Details for Verbs + Resource-Type Combinations

There are various Oracle Cloud Infrastructure verbs and resource-types that you can use when you create a policy. The topics in this section show the permissions and API operations covered by each verb for Globally Distributed Database.

The level of access is cumulative as you go from inspect to read to use to manage.

Distributed-database

Permission APIs Fully Covered
INSPECT  
DISTRIBUTED_DB_INSPECT ListDistributedDatabases
READ  
INSPECT + INSPECT+
DISTRIBUTED_DB_READ GetDistributedDatabase

GenerateDistributedDatabaseWallet

DownloadDistributedDatabaseGsmCertificateSigningRequest
MANAGE  
READ + READ +
DISTRIBUTED_DB_MANAGE UpdateDistributedDatabase

PatchDistributedDatabase

ConfigureDistributedDatabaseSharding

RotateDistributedDatabasePasswords

StartDistributedDatabase

StopDistributedDatabase

ChangeDistributedDbBackupConfig

ValidateDistributedDatabaseNetwork

ConfigureDistributedDatabaseGsms

UploadDistributedDatabaseSignedCertificateAndGenerateWallet

GenerateDistributedDatabaseGsmCertificateSigningRequest

AddDistributedDatabaseGdsControlNode
DISTRIBUTED_DB_MOVE ChangeDistributedDatabaseCompartment
CREATE  
UPDATE+ UPDATE+
DISTRIBUTED_DB_CREATE CreateDistributedDatabase
DELETE  
CREATE+ CREATE+
DISTRIBUTED_DB_DELETE DeleteDistributedDatabase

Distributed-database-privateendpoint

Permission APIs Fully Covered
INSPECT  
DISTRIBUTED_DB_PRIVATE_ENDPOINT_INSPECT ListDistributedDatabasePrivateEndpoints
READ  
INSPECT + INSPECT+
DISTRIBUTED_DB_PRIVATE_ENDPOINT_READ GetDistributedDatabasePrivateEndpoint
MANAGE  
READ + READ +
DISTRIBUTED_DB_PRIVATE_ENDPOINT_MANAGE UpdateDistributedDatabasePrivateEndpoint

ReinstateProxyInstance
DISTRIBUTED_DB_PRIVATE_ENDPOINT_MOVE ChangeDistributedDatabasePrivateEndpointCompartment
CREATE  
UPDATE+ UPDATE+
DISTRIBUTED_DB_PRIVATE_ENDPOINT_CREATE CreateDistributedDatabasePrivateEndpoint
DELETE  
CREATE+ CREATE+
DISTRIBUTED_DB_PRIVATE_ENDPOINT_DELETE DeleteDistributedDatabasePrivateEndpoint

Distributed-database-workrequest

Permission APIs Fully Covered
INSPECT  
DISTRIBUTED_DB_WORK_REQUEST_LIST ListWorkRequests
READ  
INSPECT + INSPECT+
DISTRIBUTED_DB_WORK_REQUEST_READ GetWorkRequest

ListWorkRequestErrors

ListWorkRequestLogs