7 Auditing Operator Access Control Lifecycle Events

Learn how to audit Operator Access Control lifecycle events and critical activities of operators (log in and log out) on Exadata Cloud@Customer machine events.

For more information about auditing generally, see Overview of Audit.

Related Topics

Operator Access Control Event Types

The Operator Access Control resources emit events, which are structured messages that indicate changes in resources.

Table 7-1 Operator Access Control Event Types

Friendly Name Event Type

Operator Control - Create

com.oraclecloud.operatorcontrol.CreateOperatorControl

Operator Control - Update

com.oraclecloud.operatorcontrol.UpdateOperatorControl

Operator Control - Delete

com.oraclecloud.operatorcontrol.DeleteOperatorControl

Assign Operator Control - Create

com.oraclecloud.operatorcontrol.CreateOperatorControlAssignment

Assign Operator Control - Update

com.oraclecloud.operatorcontrol.UpdateOperatorControlAssignment

Assign Operator Control - Delete

com.oraclecloud.operatorcontrol.DeleteOperatorControlAssignment

Access Request - Approve

com.oraclecloud.operatorcontrol.ApproveAccessRequest

Access Request - AutoApprove

com.oraclecloud.operatorcontrol.AutoApproveAccessRequest

Access Request - Create

com.oraclecloud.operatorcontrol.CreateAccessRequest

AddSharedOperator

com.oraclecloud.operatoraccesscontrol.AddSharedOperator

Access Request - Reject

com.oraclecloud.operatorcontrol.RejectAccessRequest

Access Request - Revoke

com.oraclecloud.operatorcontrol.RevokeAccessRequest

Access Request - Expired

com.oraclecloud.operatorcontrol.ExpiredAccessRequest

Access Request - Closed

com.oraclecloud.operatorcontrol.ClosedAccessRequest

Access Request - Extend

com.oraclecloud.operatorcontrol.ExtendAccessRequest

Operator - Login

com.oraclecloud.operatorcontrol.OperatorLogin

Operator - Logout

com.oraclecloud.operatorcontrol.OperatorLogout

Example 7-1 Reference Event for Operator Control - Create

{
  "eventType": "com.oraclecloud.operatorcontrol.createoperatorcontrol",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "356eeecc-4cd9-4bcd-90c2-478937c52681",
  "eventTime": "2020-09-11T10:07:11.464Z",
  "contentType": "application/json",
  "data": {
    "eventGroupingId": null,
    "eventName": "CreateOperatorControl",
    "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
    "compartmentName": "ccavcn",
    "resourceName": "OperatorControl",
    "resourceId": "ocid1.opctloperatorcontrol.oc1..aaaaaaaa5eyhyfocwewepjiacgoihjrjxnpb4sqt3hdzqow5knof7yrdjhpq",
    "availabilityDomain": "AD1",
    "freeformTags": null,
    "definedTags": null,
    "identity": {
      "principalName": "test.user@oracle.com",
      "principalId": "ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba",
      "authType": "natv",
      "callerName": null,
      "callerId": null,
      "tenantId": "ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q",
      "ipAddress": "172.23.128.3",
      "credentials": "ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q/ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba/b3:39:8d:75:85:1a:01:b0:f8:cd:68:0a:23:05:7b:76",
      "userAgent": "Oracle-JavaSDK/1.15.0 (Linux/4.1.12-124.28.6.el7uek.x86_64; Java/1.8.0_212; OpenJDK 64-Bit Server VM/25.212-b04)",
      "consoleSessionId": null
    },
    "request": {
      "id": "request-policy-12345/5902EC63E925318838B62A66E57528FD/4E0EBF1295A02B7FFFB1B8DD8E41A759",
      "path": "/20200630/operatorControls",
      "action": "POST",
      "parameters": {},
      "headers": {
