Policy Details for Database Management

The topics in this section provide details for writing Oracle Cloud Infrastructure Identity and Access Management (IAM) policies to control access to the Database Management service.

For detailed information and examples of the policies required to work with Database Management, see:

Obtain Required Permissions for Oracle Databases
Obtain Required Permissions for External Database Systems
Obtain Required Permissions for Exadata Infrastructure
Obtain Required Permissions for MySQL HeatWave

Resource-Types

Oracle Database, External Database System and Exadata Infrastructure Resource-types

Aggregate Resource-type

dbmgmt-family

Individual Resource-types

dbmgmt-jobs
dbmgmt-managed-database-groups
dbmgmt-managed-databases
dbmgmt-private-endpoints
dbmgmt-work-requests
dbmgmt-external-dbsystem-discoveries
dbmgmt-external-dbsystems
dbmgmt-external-exadata
dbmgmt-named-credentials

MySQL HeatWave Resource-types

Aggregate Resource-type

dbmgmt-mysql-family

Individual Resource-type

dbmgmt-managed-mysql-databases

Comments

A policy that uses <verb> dbmgmt-family is equivalent to writing one with a separate <verb> <individual resource-type> statement for each of the individual resource-types in the family.

See the tables in Details for Verb + Resource-Type Combinations for details of the API operations covered by each verb, for each individual resource-type.

Supported Variables

Only general variables are supported. For information, see General Variables for All Requests.

Details for Verb + Resource-Type Combinations

The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

dbmgmt-jobs

Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	DBMGMT_JOB_INSPECT	`ListJobs`	none
read	INSPECT + DBMGMT_JOB_READ	`GetJob` `ListJobRuns` `GetJobRun` `ListJobExecutions` `GetJobExecution` `SummarizeJobExecutionsStatuses`	none
use	READ + no extra	no extra	none
manage	USE + DBMGMT_JOB_CREATE DBMGMT_JOB_DELETE DBMGMT_JOB_MOVE DBMGMT_JOB_UPDATE	`ChangeJobCompartment` `DeleteJob` `UpdateJob`	`CreateJob` (also needs `use dbmgmt-managed-database-groups` or `use dbmgmt-managed-databases`) `ImplementOptimizerStatisticsAdvisorRecommendations` (also needs `use dbmgmt-managed-databases`)

dbmgmt-managed-database-groups

Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	DBMGMT_MANAGED_DB_GROUP_INSPECT	`ListManagedDatabaseGroups`	none
read	INSPECT + DBMGMT_MANAGED_DB_GROUP_READ	`GetManagedDatabaseGroup`	`GetDatabaseFleetHealthMetrics` (also needs `read dbmgmt-managed-databases`)
use	READ + DBMGMT_MANAGED_DB_GROUP_DB_CONTENT_READ DBMGMT_MANAGED_DB_GROUP_DB_CONTENT_WRITE DBMGMT_MANAGED_DB_GROUP_UPDATE	`UpdateManagedDatabaseGroup`	`CreateJob` (also needs `manage dbmgmt-jobs`)
manage	USE + DBMGMT_MANAGED_DB_GROUP_ADD_DATABASE DBMGMT_MANAGED_DB_GROUP_CREATE DBMGMT_MANAGED_DB_GROUP_DELETE DBMGMT_MANAGED_DB_GROUP_MOVE DBMGMT_MANAGED_DB_GROUP_REMOVE_DATABASE	`ChangeManagedDatabaseGroupCompartment` `CreateManagedDatabaseGroup` `DeleteManagedDatabaseGroup`	`AddManagedDatabaseToManagedDatabaseGroup` (also needs `use dbmgmt-managed-databases`) `RemoveManagedDatabaseFromManagedDatabaseGroup` (also needs `use dbmgmt-managed-databases`)

