IAM Permissions

This topic discusses the policies that are required to access the API endpoints for IAM-based Digital Assistant instances. This topic doesn't apply to instances that are paired with a subscription to a Fusion-based Oracle Cloud Applications service, such as HCM Cloud or Sales Cloud, nor to 19.4.1 instances that were migrated to Oracle Cloud Infrastructure.

To be able to send requests to the API endpoints, you must be an IAM user who has been assigned to a group that has an IAM policy to allow group <group-name> to <verb> oda-instance-resource. The verb in the policy -- which can be inspect, read, or use -- determines which operations you can access, as shown in the following table.

Verb	Operations You Can Access
inspect	GET /bots/{botId}/dynamicEntities GET /bots/{botId}/dynamicEntities/{entityId}/pushRequests GET /bots/{botId}/insightExports GET /bots/insightDataExport GET /bots/insights/dataExports GET /digitalAssistants GET /skills
read	GET /bots/{botId}/dynamicEntities GET /bots/{botId}/dynamicEntities/{entityId}/pushRequests GET /bots/{botId}/dynamicEntities/{entityId}/pushRequests/{pushRequestId} GET /bots/{botId}/insightExports GET /bots/{botId}/insightExports/{exportId} GET /bots/{botId}/insightExports/{exportId}/data GET /bots/{botId}/insightExports/{exportId}/status GET /bots/insightDataExport GET /bots/insightDataExport/{exportId} GET /bots/insightDataExport/{exportId}/data GET /bots/insights/dataExports GET /bots/insights/dataExports/{id} GET /bots/insights/dataExports/{id}/files/{filename} GET /bots/sessions/{channelId}/{userId}/{sessionId}/log GET /digitalAssistants GET /skills
use	GET /bots/{botId}/dynamicEntities GET /bots/{botId}/dynamicEntities/{entityId}/pushRequests POST /bots/{botId}/dynamicEntities/{entityId}/pushRequests GET /bots/{botId}/dynamicEntities/{entityId}/pushRequests/{pushRequestId} DELETE /bots/{botId}/dynamicEntities/{entityId}/pushRequests/{pushRequestId} PUT /bots/{botId}/dynamicEntities/{entityId}/pushRequests/{pushRequestId}/{action} PATCH /api/v1/bots/{botId}/dynamicEntities/{entityId}/pushRequests/{pushRequestId}/values POST /bots/insightDataExport GET /bots/insightDataExport GET /bots/insightDataExport/{exportId} DELETE /bots/insightDataExport/{exportId} GET /bots/insightDataExport/{exportId}/data POST /bots/{botId}/insightExports GET /bots/{botId}/insightExports GET /bots/{botId}/insightExports/{exportId} DELETE /bots/{botId}/insightExports/{exportId} GET /bots/{botId}/insightExports/{exportId}/data GET /bots/{botId}/insightExports/{exportId}/status GET /bots/insights/dataExports POST /bots/insights/dataExports DELETE /bots/insights/dataExports/{id} GET /bots/insights/dataExports/{id} GET /bots/insights/dataExports/{id}/files/{filename} GET /bots/sessions/{channelId}/{userId}/{sessionId}/log GET /digitalAssistants GET /skills

To learn about IAM users, policies, and groups, see Set Up Groups, Users, and Policies in Using Oracle Digital Assistant.