        "Accept": [
          "application/json"
        ],
        "Authorization": [
          "Signature headers=\"date (request-target) host content-length content-type x-content-sha256\",keyId=\"ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q/ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba/b3:39:8d:75:85:1a:01:b0:f8:cd:68:0a:23:05:7b:76\",algorithm=\"rsa-sha256\",signature=\"*****\",version=\"1\""
        ],
        "Connection": [
          "keep-alive"
        ],
        "Content-Length": [
          "827"
        ],
        "Content-Type": [
          "application/json"
        ],
        "Date": [
          "Fri, 11 Sep 2020 10:07:11 GMT"
        ],
        "User-Agent": [
          "Oracle-JavaSDK/1.15.0 (Linux/4.1.12-124.28.6.el7uek.x86_64; Java/1.8.0_212; OpenJDK 64-Bit Server VM/25.212-b04)"
        ],
        "X-Forwarded-For": [
          "209.17.43.241,0.0.0.0"
        ],
        "X-Real-IP": [
          "209.17.43.241"
        ],
        "X-Real-Port": [
          "26413"
        ],
        "oci-original-url": [
          "https://operator-access-control-dev.us-ashburn-1.oci.oc-test.com/20200630/operatorControls"
        ],
        "opc-client-info": [
          "Oracle-JavaSDK/1.15.0"
        ],
        "opc-request-id": [
          "request-policy-12345"
        ],
        "opc-retry-token": [
          "5378a205-f978-41b1-bbc4-8a9032a02d3a"
        ],
        "x-content-sha256": [
          "HxwrSen2PgmZEWl0mwoeOBszNTiR2nxyk1ZVGQgKGVc="
        ]
      }
    },
    "response": {
      "status": "200",
      "responseTime": "2020-09-11T10:07:13.216Z",
      "headers": {
        "Content-Length": [
          "1222"
        ],
        "Content-Type": [
          "application/json"
        ],
        "Date": [
          "Fri, 11 Sep 2020 10:07:11 GMT"
        ],
        "opc-request-id": [
          "request-policy-12345/5902EC63E925318838B62A66E57528FD/4E0EBF1295A02B7FFFB1B8DD8E41A759"
        ]
      },
      "payload": null,
      "message": "OperatorControl for ocid1.opctloperatorcontrol.oc1..aaaaaaaa5eyhyfocwewepjiacgoihjrjxnpb4sqt3hdzqow5knof7yrdjhpq has been executed "
    },
    "stateChange": {
      "previous": null,
      "current": {
        "OperatorControl": {
          "approverGroupsList": [
            "ocid1.group.oc1..aaaaaaaaszj62swosn4xbz3xgkungjnvi2hbrrxx3d7ojtzulukvyewyqdva",
            "ocid1.group.oc1..aaaaaaaajwlf3b5slsljcmeix3ki53ivk56ew7mikkxm6hdzyu7eyijgmbsq"
          ],
          "approversList": [
            "ocid1.user.oc1..aaaaaaaanfy5pvezsopjdzs26sorubsmlidvf7m32raoie6dtwhyyxwlzgda",
            "ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba"
          ],
          "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
          "description": "Creating an demo OpControl where all accessrequests are preapproved",
          "id": "ocid1.opctloperatorcontrol.oc1..aaaaaaaa5eyhyfocwewepjiacgoihjrjxnpb4sqt3hdzqow5knof7yrdjhpq",
          "isFullyPreApproved": true,
          "lifecycleState": "CREATED",
          ],
          "operatorControlName": "All Preapproved OpControl Policy",
          "systemMessage": "Preapproved OpControl Policy disclaimer",
          "timeOfCreation": "2020-09-11T10:07:12.750Z",
          "timeOfModification": "2020-09-11T10:07:12.750Z"
        }
      }
    },
    "additionalDetails": {
      "operatorcontrol_name": "All Preapproved OpControl Policy",
      "operatorcontrol_ocid": "ocid1.opctloperatorcontrol.oc1..aaaaaaaa5eyhyfocwewepjiacgoihjrjxnpb4sqt3hdzqow5knof7yrdjhpq"
    }
  }
}

