Upgrade in an Oracle Cloud Infrastructure US Government Cloud Region
This topic describes how to upgrade Oracle Integration Generation 2 to Oracle Integration 3 in an Oracle Cloud Infrastructure US Government Cloud region.
- Grant Oracle Integration access to your tenancy. Add the following policy statements to your tenancy:
allow service integration to read users in tenancy allow service integration to read groups in tenancy allow service integration to read group-memberships in tenancy allow service integration to manage credentials in tenancy allow service integration to read policies in tenancy allow service integration to read compartments in tenancy allow service integration to manage domains in tenancy allow service integration to manage integration-instances in tenancy
- On the Upgrade page of your Oracle Integration Generation 2 instance, in the Policy OCIDs of Service Role box, enter the OCIDs for the policies you created to grant access to your service role groups. See Assign Policies to Oracle Integration Service Role Groups. These service role group mappings will be migrated to the Oracle Integration 3 instance during upgrade.
Description Example Policy Grant the
ServiceAdministrator
role for a compartmentallow group OICAdminGroup to be ServiceAdministrator for integration-instances in compartment OICCompartment
Grant the
ServiceDeveloper
role for a compartmentallow group OICDeveloperGroup to be ServiceDeveloper for integration-instances in compartment OICCompartment
Grant the
ServiceInvoker
role for an Oracle Integration instanceallow group OICInvokerGroup to be ServiceInvoker for integration-instances in compartment OICCompartment
where all {target.app.name='test-instance1', target.app.type='integration-instances'}
Here the
where
clause grants users assigned to groupOICInvokerGroup
theServiceInvoker
role to one Oracle Integration instance identified by its instance name and created inOICCompartment
.Grant the
ServiceMonitor
role for two Oracle Integration instancesallow group OICMonitorGroup to be ServiceMonitor for integration-instances in compartment OICCompartment
where any {target.app.name='test-instance1', target.app.name='instance-prod-1'}
This policy grants the
ServiceMonitor
Role to theOICMonitorGroup
group over two instances identified by their respective names inOICCompartment
.Note:
If you don't have any service role mapping policies in Oracle Integration Generation 2, you can skip updating the Policy OCIDs of Service Role field on the Upgrade page. In such cases, you need to manually assign the service roles to users in the IDCS application after upgrade.
Continue with the remaining upgrade process, starting with Check Upgrade Readiness and Correct Precheck Issues.