Set Up an Access Policy for a User

As an administrator, you can have finer control on the level of data access provided to each individual user of Oracle Log Analytics. Create an access policy that defines the permissions by using query conditions and assign that policy to a user.

Topics:

• Create an Access Policy

• Assign an Access Policy to a User

Create an Access Policy

1. From Oracle Log Analytics, click the OMC Navigation icon on the top left corner of the interface. In the OMC Navigation bar, click Administration Home.
2. In the Access Policies section, click Create Policy.
   Alternatively, in the Access Policies section, you can click the available number of access policies link and then in the Policies tab, click New.
   The New Policy page is displayed.
3. In the Policy Name field, enter the policy name. For example, enter DB WLS Fatal Errors.
4. In the Description field, enter the details of the policy, for example, the entity name, the user for whom the policy is created, and the restrictions that must be applied.
5. Under the Policy Conditions section, in the Query condition field, enter the query to specify the access condition. For example, to restrict the user from accessing logs that have errors of fatal severity, specify the query Severity != Fatal.
   For more examples of the queries that can be used to define the policy condition, click the icon.
6. Click Select Entities and select up to ten entities on which the specified conditions must be applied. For example, if the user must not access logs that have fatal severity errors from database and WebLogic server entities, then select WebLogic Server and Oracle Database.
7. Click Save.

The new access policy is created and listed in the Policies tab. You can now assign the new access policy that you created to a user to control the level of data access allowed to that user.

Assign an Access Policy to a User

1. From Oracle Log Analytics, click the OMC Navigation icon on the top left corner of the interface. In the OMC Navigation bar, click Administration Home.
2. In the Access Policies section, click the available number of access policies link.
   The Access Policies page is displayed. Click the Policy Assignments tab, and click New.
   The New Policy Assignment page is displayed.
3. In the Policy Name field, click the down arrow and select the access policy. For example, DB WLS Fatal Errors.
4. Click Add to add a user to assign the access policy. For example, [e-mail]. You can add more users to the policy assignment, if required.
5. Click Save.

The access policy is assigned to the users that you specified. The assignments are listed in the Policy Assignments page.