Example 7-2 Reference Event for Assign Operator Control - Create

{
  "eventType": "com.oraclecloud.operatorcontrol.createoperatorcontrolassignment",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "f0041577-76fd-4d51-9275-38812e4d62c6",
  "eventTime": "2020-09-11T10:20:15.759Z",
  "contentType": "application/json",
  "data": {
    "eventGroupingId": null,
    "eventName": "CreateOperatorControlAssignment",
    "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
    "compartmentName": "ccavcn",
    "resourceName": "OperatorControlAssignment",
    "resourceId": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
    "availabilityDomain": "AD1",
    "freeformTags": null,
    "definedTags": null,
    "identity": {
      "principalName": "test.user@oracle.com",
      "principalId": "ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba",
      "authType": "natv",
      "callerName": null,
      "callerId": null,
      "tenantId": "ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q",
      "ipAddress": "172.23.128.3",
      "credentials": "ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q/ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba/b3:39:8d:75:85:1a:01:b0:f8:cd:68:0a:23:05:7b:76",
      "userAgent": "Oracle-JavaSDK/1.15.0 (Linux/4.1.12-124.28.6.el7uek.x86_64; Java/1.8.0_212; OpenJDK 64-Bit Server VM/25.212-b04)",
      "consoleSessionId": null
    },
    "request": {
      "id": "request-policy-12345/4E4D1E067FC21B2D07384FD54F35728C/515F40CD01EED0C6135D399009A88A2C",
      "path": "/20200630/operatorControlAssignments",
      "action": "POST",
      "parameters": {},
      "headers": {
        "Accept": [
          "application/json"
        ],
        "Authorization": [
          "Signature headers=\"date (request-target) host content-length content-type x-content-sha256\",keyId=\"ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q/ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba/b3:39:8d:75:85:1a:01:b0:f8:cd:68:0a:23:05:7b:76\",algorithm=\"rsa-sha256\",signature=\"*****\",version=\"1\""
        ],
        "Connection": [
          "keep-alive"
        ],
        "Content-Length": [
          "619"
        ],
        "Content-Type": [
          "application/json"
        ],
        "Date": [
          "Fri, 11 Sep 2020 10:20:15 GMT"
        ],
        "User-Agent": [
          "Oracle-JavaSDK/1.15.0 (Linux/4.1.12-124.28.6.el7uek.x86_64; Java/1.8.0_212; OpenJDK 64-Bit Server VM/25.212-b04)"
        ],
        "X-Forwarded-For": [
          "209.17.43.241,0.0.0.0"
        ],
        "X-Real-IP": [
          "209.17.43.241"
        ],
        "X-Real-Port": [
          "26635"
        ],
        "oci-original-url": [
          "https://operator-access-control-dev.us-ashburn-1.oci.oc-test.com/20200630/operatorControlAssignments"
        ],
        "opc-client-info": [
          "Oracle-JavaSDK/1.15.0"
        ],
        "opc-request-id": [
          "request-policy-12345"
        ],
        "opc-retry-token": [
          "22131e35-9494-4102-a3b9-9f86de408e46"
        ],
        "x-content-sha256": [
          "GgU7gwghhf5Bu/3HwqQGD7lyyGKYPbF9Y51zS+j8mZw="
        ]
      }
    },
    "response": {
      "status": "200",
      "responseTime": "2020-09-11T10:20:17.358Z",
      "headers": {
        "Content-Length": [
          "1093"
        ],
        "Content-Type": [
          "application/json"
        ],
        "Date": [
          "Fri, 11 Sep 2020 10:20:15 GMT"
        ],
        "opc-request-id": [
          "request-policy-12345/4E4D1E067FC21B2D07384FD54F35728C/515F40CD01EED0C6135D399009A88A2C"
        ]
      },
      "payload": null,
      "message": "OperatorControlAssignment for ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq has been executed "
    },
    "stateChange": {
      "previous": null,
      "current": {
        "OperatorControlAssignment": {
          "assignerId": "ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba",
          "comment": "deploying on scaqak01adm0304_jyq",
          "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
          "detachmentDescription": "",
          "id": "ocid1.opctloperatorcontrolassignment.oc1..aaaaaaaabtxbcqkpicasbmm7kmbfumjdeaqwqv3xp5sn7g7v2babncnlga2a",
          "isEnforcedAlways": true,
          "lifecycleState": "CREATED",
          "operatorControlId": "ocid1.opctloperatorcontrol.oc1..aaaaaaaa52eqysdkogsv2qd6apw3iafsrq5rxrhqu4ninanpd3dwmc5ns4ca",
          "resourceCompartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
          "resourceId": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
          "resourceName": "scaqak01adm0304_jyq",
          "timeOfAssignment": "2020-09-11T10:20:15.931Z",
          "unassignerId": ""
        }
      }
    },
    "additionalDetails": {
      "exadatainfrastructure_ocid": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
      "operatorcontrol_name": "All Preapproved OpControl Policy",
      "operatorcontrol_ocid": "ocid1.opctloperatorcontrol.oc1..aaaaaaaa52eqysdkogsv2qd6apw3iafsrq5rxrhqu4ninanpd3dwmc5ns4ca"
    }
  }
}

Example 7-3 Reference Event for Access Request - AutoApprove

{
  "eventType": "com.oraclecloud.operatorcontrol.autoapproveaccessrequest",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "00d1a1f7-ab1b-4810-8f94-41b4328cf75d",
  "eventTime": "2021-08-04T16:40:19.428Z",
  "contentType": "application/json",
  "data": {
     "eventGroupingId": null,
     "eventName": "AutoApproveAccessRequest",
     "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
     "compartmentName": "ccavcn",
     "resourceName": "OpCtl Dev AVM",
     "resourceId": "ocid1.autonomousvmcluster.oc1.sea.abzwkljspg36g7vt2iuze7xpbt7zzivxeeyesngdtork3nscaqar05adm0102clu11-avm5",
     "availabilityDomain": "ad2",
     "freeformTags": null,
     "definedTags": null,
     "identity": null,
     "request": null,
     "response": null,
     "stateChange": null,
     "additionalDetails": {
         "accessRequestId": "ocid1.opctlaccessrequest.oc1.iad.aaaaaaaaeut2ul7yzz437g3axvxszjqeevabgej6twvrqmb5ocryte24hbpa"
     }
  }
}

