Types de ressource

La gestion des dépendances d'application fournit des types de ressource agrégés et individuels pour l'écriture de politiques.

Vous pouvez utiliser des types de ressource agrégés pour réduire le nombre de politiques à rédiger. Par exemple, au lieu de permettre à un groupe de gérer adm-knowledge-bases, adm-vulnerability-audits et adm-work-requests, vous pouvez écrire une politique qui permet au groupe de gérer le type de ressource agrégé adm-family.


Types de ressource agrégés	Types de ressource individuels
`adm-family`	`adm-knowledge-bases` `adm-vulnerability-audits` `adm-work-requests`
`adm-remediations-family`	`adm-remediation-recipes` `adm-remediation-runs` `adm-remediation-run-stages` `adm-vulnerability-audits` `adm-recommendations` `adm-work-requests`
`adm-knowledge-bases-family`	`adm-vulnerability-audits` `adm-knowledge-bases` `adm-work-requests`

Les API fournies par le type de ressource agrégé adm-family couvrent les API pour adm-knowledge-bases, adm-vulnerability-audits et adm-work-requests. Par exemple,

allow group adm-admins to manage adm-family in compartment <compartment_name>

est identique à la rédaction des trois politiques suivantes :

allow group adm-admins to manage adm-knowledge-bases in compartment <compartment_name>
allow group adm-admins to manage adm-vulnerability-audits in compartment <compartment_name>
allow group adm-admins to manage adm-work-requests in compartment <compartment_name>


Type de ressource	Permissions
`adm-remediation-recipes`	`ADM_REMEDIATION_RECIPE_INSPECT` `ADM_REMEDIATION_RECIPE_CREATE` `ADM_REMEDIATION_RECIPE_READ` `ADM_REMEDIATION_RECIPE_UPDATE` `ADM_REMEDIATION_RECIPE_DELETE` `ADM_REMEDIATION_RECIPE_MOVE`
`adm-remediation-runs`	`ADM_REMEDIATION_RUN_INSPECT` `ADM_REMEDIATION_RUN_CREATE` `ADM_REMEDIATION_RUN_READ` `ADM_REMEDIATION_RUN_DELETE` `ADM_REMEDIATION_RUN_UPDATE` `ADM_REMEDIATION_RUN_CANCEL`
`adm-remediation-run-stages`	`ADM_REMEDIATION_RUN_STAGE_INSPECT` `ADM_REMEDIATION_RUN_STAGE_READ`
`adm-vulnerability-audits`	`ADM_VULNERABILITY_AUDIT_INSPECT` `ADM_VULNERABILITY_AUDIT_CREATE` `ADM_VULNERABILITY_AUDIT_READ` `ADM_VULNERABILITY_AUDIT_DELETE` `ADM_VULNERABILITY_AUDIT_UPDATE` `ADM_VULNERABILITY_AUDIT_MOVE`
`adm-recommendations`	`ADM_RECOMMENDATION_INSPECT` `ADM_RECOMMENDATION_CREATE` `ADM_RECOMMENDATION_READ` `ADM_RECOMMENDATION_DELETE` `ADM_RECOMMENDATION_UPDATE`
`adm-knowledge-bases`	`ADM_KNOWLEDGE_BASE_INSPECT` `ADM_KNOWLEDGE_BASE_CREATE` `ADM_KNOWLEDGE_BASE_DELETE` `ADM_KNOWLEDGE_BASE_READ` `ADM_KNOWLEDGE_BASE_UPDATE` `ADM_KNOWLEDGE_BASE_MOVE`
`adm-work-requests`	`ADM_WORK_REQUEST_INSPECT` `ADM_WORK_REQUEST_READ` `ADM_WORK_REQUEST_CANCEL`

Pour plus d'informations, voir Autorisations.

Documentation sur Oracle Cloud Infrastructure

Types de ressource