Managing Access Requests with Operator Access Control

Learn how to manage Oracle operator access requests to your Oracle Cloud at Customer Infrastructure using Operator Access Control.

State of an Access Request

Review the list of states in which an Oracle operator access request can be listed in a status check.

Table 3-1 States of an Access Request

State Description

RAISED

Operator has submitted an access request, and the approver or the system has not taken any action on the request.

IN-PROCESS

The system is processing the last action taken on the access request.

APPROVED

Approver has approved the access request.

PRE-APPROVED

The system has automatically approved the access request.

EXTENSION REQUESTED

Operator requests an extension of the period of the access request to have sufficient additional time for one or more operators to complete the task.

REJECTED

Approver has rejected the access request.

REVOKED

Approver has revoked the approval on a request. Any operator that may have been accessing the system have been disconnected from the system. No new actions can be taken on the request.

COMPLETED

The maintenance work for which the system access was requested is completed.

EXPIRED

Access request approval time period has expired. The operator cannot access the system without raising and obtaining approval for a new access request.

FAILED TO CLOSE

The system could not close an open access request. The close could have been triggered by REVOKE / COMPLETE / EXPIRE. Contact Oracle support.

View the List of Access Requests

When you receive a notice of an operator access request, you can view the list of all access requests by compartment, and accept or reject an access request.

You can Approve, Reject, Approve Extension, Reject Extension, and Revoke access requests.

  1. Log in to your Oracle Cloud Infrastructure tenancy.

  2. Open the navigation menu. Under Oracle Database, click Operator Access Control.
Requests are listed by request ID. The System column displays the system for which the request was raised. The State column lists the status of a request (Raised, Approved, Completed, Rejected). The Requested column displays the date and time of the request. The Severity column displays the severity level (Severity 1 - Complete loss of service for mission-critical operations where work cannot reasonably continue, Severity 2 - Significant or degraded loss of service or resources, Severity 3 - Minor loss of services or resources, Severity 4 - No work being impeded at the time - information is requested or reported) set by the operator. The Access Request Reason column displays the reason for the operator request for system access. To view individual requests, you can click a request ID.

Filter Access Requests by State

To review, approve, update, or revoke Access Requests, you can filter the Access Requests based on the workflow state of the request.

  1. Log in to your Oracle Cloud Infrastructure tenancy.
  2. Open the navigation menu. Under Oracle Database, click Operator Access Control.
  3. Under Filters, select an Action Request state from the list.

    You can perform actions based on the state of the Access Request.

    Table 3-2 Actions on Access Requests

    Access Request State Allowed Action

    Raised

    Approve or Reject.

    Approved

    Revoke

    In-Process

    No actions.

    Pre-Approved

    Revoke

    Extension Requested

    Approve Extension, Reject Extension, or Revoke.

    Rejected

    No actions.

    Revoked

    No actions.

    Completed

    No actions.

    Expired

    No actions.

    Failed to Close

    No actions.

Approve Access Request

When you approve an access request, you permit access, enable or disable keyboard logging, and provide comments for the action as needed.

  1. Log in to your Oracle Cloud Infrastructure tenancy.

  2. Open the navigation menu. Under Oracle Database, click Operator Access Control.

  3. Under Filters, select Raised from the drop-down list.

  4. From the list of Access Requests, click the name of the request that you want to approve.

    You can also select the request and click Actions to Approve the access request.

  5. In the Request ID page, click Approve.

  6. In the Approve Access Request page, do the following:

    1. To enable keyboard logging, click the box next to that option.
    2. In the comments field, enter additional comments or instructions you want to provide to the operator.
    3. Enter an approval comment.
  7. Click Approve.

Reject Access Request

To reject an Oracle Operator Access Request that you have previously granted, use this procedure.

  1. Log in to your Oracle Cloud Infrastructure tenancy.

  2. Open the navigation menu. Under Oracle Database, click Operator Access Control.

  3. Under Filters, select Raised from the drop-down list.

  4. From the list of Access Requests, click the name of the request that you want to reject.

    You can also click Action next to the request, and reject the access request.

  5. In the Request ID page, click Reject.

  6. In the Reject Access Request dialog, enter a reason for rejecting the request.

  7. Click Reject.

Revoke Access Request

To revoke access to your tenancy after you have granted access, complete this procedure.

  1. Log in to your Oracle Cloud Infrastructure tenancy.

  2. Open the navigation menu. Under Oracle Database, click Operator Access Control.

  3. Under Filters, select Pre-Approved from the drop-down list.

  4. From the list of Access Requests, click the name of the request that you want to revoke.

    You can also click Action to revoke the access request.

  5. In the Request ID page, click Revoke.

  6. In the Revoke Access Request dialog, enter the explanation for revoking access in the comment field.

  7. Click Revoke.

Approve Extension Request

When you receive an extension request, you approve an extended duration for the system access.

  1. Log in to your Oracle Cloud Infrastructure tenancy.

  2. Open the navigation menu. Under Oracle Database, click Operator Access Control.

  3. Under Filters, select Extension Requested from the drop-down list.

  4. From the list of Access Requests, click the name of the request that you want to extend duration.

    You can also click the action button to Approve Extension.

  5. In the Request ID page, click Approve Extension.

  6. In the Approve Extension Request page, do the following:

    1. Enter additional comments you want to provide to the operator.
    2. Enter an approval comment.
  7. Click Approve Extension.

Reject Extension Request

If you receive an Oracle Operator access extension request that you want to reject, then use this procedure.

Operator Control access expires when an already approved duration elapses. If the Oracle Operator requests an extension to the duration you approved for access to your infrastructure, and this request is not acceptable, based on your service commitments, or for any other reason, then you can reject that access request.
  1. Log in to your Oracle Cloud Infrastructure tenancy.

  2. Open the navigation menu. Under Oracle Database, click Operator Access Control.

  3. Under Filters, select Extension Requested from the list.

  4. From the list of Access Requests, click the name of the request for which you want to reject the extension.

    You can also click Action and select Reject Extension.

  5. In the Request ID page, click Reject Extension.

  6. In the Reject Extension Request page, in the comment field, enter your reason for rejecting the extension request.

  7. Click Reject Extension.