Example 7-4 Reference Event for Access Request - Create

{
  "eventType": "com.oraclecloud.operatorcontrol.createaccessrequest",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "cfa7a0f0-579c-4bc4-b1d7-e403d9597eb8",
  "eventTime": "2021-08-04T16:40:19.455Z",
  "contentType": "application/json",
  "data": {
     "eventGroupingId": null,
     "eventName": "CreateAccessRequest",
     "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
     "compartmentName": "ccavcn",
     "resourceName": "AccessRequest",
     "resourceId": "ocid1.autonomousvmcluster.oc1.sea.abzwkljspg36g7vt2iuze7xpbt7zzivxeeyesngdtork3nscaqar05adm0102clu11-avm5",
     "availabilityDomain": "ad2",
     "freeformTags": null,
     "definedTags": null,
     "identity": null,
     "request": null,
     "response": {
        "status": "200",
        "responseTime": "2021-08-04T16:40:19.455Z",
        "headers": null,
        "payload": {
            "responsePayload": "{\"id\":\"ocid1.opctlaccessrequest.oc1.iad.aaaaaaaaeut2ul7yzz437g3axvxszjqeevabgej6twvrqmb5ocryte24hbpa\",\"requestId\":\"REQ20210804164018662\",\"accessReasonSummary\":\"testing avm notification 1\",\"resourceId\":\"ocid1.autonomousvmcluster.oc1.sea.abzwkljspg36g7vt2iuze7xpbt7zzivxeeyesngdtork3nscaqar05adm0102clu11-avm5\",\"resourceName\":\"OpCtl Dev AVM\",\"compartmentId\":\"ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a\",\"resourceType\":\"AUTONOMOUSVMCLUSTER\",\"actionRequestsList\":[\"Autonomous Exadata VM Cluster Full Access\"],\"severity\":\"S4\",\"duration\":24,\"extendDuration\":0,\"isAutoApproved\":true,\"lifecycleState\":\"PREAPPROVED\",\"timeOfCreation\":1628095219006,\"timeOfModification\":1628095219222,\"userId\":\"System\",\"approverComment\":\"Auto Approving\",\"opctlId\":\"ocid1.opctloperatorcontrol.oc1.iad.aaaaaaaa73dyogjdvh4qkyocwpoii2s7tormmokvl3lbdi76kr4fpxvebsaq\",\"opctlName\":\"hp_autonomous_all_approve_1\",\"systemMessage\":\"Test msg\",\"auditType\":[\"command-audit\"]}"
         },
        "message": "com.oraclecloud.operatorcontrol.createaccessrequest"
    },
    "stateChange": null,
     "additionalDetails": {
        "accessRequestId": "ocid1.opctlaccessrequest.oc1.iad.aaaaaaaaeut2ul7yzz437g3axvxszjqeevabgej6twvrqmb5ocryte24hbpa",
        "exadatainfrastructure_name": "OpCtl Dev AVM",
        "exadatainfrastructure_ocid": "ocid1.autonomousvmcluster.oc1.sea.abzwkljspg36g7vt2iuze7xpbt7zzivxeeyesngdtork3nscaqar05adm0102clu11-avm5",
        "opCtlId": "ocid1.opctloperatorcontrol.oc1.iad.aaaaaaaa73dyogjdvh4qkyocwpoii2s7tormmokvl3lbdi76kr4fpxvebsaq",
        "opCtlName": "hp_autonomous_all_approve_1",
        "operatorId": "ocid1.user.oc1..aaaaaaaaythelnxpc775wp6tjwwc3kkipzilregyl4iy4pic5yvpsk3ol5oa",
       "reason": "testing avm notification 1"
    }
 }
}

Example 7-5 Reference Event for add Shared Operator

{
  "eventType": "com.oraclecloud.OperatorAccessControl.AddSharedOperator",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "f68ba0f3-e58c-44da-8820-76dcfd2ba5dd",
  "eventTime": "2020-09-11T11:36:14.870Z",
  "contentType": "application/json",
  "data": {
    "eventGroupingId": null,
    "eventName": "AddSharedOperator",
    "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
    "compartmentName": "ccavcn",
    "resourceName": "AccessRequest",
    "resourceId": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
    "availabilityDomain": "ad1",
    "freeformTags": null,
    "definedTags": null,
    "identity": null,
    "request": {
      "id": "request-policy-12345",
      "path": "",
      "action": "POST",
      "parameters": {
        "requestData": [
          "{\"publicKey\":\"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWqpc33qla70w4M0bXxur2EB53HBFypX3ZscYw8rLDD9BPTFknVdUBsDdjtqsDL0rKVtyJPjcV/0Tx5lqqAnoJ3A5YD2HrYpiec25MC1kAg1uprXvfz5KOQJazFqSWZcgD4eCSv5FwSOcqrmntZxc+03QbPFGedkr3O5TRRaheMd9L7eOZGZpDKQolawnZDPf1fejfb7uUjISf/6yLnn6Wd8qUBTOd1gxllOLixC7Dsr3m7umje3auxqCvzr6KkggrkoTfCaFbd2uonEPL+DZgGlp9q/a30Qhcw4Ia5C95Bu3lUzV/hcBvKQAsqZBjUUr5mbJ73DR5FfqFCsjwwqvf\",\"emailId\":\"hprabhakara@gmail.com\",\"reason\":\"adding new user for analyzing some issue in scaqak01adm0304\",\"nationality\":\"USA\",\"soilLocation\":\"USA\"}"
        ]
      },
      "headers": null
    },
    "response": {
      "status": "202",
      "responseTime": "2020-09-11T11:36:14.870Z",
      "headers": null,
      "payload": null,
      "message": "com.oraclecloud.operatorcontrol.addsharedoperator"
    },
    "stateChange": null,
    "additionalDetails": {
      "accessRequestId": "ocid1.opctlaccessrequest.oc1..aaaaaaaalovaxbsvmbzlf4twcds5ymghqwe4aoq4kco2skdc3elqn5tspkpa",
      "exadatainfrastructure_name": "scaqak01adm0304_jyq",
      "exadatainfrastructure_ocid": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
      "operatorcontrol_name": "all preapproved opcontrol policy",
      "operatorcontrol_ocid": "ocid1.opctloperatorcontrol.oc1..aaaaaaaa52eqysdkogsv2qd6apw3iafsrq5rxrhqu4ninanpd3dwmc5ns4ca"
    }
  }
}

