specific Database Group: DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_GROUP_READ

GetDatabaseHomeMetrics

DBMGMT_MANAGED_DB_READ

GetDbManagementPrivateEndpoint

DBMGMT_PRIVATE_ENDPOINT_READ

GetExecutionPlanStatsComparision

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

GetExternalAsm

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalAsmConfiguration

DBMGMT_EXTERNAL_DBSYSTEM_READ and DBMGMT_EXTERNAL_DBSYSTEM_CONTENT_READ

GetExternalAsmInstance

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalAsmMetrics

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalCluster

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalClusterInstance

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalClusterMetrics

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalDbHome

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalDbNode

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalDbNodeMetrics

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalDbSystem

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalDbSystemAvailabilityMetrics

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalDbSystemConnector

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalDbSystemDiscovery

DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_READ

GetExternalExadataInfrastructure

DBMGMT_EXTERNAL_EXADATA_READ

GetExternalExadataStorageGrid

DBMGMT_EXTERNAL_EXADATA_READ

GetExternalExadataStorageServer

DBMGMT_EXTERNAL_EXADATA_READ

GetExternalExadataStorageServerConnector

DBMGMT_EXTERNAL_EXADATA_READ

GetExternalListener

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetExternalListenerMetrics

DBMGMT_EXTERNAL_DBSYSTEM_READ

GetIormPlan

DBMGMT_EXTERNAL_EXADATA_READ and DBMGMT_EXTERNAL_EXADATA_CONTENT_READ

GetJob

DBMGMT_JOB_READ

GetJobExecution

DBMGMT_JOB_READ

GetJobRun

DBMGMT_JOB_READ

GetManagedDatabase

DBMGMT_MANAGED_DB_READ

GetManagedDatabaseGroup

DBMGMT_MANAGED_DB_GROUP_READ

GetManagedMySqlDatabase

DBMGMT_MANAGED_MYSQL_DB_READ

GetMySqlFleetMetric

DBMGMT_MANAGED_MYSQL_DB_READ

GetNamedCredential

DBMGMT_NAMED_CREDENTIAL_READ

GetOpenAlertHistory

DBMGMT_EXTERNAL_EXADATA_READ and DBMGMT_EXTERNAL_EXADATA_CONTENT_READ

GetOptimizerStatisticsAdvisorExecution

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

GetOptimizerStatisticsAdvisorExecutionScript

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

GetOptimizerStatisticsCollectionOperation

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

GetPdbMetrics

DBMGMT_MANAGED_DB_READ

GetPreferredCredential

DBMGMT_MANAGED_DB_READ

GetSqlExecutionPlan

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

GetSqlPlanBaseline

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

GetSqlPlanBaselineConfiguration

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

GetSqlTuningAdvisorTaskSummaryReport

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

GetTablespace

DBMGMT_MANAGED_DB_READ

GetTopSqlCpuActivity

DBMGMT_EXTERNAL_EXADATA_READ and DBMGMT_EXTERNAL_EXADATA_CONTENT_READ

GetUser

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

GetWorkRequest

DBMGMT_WORK_REQUEST_READ

ImplementOptimizerStatisticsAdvisorRecommendations

DBMGMT_MANAGED_DB_READ, DBMGMT_MANAGED_DB_CONTENT_READ, DBMGMT_MANAGED_DB_CONTENT_WRITE, and DBMGMT_JOB_CREATE

ListAlertLogs

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListAttentionLogs

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListAwrDbs

DBMGMT_MANAGED_DB_READ

ListAwrDbSnapshots

DBMGMT_MANAGED_DB_READ

ListConsumerGroupPrivileges

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListCursorCacheStatements

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListDataAccessContainers

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListDatabaseParameters

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListDbManagementPrivateEndpoints

DBMGMT_PRIVATE_ENDPOINT_INSPECT

ListExternalAsmDiskGroups

DBMGMT_EXTERNAL_DBSYSTEM_READ and DBMGMT_EXTERNAL_DBSYSTEM_CONTENT_READ

ListExternalAsmInstances

DBMGMT_EXTERNAL_DBSYSTEM_INSPECT

ListExternalAsms

DBMGMT_EXTERNAL_DBSYSTEM_INSPECT

ListExternalAsmUsers

DBMGMT_EXTERNAL_DBSYSTEM_READ and DBMGMT_EXTERNAL_DBSYSTEM_CONTENT_READ

ListExternalClusterInstances

DBMGMT_EXTERNAL_DBSYSTEM_INSPECT

ListExternalClusters

DBMGMT_EXTERNAL_DBSYSTEM_INSPECT

ListExternalDatabases

DBMGMT_EXTERNAL_DBSYSTEM_INSPECT

ListExternalDbHomes

DBMGMT_EXTERNAL_DBSYSTEM_INSPECT

ListExternalDbNodes

DBMGMT_EXTERNAL_DBSYSTEM_INSPECT

ListExternalDbSystemConnectors

DBMGMT_EXTERNAL_DBSYSTEM_INSPECT

ListExternalDbSystemDiscoveries

DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_INSPECT

ListExternalDbSystems

DBMGMT_EXTERNAL_DBSYSTEM_INSPECT

ListExternalExadataInfrastructures

DBMGMT_EXTERNAL_EXADATA_INSPECT

ListExternalExadataStorageServerConnectors

DBMGMT_EXTERNAL_EXADATA_INSPECT

ListExternalExadataStorageServers

DBMGMT_EXTERNAL_EXADATA_INSPECT

ListExternalListeners

DBMGMT_EXTERNAL_DBSYSTEM_INSPECT

ListExternalListenerServices

DBMGMT_EXTERNAL_DBSYSTEM_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListJobExecutions

