Manage Security Attributes for the DB System

This article provides the procedure to add, edit, and remove security attributes for a DB system.

General Information

• Administrators must set up security attribute namespaces and security attributes in a tenancy before users can apply security attributes to the DB systems.
• A security attribute is effective only with appropriate policies. If a security attribute without any policies is added, all access will be denied by default, even if allowed in the Security List or NSGs.
• If you use the security attribute, the security rules for the DB system will be a union of the rules in the security attributes along with any rules in the security list and the NSGs.
• You may need to use more than one security attribute. If you’re not sure, contact your network administrator.
• A maximum of 3 security attributes can be specified for a DB system.

For more information about:

• creating a security attribute, see Creating a Security Attribute.
• defining appropriate ZPR policies, see Manage ZPR Policies.

Add a Security Attribute

Perform the following steps to add a security attribute for a DB system using the OCI Console:

1. On the DB Systems list page, select the DB system that you want to work with. If you need help finding the list page or the DB system, see List the DB Systems.
2. Select the Security tab. A list of existing security attributes, if any, is displayed.

3. Select Add security attributes.

   • Alternatively, you can also select Add security attributes from the Actions menu in the DB system details page.

4. In the Add security attributes panel, enter the following details:

   • Select the namespace in which the required security attribute key is available.
   • Select the key and provide a value for the security attribute.
   • Optionally, to use additional security attributes, select Add security attribute and provide required details.
5. Select Save.

Edit a Security Attribute

Perform the following steps to edit a security attribute for a DB system using the OCI Console:

1. On the DB Systems list page, select the DB system that you want to work with. If you need help finding the list page or the DB system, see List the DB Systems.
2. Select the Security tab. A list of existing security attributes, if any, is displayed.
3. Select the edit icon of the security attribute that you want to edit.
4. Enter a new value for the security attribute.
5. Select Save.

Remove a Security Attribute

Perform the following steps to remove a security attribute for a DB system using the OCI Console:

1. On the DB Systems list page, select the DB system that you want to work with. If you need help finding the list page or the DB system, see List the DB Systems.
2. Select the Security tab. A list of existing security attributes, if any, is displayed.
3. Select the edit icon of the security attribute that you want to remove.
4. Select Remove.