Example 7-6 Reference Event for Access Request - Reject

{
  "eventType": "com.oraclecloud.operatorcontrol.rejectaccessrequest",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "49ebde1a-9a95-4a55-bebf-4aa347f19c0e",
  "eventTime": "2020-09-11T13:34:50.980Z",
  "contentType": "application/json",
  "data": {
    "eventGroupingId": null,
    "eventName": "RejectAccessRequest",
    "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
    "compartmentName": "ccavcn",
    "resourceName": "AccessRequest",
    "resourceId": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
    "availabilityDomain": "AD1",
    "freeformTags": null,
    "definedTags": null,
    "identity": {
      "principalName": "kailash.vimal@oracle.com",
      "principalId": "ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba",
      "authType": "natv",
      "callerName": null,
      "callerId": null,
      "tenantId": "ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q",
      "ipAddress": "172.23.128.3",
      "credentials": "ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q/ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba/b3:39:8d:75:85:1a:01:b0:f8:cd:68:0a:23:05:7b:76",
      "userAgent": "Oracle-JavaSDK/1.15.0 (Linux/4.1.12-124.28.6.el7uek.x86_64; Java/1.8.0_212; OpenJDK 64-Bit Server VM/25.212-b04)",
      "consoleSessionId": null
    },
    "request": {
      "id": "request-policy-12345/773E1E920A98D3E2FC2AF46C7E248007/F5F1D88A5AB2B30E9FDEE3AA1FFCAB4A",
      "path": "/20200630/accessRequests/ocid1.opctlaccessrequest.oc1..aaaaaaaaj3n6z3nvndxj2f5qi7qjdgnojojaxbs5olfekkj2xxztddsbwm6a/action/reject",
      "action": "POST",
      "parameters": {},
      "headers": {
        "Accept": [
          "application/json"
        ],
        "Authorization": [
          "Signature headers=\"date (request-target) host content-length content-type x-content-sha256\",keyId=\"ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q/ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba/b3:39:8d:75:85:1a:01:b0:f8:cd:68:0a:23:05:7b:76\",algorithm=\"rsa-sha256\",signature=\"*****\",version=\"1\""
        ],
        "Connection": [
          "keep-alive"
        ],
        "Content-Length": [
          "55"
        ],
        "Content-Type": [
          "application/json"
        ],
        "Date": [
          "Fri, 11 Sep 2020 13:34:50 GMT"
        ],
        "User-Agent": [
          "Oracle-JavaSDK/1.15.0 (Linux/4.1.12-124.28.6.el7uek.x86_64; Java/1.8.0_212; OpenJDK 64-Bit Server VM/25.212-b04)"
        ],
        "X-Forwarded-For": [
          "209.17.43.241,0.0.0.0"
        ],
        "X-Real-IP": [
          "209.17.43.241"
        ],
        "X-Real-Port": [
          "29932"
        ],
        "oci-original-url": [
          "https://operator-access-control-dev.us-ashburn-1.oci.oc-test.com/20200630/accessRequests/ocid1.opctlaccessrequest.oc1..aaaaaaaaj3n6z3nvndxj2f5qi7qjdgnojojaxbs5olfekkj2xxztddsbwm6a/action/reject"
        ],
        "opc-client-info": [
          "Oracle-JavaSDK/1.15.0"
        ],
        "opc-request-id": [
          "request-policy-12345"
        ],
        "opc-retry-token": [
          "aa8c3689-b129-4749-9e09-9692afe9c7b4"
        ],
        "x-content-sha256": [
          "RgyYB+BnP9UxhdhWZ6VRTcJtNaFctHYM9Y6lxQOcDPU="
        ]
      }
    },
    "response": {
      "status": "204",
      "responseTime": "2020-09-11T13:34:51.612Z",
      "headers": {
        "Date": [
          "Fri, 11 Sep 2020 13:34:50 GMT"
        ],
        "opc-request-id": [
          "request-policy-12345/773E1E920A98D3E2FC2AF46C7E248007/F5F1D88A5AB2B30E9FDEE3AA1FFCAB4A"
        ]
      },
      "payload": null,
      "message": "AccessRequest for ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq has been executed "
    },
    "stateChange": {
      "previous": null,
      "current": {
        "AccessRequest": {
          "id": "ocid1.opctlaccessrequest.oc1..aaaaaaaaj3n6z3nvndxj2f5qi7qjdgnojojaxbs5olfekkj2xxztddsbwm6a",
          "principalId": "ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba",
          "requestMap": {
            "action": "POST",
            "path": "",
            "requesetParams": "{\"approverComment\":\"rejected as this need not be done\"}",
            "requestId": "request-policy-12345"
          },
          "responseMap": {
            "status": "202"
          }
        }
      }
    },
    "additionalDetails": {
      "accessRequestId": "ocid1.opctlaccessrequest.oc1..aaaaaaaaj3n6z3nvndxj2f5qi7qjdgnojojaxbs5olfekkj2xxztddsbwm6a",
      "exadatainfrastructure_name": "scaqak01adm0304_jyq",
      "exadatainfrastructure_ocid": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
      "operatorcontrol_name": "restricted preapproved opcontrol policy",
      "operatorcontrol_ocid": "ocid1.opctloperatorcontrol.oc1..aaaaaaaa2rfpcb6s5ktvibiw3kzwhwjnqje5jvhkjiqsicikevpyu77xdtca"
    }
  }
}

