Oracle Cloud Infrastructure Documentation

Logging Analytics Service Operation Preferences

You can use Oracle Logging Analytics REST API to select preferences for specific areas or set of resources in the service.

To be able to set the preferences:

  • Select users (or a group of users) to enable them to view, update, and delete the preferences.

  • Select the preference group for which you want to provide access.

To enable users to update the preferences have fine-grained access over preferences of specific areas or set of resources using IAM policies, see Allow Users to Manage Group Preferences in Logging Analytics.

For the currently supported preference groups in Oracle Logging Analytics, see Preference Groups in Logging Analytics.

For REST API to manage preferences in Oracle Logging Analytics, see Logging Analytics API Reference.

Allow Users to Manage Group Preferences in Logging Analytics

The following permissions currently govern the management of tenant preferences in Oracle Logging Analytics:

  • LOG_ANALYTICS_PREFERENCE_READ
  • LOG_ANALYTICS_PREFERENCE_UPDATE
  • LOG_ANALYTICS_PREFERENCE_DELETE

An example IAM policy statement that allows the user group Logging-Analytics-Admins to operate on all preference groups in Oracle Logging Analytics: 

allow group Logging-Analytics-Admins to {LOG_ANALYTICS_PREFERENCE_READ, LOG_ANALYTICS_PREFERENCE_UPDATE, LOG_ANALYTICS_PREFERENCE_DELETE} in tenancy

However, if you want to selectively authorize the user groups to update the preferences for specific preference groups, then use the where clause in the above policy statement and provide the preference group name for the parameter target.preferences.groups.

For example, consider the requirement where you want the user group groupA to be able to:

  • View all preferences in Oracle Logging Analytics
  • Update and delete the preferences in the preference group entityLifecycle

Then the IAM policy statements can be:

allow group groupA to {LOG_ANALYTICS_PREFERENCE_READ} in tenancy
allow group groupA to {LOG_ANALYTICS_PREFERENCE_UPDATE, LOG_ANALYTICS_PREFERENCE_DELETE} in tenancy  where target.preferences.groups = 'entityLifecycle'

For the currently supported preference groups, see Preference Groups in Logging Analytics.

Preference Groups in Logging Analytics

The following preference groups are currently available in Oracle Logging Analytics:

Preference Name target.preferences.groups Value Individual Preferences Covered in the Group Description
Entity Lifecycle Properties entityLifecycle AUTO_CREATE_AGENT_HOST_ENTITY, AUTO_DELETE_AGENT_ENTITY, AUTO_DELETE_HOST_ENTITY, AUTO_DELETE_SCH_ENTITIES_OF_TYPES, USE_CUSTOM_HOSTNAME_FROM_TAG, USE_CUSTOM_HOSTNAME_POSITION Tenancy wide preferences for Oracle Logging Analytics entities. See Manage Entity Preferences.