Resource Types, Variables, and Permissions

WebLogic Management provides various resource-types, supported variables, and verb resource type combinations for writing policies.

Resource-types and Variables

WebLogic Management offers both aggregate and individual resource-types for writing policies.


Aggregate Resource Type	Individual Resource Types
`wlms-family`	`wlms-managed-instances` `wlms-wlsdomains` `wlms-config` `wlms-work-requests`

Details for Verb and Resource-type Combinations

The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

Tip

For information about using verbs, see the Policy Reference

wlms-managed-instances


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	`WLMS_MANAGED_INSTANCE_INSPECT`	`ListManagedInstances`	none
read	INSPECT + `WLMS_MANAGED_INSTANCE_READ`	`GetManagedInstance` `ListManagedInstanceScanResults` `ListManagedInstanceServers` `GetManagedInstanceServer`	`SummarizeResourceInventory`
use	READ + `WLMS_MANAGED_INSTANCE_USE` `WLMS_MANAGED_INSTANCE_UPDATE`	`ScanManagedInstance` (for `WLMS_MANAGED_INSTANCE_USE`) `UpdateManagedInstance` (for `WLMS_MANAGED_INSTANCE_UPDATE`)	none

wlms-wlsdomains


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	`WLMS_WLSDOMAIN_INSPECT`	`ListWlsDomains`	none
read	INSPECT + `WLMS_WLSDOMAIN_READ`	`GetWlsDomain` `GetWlsDomainCredential` `ListApplicablePatches` `ListAgreementRecords` `ListWlsDomainScanResults` `ListWlsDomainCredentials` `ListWlsDomainServers` `ListWlsDomainsSharingMiddleware` `ListDomainServerBackups` `GetDomainServerBackupContent` `GetDomainServerBackup` `GetWlsDomainServer`	`SummarizeResourceInventory`
use	READ + `WLMS_WLSDOMAIN_USE` `WLMS_WLSDOMAIN_UPDATE` `WLMS_WLSDOMAIN_RESTART` `WLMS_WLSDOMAIN_PATCH` `WLMS_WLSDOMAIN_MOVE` `WLMS_WLSDOMAIN_RESTORE`	`WLMS_WLSDOMAIN_USE`: `CreateAgreementRecord` `ScanWlsDomain` `WLMS_WLSDOMAIN_UPDATE`: `UpdateWlsDomain` `UpdateWlsDomainCredential` `SetRestartOrder` `WLMS_WLSDOMAIN_RESTART`: `StartWlsDomain` `StopWlsDomain` `RestartWlsDomain` `WLMS_WLSDOMAIN_PATCH`: `StartWlsDomain` `StopWlsDomain` `RestartWlsDomain` `InstallLatestPatchesOnWlsDomain` `WLMS_WLSDOMAIN_MOVE`: `ChangeWlsDomainCompartment` `WLMS_WLSDOMAIN_RESTORE` `RestoreDomain`	none
manage	USE + `WLMS_WLSDOMAIN_DELETE`	`DeleteWlsDomain`	none

wlms-config


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
read	INSPECT + `WLMS_CONFIG_READ`	`GetConfiguration`	none
use	READ + `WLMS_CONFIG_UPDATE`	`UpdateConfiguration`	none

wlms-work-requests


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	`WLMS_WORK_REQUEST_INSPECT`	`ListWorkRequests` `ListWorkRequestErrors` `ListWorkRequestLogs`	none
read	INSPECT + `WLMS_WORK_REQUEST_READ`	`GetWorkRequest`	none

wlms-managed-instance-plugin


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
use	`WLMS_MANAGED_INSTANCE_PLUGIN_ACCESS`	No API operations are covered for this permission. This permission controls whether the WebLogic Management Service agent on the Compute Instance can access the WebLogic Management service.	none

Permissions Required for Each API Operation

Domain API Operations


`API Operation`	`Permissions Required to Use the Operation`
`DeleteWlsDomain`	`WLMS_WLSDOMAIN_DELETE`
`ListWlsDomains`	`WLMS_WLSDOMAIN_INSPECT`
`ChangeWlsDomainCompartment`	`WLMS_WLSDOMAIN_MOVE`
`InstallLatestPatchesOnWlsDomain`	`WLMS_WLSDOMAIN_PATCH`
`RestoreDomain`	`WLMS_WLSDOMAIN_RESTORE`
`ListDomainServerBackups`	`WLMS_WLSDOMAIN_READ`
`GetDomainServerBackupContent`	`WLMS_WLSDOMAIN_READ`
`GetDomainServerBackup`	`WLMS_WLSDOMAIN_READ`
`GetWlsDomainServer`	`WLMS_WLSDOMAIN_READ`
`ListAgreementRecords`	`WLMS_WLSDOMAIN_READ`
`GetWlsDomain`	`WLMS_WLSDOMAIN_READ`
`ListWlsDomainsSharingMiddlewares`	`WLMS_WLSDOMAIN_READ`
`ListWlsDomainCredentials`	`WLMS_WLSDOMAIN_READ`
`GetWlsDomainCredential`	`WLMS_WLSDOMAIN_READ`
`ListWlsDomainServers`	`WLMS_WLSDOMAIN_READ`
`ListApplicablePatches`	`WLMS_WLSDOMAIN_READ`
`ListWlsDomainScanResults`	`WLMS_WLSDOMAIN_READ`
`StartWlsDomain`	`WLMS_WLSDOMAIN_RESTART` or `WLMS_WLSDOMAIN_PATCH`
`StopWlsDomain`	`WLMS_WLSDOMAIN_RESTART` or `WLMS_WLSDOMAIN_PATCH`
`RestartWlsDomain`	`WLMS_WLSDOMAIN_RESTART` or `WLMS_WLSDOMAIN_PATCH`
`UpdateWlsDomain`	`WLMS_WLSDOMAIN_UPDATE`
`UpdateWlsDomainCredential`	`WLMS_WLSDOMAIN_UPDATE`
`SetRestartOrder`	`WLMS_WLSDOMAIN_UPDATE`
`CreateAgreementRecord`	`WLMS_WLSDOMAIN_USE`
`ScanWlsDomain`	`WLMS_WLSDOMAIN_USE`

Managed Instance API Operations


`API Operation`	`Permissions Required to Use the Operation`
`ListManagedInstance`	`WLMS_MANAGED_INSTANCE_INSPECT`
`GetManagedInstance`	`WLMS_MANAGED_INSTANCE_READ`
`ListManagedInstanceScanResults`	`WLMS_MANAGED_INSTANCE_READ`
`ListManagedInstanceServers`	`WLMS_MANAGED_INSTANCE_READ`
`GetManagedInstanceServer`	`WLMS_MANAGED_INSTANCE_READ`
`ScanManagedInstance`	`WLMS_MANAGED_INSTANCE_USE`

Work Request API Operations


`API Operation`	`Permissions Required to Use the Operation`
`ListWorkRequests`	`WLMS_WORK_REQUEST_INSPECT`
`ListWorkRequestErrors`	`WLMS_WORK_REQUEST_INSPECT`
`ListWorkRequestLogs`	`WLMS_WORK_REQUEST_INSPECT`
`GetWorkRequest`	`WLMS_WORK_REQUEST_READ`