Example 7-7 Reference Event for Access Request - Revoke

{
  "eventType": "com.oraclecloud.operatorcontrol.revokeaccessrequest",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "c437d6f6-f378-4736-8ca9-4ebf9f5ca68c",
  "eventTime": "2020-09-11T13:34:51.689Z",
  "contentType": "application/json",
  "data": {
    "eventGroupingId": null,
    "eventName": "RevokeAccessRequest",
    "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
    "compartmentName": "ccavcn",
    "resourceName": "AccessRequest",
    "resourceId": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
    "availabilityDomain": "AD1",
    "freeformTags": null,
    "definedTags": null,
    "identity": {
      "principalName": "kailash.vimal@oracle.com",
      "principalId": "ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba",
      "authType": "natv",
      "callerName": null,
      "callerId": null,
      "tenantId": "ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q",
      "ipAddress": "172.23.128.3",
      "credentials": "ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q/ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba/b3:39:8d:75:85:1a:01:b0:f8:cd:68:0a:23:05:7b:76",
      "userAgent": "Oracle-JavaSDK/1.15.0 (Linux/4.1.12-124.28.6.el7uek.x86_64; Java/1.8.0_212; OpenJDK 64-Bit Server VM/25.212-b04)",
      "consoleSessionId": null
    },
    "request": {
      "id": "request-policy-12345/E453EAB9C08AAAB77993E80FBBD965E9/FE3768C7135F41A65981F9B1950D1B21",
      "path": "/20200630/accessRequests/ocid1.opctlaccessrequest.oc1..aaaaaaaau5r3vhpgdu4k5svowjqydkh6qugynwyoeb3egep4qdi4fvuoidla/action/revoke",
      "action": "POST",
      "parameters": {},
      "headers": {
        "Accept": [
          "application/json"
        ],
        "Authorization": [
          "Signature headers=\"date (request-target) host content-length content-type x-content-sha256\",keyId=\"ocid1.tenancy.oc1..aaaaaaaavrjqbg24tohoixm7bju6otfn5au73atpa7d6atxf36zw2espdu3q/ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba/b3:39:8d:75:85:1a:01:b0:f8:cd:68:0a:23:05:7b:76\",algorithm=\"rsa-sha256\",signature=\"*****\",version=\"1\""
        ],
        "Connection": [
          "keep-alive"
        ],
        "Content-Length": [
          "41"
        ],
        "Content-Type": [
          "application/json"
        ],
        "Date": [
          "Fri, 11 Sep 2020 13:34:51 GMT"
        ],
        "User-Agent": [
          "Oracle-JavaSDK/1.15.0 (Linux/4.1.12-124.28.6.el7uek.x86_64; Java/1.8.0_212; OpenJDK 64-Bit Server VM/25.212-b04)"
        ],
        "X-Forwarded-For": [
          "209.17.43.241,0.0.0.0"
        ],
        "X-Real-IP": [
          "209.17.43.241"
        ],
        "X-Real-Port": [
          "29932"
        ],
        "oci-original-url": [
          "https://operator-access-control-dev.us-ashburn-1.oci.oc-test.com/20200630/accessRequests/ocid1.opctlaccessrequest.oc1..aaaaaaaau5r3vhpgdu4k5svowjqydkh6qugynwyoeb3egep4qdi4fvuoidla/action/revoke"
        ],
        "opc-client-info": [
          "Oracle-JavaSDK/1.15.0"
        ],
        "opc-request-id": [
          "request-policy-12345"
        ],
        "opc-retry-token": [
          "7c6dbdff-419b-4275-be3a-db16bba9c239"
        ],
        "x-content-sha256": [
          "DIRn1fPko/9JuYnwL5vzFO0I7kuOp+coAzeY8by4Txk="
        ]
      }
    },
    "response": {
      "status": "204",
      "responseTime": "2020-09-11T13:34:53.463Z",
      "headers": {
        "Date": [
          "Fri, 11 Sep 2020 13:34:51 GMT"
        ],
        "opc-request-id": [
          "request-policy-12345/E453EAB9C08AAAB77993E80FBBD965E9/FE3768C7135F41A65981F9B1950D1B21"
        ]
      },
      "payload": null,
      "message": "AccessRequest for ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq has been executed "
    },
    "stateChange": {
      "previous": null,
      "current": {
        "AccessRequest": {
          "id": "ocid1.opctlaccessrequest.oc1..aaaaaaaau5r3vhpgdu4k5svowjqydkh6qugynwyoeb3egep4qdi4fvuoidla",
          "principalId": "ocid1.user.oc1..aaaaaaaaaazh2gydmfjnl3sstigrjac4z5tvvn4zkt2khofzfumawohaynba",
          "requestMap": {
            "action": "POST",
            "path": "",
            "requesetParams": "{\"approverComment\":\"revoked by Customer\"}",
            "requestId": "request-policy-12345"
          },
          "responseMap": {
            "status": "202"
          }
        }
      }
    },
    "additionalDetails": {
      "accessRequestId": "ocid1.opctlaccessrequest.oc1..aaaaaaaau5r3vhpgdu4k5svowjqydkh6qugynwyoeb3egep4qdi4fvuoidla",
      "exadatainfrastructure_name": "scaqak01adm0304_jyq",
      "exadatainfrastructure_ocid": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
      "operatorcontrol_name": "restricted preapproved opcontrol policy",
      "operatorcontrol_ocid": "ocid1.opctloperatorcontrol.oc1..aaaaaaaa2rfpcb6s5ktvibiw3kzwhwjnqje5jvhkjiqsicikevpyu77xdtca"
    }
  }
}

