The image shows 2, similarly configured, on-premises data centers and an Oracle Cloud Infrastructure (OCI) tenancy with a single region. 2 compartments span the region and on-premises sites: a virtual machine (VM) Cluster X compartment, and a Oracle Exadata Database Service on Cloud@Customer (ExaCC) infrastructure compartment.

On-premises, the VM Cluster X compartment includes a VM Cluster X instance, pluggable database (PDB) instances, and a container database (CDB). Container databases in the two on-premises sites are connected by Oracle Data Guard.

On-premises, the ExaCC infrastructure compartment contains an instance of Oracle Exadata Database Service on Cloud@Customer. They are connected to services such as Oracle Cloud Infrastructure Object Storage in the OCI region by using Oracle Cloud Infrastructure FastConnect and a dynamic routing gateway (DRG). Database backup is provided through on-premises instances of Zero Data Loss Recovery Appliance (ZDLRA) / ZFS network file system (NFS) appliance.

Each on-premises site includes a customer data center with Active Directory that communicate with each other and with Oracle Identity Cloud Service and Oracle Cloud Infrastructure Identity and Access Management in the OCI tenancy. Each site also provides vault, logging, and management services.

In addition to identity and access management services, the OCI region provides compartments, compartment policies and tagging, virtual cloud networks (VCN), dynamic routing and service gateways, and other services such as Oracle Cloud Infrastructure Object Storage. It also defines the following access groups:

Admin Tenant
Admin Network
Admin ExaCC Infrastructure
Admin Security
Admin VM Clusters
Admin Backup
Other groups as necessary