DBMGMT_JOB_READ

ListJobRuns

DBMGMT_JOB_READ

ListJobs

DBMGMT_JOB_INSPECT

ListManagedDatabaseGroups

DBMGMT_MANAGED_DB_GROUP_INSPECT

ListManagedDatabases

DBMGMT_MANAGED_DB_INSPECT

ListManagedMySqlDatabaseConfigurationData

DBMGMT_MANAGED_MYSQL_DB_READ and DBMGMT_MANAGED_MYSQL_DB_CONTENT_READ

ListManagedMySqlDatabases

DBMGMT_MANAGED_MYSQL_DB_INSPECT

ListManagedMySqlDatabaseSqlData

DBMGMT_MANAGED_MYSQL_DB_READ and DBMGMT_MANAGED_MYSQL_DB_CONTENT_READ

ListNamedCredentials

DBMGMT_NAMED_CREDENTIAL_INSPECT

ListObjectPrivileges

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListOptimizerStatisticsAdvisorExecutions

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListOptimizerStatisticsCollectionAggregations

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListOptimizerStatisticsCollectionOperations

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListPreferredCredentials

DBMGMT_MANAGED_DB_READ

ListProxiedForUsers

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListProxyUsers

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListRoles

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListSpmJobs

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListSqlPlanBaselines

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListSqlTuningAdvisorTaskFindings

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListSqlTuningAdvisorTaskRecommendations

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListSqlTuningAdvisorTasks

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListSqlTuningSets

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListSystemPrivileges

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListTablespaces

DBMGMT_MANAGED_DB_READ

ListTableStatistics

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListUsers

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

ListWorkRequestErrors

DBMGMT_WORK_REQUEST_READ

ListWorkRequestLogs

DBMGMT_WORK_REQUEST_READ

ListWorkRequests

DBMGMT_WORK_REQUEST_INSPECT

LoadSqlPlanBaselinesFromAwr

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

LoadSqlPlanBaselinesFromCursorCache

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

LoadSqlTuningSet

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

ModifySnapshotSettings

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

PatchExternalDbSystemDiscovery

DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_UPDATE

RemoveManagedDatabaseFromManagedDatabaseGroup

DBMGMT_MANAGED_DB_GROUP_REMOVE_DATABASE and DBMGMT_MANAGED_DB_UPDATE

ResetDatabaseParameters

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

RunHistoricAddm

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

SaveSqlTuningSetAs

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

ShrinkTablespace

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

StartSqlTuningTask

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

SummarizeAwrDbCpuUsages

DBMGMT_MANAGED_DB_READ

SummarizeAwrDbMetrics

DBMGMT_MANAGED_DB_READ

SummarizeAwrDbParameterChanges

DBMGMT_MANAGED_DB_READ

SummarizeAwrDbParameters

DBMGMT_MANAGED_DB_READ

SummarizeAwrDbSnapshotRanges

DBMGMT_MANAGED_DB_READ

SummarizeAwrDbSysstats

DBMGMT_MANAGED_DB_READ

SummarizeAwrDbTopWaitEvents

DBMGMT_MANAGED_DB_READ

SummarizeAwrDbWaitEventBuckets

DBMGMT_MANAGED_DB_READ

SummarizeAwrDbWaitEvents

DBMGMT_MANAGED_DB_READ

SummarizeJobExecutionsStatuses

DBMGMT_JOB_READ

SummarizeManagedMySqlDatabaseAvailabilityMetrics

DBMGMT_MANAGED_MYSQL_DB_READ

SummarizeSqlPlanBaselines

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

SummarizeSqlPlanBaselinesByLastExecution

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

TestNamedCredential

DBMGMT_NAMED_CREDENTIAL_READ, DBMGMT_MANAGED_DB_READ, and DBMGMT_MANAGED_DB_CONTENT_READ

TestPreferredCredential

DBMGMT_MANAGED_DB_READ

UpdateDbManagementPrivateEndpoint

DBMGMT_PRIVATE_ENDPOINT_UPDATE

UpdateExternalAsm

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

UpdateExternalCluster

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

UpdateExternalClusterInstance

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

UpdateExternalDbNode

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

UpdateExternalDbSystem

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

UpdateExternalDbSystemConnector

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

UpdateExternalDbSystemDiscovery

DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_UPDATE

UpdateExternalExadataInfrastructure

DBMGMT_EXTERNAL_EXADATA_UPDATE

UpdateExternalExadataStorageServerConnector

DBMGMT_EXTERNAL_EXADATA_UPDATE

UpdateExternalListener

DBMGMT_EXTERNAL_DBSYSTEM_UPDATE

UpdateJob

DBMGMT_JOB_UPDATE

UpdateManagedDatabaseGroup

DBMGMT_MANAGED_DB_GROUP_UPDATE

UpdateNamedCredential

DBMGMT_NAMED_CREDENTIAL_UPDATE, DBMGMT_MANAGED_DB_READ, and DBMGMT_MANAGED_DB_CONTENT_READ

UpdatePreferredCredential

DBMGMT_MANAGED_DB_UPDATE

UpdateTablespace

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE

ValidateBasicFilter

DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