Example 7-8 Reference Event for Access Request - Expired

{
  "eventType": "com.oraclecloud.OperatorAccessControl.ExpireAccessRequest",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "0739bacf-7c3a-4ff5-a477-9c9fc7482ba1",
  "eventTime": "2020-09-11T12:11:37.964Z",
  "contentType": "application/json",
  "data": {
    "eventGroupingId": null,
    "eventName": "ExpireAccessRequest",
    "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
    "compartmentName": "ccavcn",
    "resourceName": "OpCtl SAR ExaCC (scaqae08adm0304clu5)",
    "resourceId": "ocid1.exadatainfrastructure.oc1.sea.abzwkljrjlviym5wek52ccc67yoqzbf37kyz7rsq43nyb6am2phny57qho7q",
    "availabilityDomain": "ad2",
    "freeformTags": null,
    "definedTags": null,
    "identity": null,
    "request": null,
    "response": null,
    "stateChange": null,
    "additionalDetails": {
      "accessRequestId": "ocid1.opctlaccessrequest.oc1..aaaaaaaaiilwvp3pu4kiz62d5k4qjemxoerzrpsdqbk67kxq64yusefsfcsa"
    }
  }
}

Example 7-9 Reference Event for Access Request - Closed

{
  "eventType": "com.oraclecloud.OperatorAccessControl.CloseAccessRequest",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "e2a56a89-bebc-47c0-b223-4c6dd8adbec6",
  "eventTime": "2020-09-11T13:34:59.248Z",
  "contentType": "application/json",
  "data": {
    "eventGroupingId": null,
    "eventName": "CloseAccessRequest",
    "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
    "compartmentName": "ccavcn",
    "resourceName": "AccessRequest",
    "resourceId": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
    "availabilityDomain": "ad1",
    "freeformTags": null,
    "definedTags": null,
    "identity": null,
    "request": {
      "id": "request-policy-12345",
      "path": "",
      "action": "POST",
      "parameters": {
        "requestData": [
          "{\"description\":\"closing acessrequest by USER_OCID_ALL as the work is finished\"}"
        ]
      },
      "headers": null
    },
    "response": {
      "status": "202",
      "responseTime": "2020-09-11T13:34:59.248Z",
      "headers": null,
      "payload": null,
      "message": "com.oraclecloud.operatorcontrol.closedaccessrequest"
    },
    "stateChange": null,
    "additionalDetails": {
      "accessRequestId": "ocid1.opctlaccessrequest.oc1..aaaaaaaambvqfgtb76dva566k4rwi3yev73abd675wyvx34rw47tyod5s6va",
      "exadatainfrastructure_name": "scaqak01adm0304_jyq",
      "exadatainfrastructure_ocid": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
      "operatorcontrol_name": "restricted preapproved opcontrol policy",
      "operatorcontrol_ocid": "ocid1.opctloperatorcontrol.oc1..aaaaaaaa2rfpcb6s5ktvibiw3kzwhwjnqje5jvhkjiqsicikevpyu77xdtca"
    }
  }
}

Example 7-10 Reference Event for Access Request - Extend

{
  "eventType": "com.oraclecloud.OperatorAccessControl.ExtendAccessRequest",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "282f6c6b-a1c2-4e63-b0e4-b3ec211bb3a7",
  "eventTime": "2020-09-11T14:25:08.871Z",
  "contentType": "application/json",
  "data": {
    "eventGroupingId": null,
    "eventName": "ExtendAccessRequest",
    "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
    "compartmentName": "ccavcn",
    "resourceName": "AccessRequest",
    "resourceId": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
    "availabilityDomain": "ad1",
    "freeformTags": null,
    "definedTags": null,
    "identity": null,
    "request": {
      "id": "request-policy-12345",
      "path": "",
      "action": "POST",
      "parameters": {
        "requestData": [
          "{\"description\":\"request for extension\",\"duration\":2}"
        ]
      },
      "headers": null
    },
    "response": {
      "status": "202",
      "responseTime": "2020-09-11T14:25:08.871Z",
      "headers": null,
      "payload": null,
      "message": "com.oraclecloud.operatorcontrol.extendaccessrequest"
    },
    "stateChange": null,
    "additionalDetails": {
      "accessRequestId": "ocid1.opctlaccessrequest.oc1..aaaaaaaakabn5u3nb4c5xwxvpa6ewn7pa4wtuzmqpnvugp5pmnazr3zz75vq",
      "exadatainfrastructure_name": "scaqak01adm0304_jyq",
      "exadatainfrastructure_ocid": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
      "operatorcontrol_name": "restricted preapproved opcontrol policy",
      "operatorcontrol_ocid": "ocid1.opctloperatorcontrol.oc1..aaaaaaaa2rfpcb6s5ktvibiw3kzwhwjnqje5jvhkjiqsicikevpyu77xdtca"
    }
  }
}

Example 7-11 Reference Event for Operator - Login

{
  "eventType": "com.oraclecloud.OperatorAccessControl.operatorlogin",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "1184e9a9-236d-41de-a7ab-6448ed4849bd",
  "eventTime": "2020-09-04T18:27:00.000Z",
  "contentType": "application/json",
  "data": {
    "eventGroupingId": null,
    "eventName": "operatorlogin",
    "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
    "compartmentName": "ccavcn",
    "resourceName": "scaqak01adm0304",
    "resourceId": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
    "availabilityDomain": "ad1",
    "freeformTags": null,
    "definedTags": null,
    "identity": null,
    "request": null,
    "response": {
      "status": "200",
      "responseTime": "2020-09-04T18:27:00.000Z",
      "headers": null,
      "payload": null,
      "message": "com.oraclecloud.OperatorAccessControl.operatorlogin"
    },
    "stateChange": {
      "previous": null,
      "current": {
        "OperatorAccessControl": "{\"EventName\":\"cca_audtilog_ocid1.opctlaccessrequest.oc1..aaaaaaaanbjh226h7nhfewx34sfdkojsqapnu3dof6cnkzoypxy27jk2f55q\",\"DisplayName\":\"operatorlogin\"}"
      }
    },
    "additionalDetails": {
      "desthost": "10.31.18.82",
      "loginId": "9c649b4afafa4e54bcd3d95698346ceb",
      "accessRequestId": "ocid1.opctlaccessrequest.oc1..aaaaaaaanbjh226h7nhfewx34sfdkojsqapnu3dof6cnkzoypxy27jk2f55q"
    }
  }
}

Example 7-12 Reference Event for Operator - Logout

{
  "eventType": "com.oraclecloud.OperatorAccessControl.operatorlogout",
  "cloudEventsVersion": "0.1",
  "eventTypeVersion": "2.0",
  "source": "OperatorAccessControl",
  "eventId": "9a0783fb-66cc-470e-a124-5a0bd0e80857",
  "eventTime": "2020-09-04T18:27:28.000Z",
  "contentType": "application/json",
  "data": {
    "eventGroupingId": null,
    "eventName": "operatorlogout",
    "compartmentId": "ocid1.compartment.oc1..aaaaaaaa4fboeyqkh2h4nft34qgdavsxmd7wgb2erbtvaks5f477qtn2qc5a",
    "compartmentName": "ccavcn",
    "resourceName": "scaqak01adm0304",
    "resourceId": "ocid1.exadatainfrastructure.oc1.sea.abzwkljs5syf3f2pbypg5hn3zibypiqedccnomexcpd6judr5ecqijavkjyq",
    "availabilityDomain": "ad1",
    "freeformTags": null,
    "definedTags": null,
    "identity": null,
    "request": null,
    "response": {
      "status": "200",
      "responseTime": "2020-09-04T18:27:28.000Z",
      "headers": null,
      "payload": null,
      "message": "com.oraclecloud.OperatorAccessControl.operatorlogout"
    },
    "stateChange": {
      "previous": null,
      "current": {
        "OperatorAccessControl": "{\"EventName\":\"cca_audtilog_ocid1.opctlaccessrequest.oc1..aaaaaaaanbjh226h7nhfewx34sfdkojsqapnu3dof6cnkzoypxy27jk2f55q\",\"DisplayName\":\"operatorlogout\"}"
      }
    },
    "additionalDetails": {
      "desthost": "?",
      "loginId": "9c649b4afafa4e54bcd3d95698346ceb",
      "accessRequestId": "ocid1.opctlaccessrequest.oc1..aaaaaaaanbjh226h7nhfewx34sfdkojsqapnu3dof6cnkzoypxy27jk2f55q"
    }
  }
}

Viewing Audit Log Events

Audit provides records of API operations performed against supported services as a list of log events.

For more information on searching logs, see Using the Console.