dbmgmt-managed-databases

Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	DBMGMT_MANAGED_DB_INSPECT	`ListManagedDatabases`	none
read	INSPECT + DBMGMT_MANAGED_DB_READ	`GetAwrDbReport` `GetAwrDbSqlReport` `GetClusterCacheMetric` `GetDatabaseFleetHealthMetrics` `GetDatabaseHomeMetrics` `GetManagedDatabase` `GetPreferredCredential` `GetPdbMetrics` `GetTablespace` `ListAwrDbs` `ListAwrDbSnapshots` `ListPreferredCredentials` `ListTablespaces` `SummarizeAwrDbCpuUsages` `SummarizeAwrDbMetrics` `SummarizeAwrDbParameterChanges` `SummarizeAwrDbParameters` `SummarizeAwrDbSnapshotRanges` `SummarizeAwrDbSysstats` `SummarizeAwrDbTopWaitEvents` `SummarizeAwrDbWaitEventBuckets` `SummarizeAwrDbWaitEvents` `TestPreferredCredential`	none
use	READ + DBMGMT_MANAGED_DB_CONTENT_READ DBMGMT_MANAGED_DB_CONTENT_WRITE DBMGMT_MANAGED_DB_UPDATE	`AddmTasks` `ChangeDatabaseParameters` `ChangeDatafiles` `ChangePlanRetention` `ChangeSpaceBudget` `ChangeSqlPlanBaselinesAttributes` `CloneSqlTuningTask` `CoalesceTablespace` `ConfigureAutomaticCaptureFilters` `ConfigureAutomaticSpmEvolveAdvisorTask` `CreateSqlTuningSet` `CreateTablespace` `DeletePreferredCredential` `DeleteTablespace` `DisableAutomaticInitialPlanCapture` `DisableAutomaticSpmEvolveAdvisorTask` `DisableHighFrequencyAutomaticSpmEvolveAdvisorTask` `DisableSqlPlanBaselinesUsage` `DropSqlPlanBaselines` `DropSqlsInSqlTuningSet` `DropSqlTuningSet` `DropSqlTuningTask` `EnableAutomaticInitialPlanCapture` `EnableAutomaticSpmEvolveAdvisorTask` `EnableHighFrequencyAutomaticSpmEvolveAdvisorTask` `EnableSqlPlanBaselinesUsage` `FetchSqlTuningSet` `GenerateAwrSnapshot` `GetExecutionPlanStatsComparision` `GetOptimizerStatisticsAdvisorExecution` `GetOptimizerStatisticsAdvisorExecutionScript` `GetOptimizerStatisticsCollectionOperation` `GetSqlExecutionPlan` `GetSqlPlanBaseline` `GetSqlPlanBaselineConfiguration` `GetSqlTuningAdvisorTaskSummaryReport` `GetUser` `ListAlertLogs` `ListAttentionLogs` `ListConsumerGroupPrivileges` `ListCursorCacheStatements` `ListDataAccessContainers` `ListDatabaseParameters` `ListObjectPrivileges` `ListOptimizerStatisticsAdvisorExecutions` `ListOptimizerStatisticsCollectionAggregations` `ListOptimizerStatisticsCollectionOperations` `ListProxiedForUsers` `ListProxyUsers` `ListRoles` `ListSpmJobs` `ListSqlPlanBaselines` `ListSqlTuningAdvisorTaskFindings` `ListSqlTuningAdvisorTaskRecommendations` `ListSqlTuningAdvisorTasks` `ListSqlTuningSets` `ListSystemPrivileges` `ListTableStatistics` `ListUsers` `LoadSqlPlanBaselinesFromAwr` `LoadSqlPlanBaselinesFromCursorCache` `LoadSqlTuningSet` `ModifySnapshotSettings` `ResetDatabaseParameters` `RunHistoricAddm` `SaveSqlTuningSetAs` `ShrinkTablespace` `StartSqlTuningTask` `SummarizeSqlPlanBaselines` `SummarizeSqlPlanBaselinesByLastExecution` `UpdateManagedDatabase` `UpdatePreferredCredential` `UpdateTablespace` `ValidateBasicFilter`	`AddManagedDatabaseToManagedDatabaseGroup` (also needs `manage dbmgmt-managed-database-groups`) `CreateJob` (also needs `manage dbmgmt-jobs`) `CreateNamedCredential` (also needs `manage dbmgmt-named-credentials`) `ImplementOptimizerStatisticsAdvisorRecommendations` (also needs `manage dbmgmt-jobs`) `ListExternalListenerServices` (also needs `read dbmgmt-external-dbsystems`) `RemoveManagedDatabaseFromManagedDatabaseGroup` (also needs `manage dbmgmt-managed-database-groups`) `TestNamedCredential` (also needs `read dbmgmt-named-credentials`) `UpdateNamedCredential` (also needs `use dbmgmt-named-credentials`)
manage	USE + no extra	no extra	none

dbmgmt-private-endpoints

Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	DBMGMT_PRIVATE_ENDPOINT_INSPECT	`ListDbManagementPrivateEndpoints`	none
read	INSPECT + DBMGMT_PRIVATE_ENDPOINT_READ	`GetDbManagementPrivateEndpoint`	none
use	READ + DBMGMT_PRIVATE_ENDPOINT_UPDATE	`UpdateDbManagementPrivateEndpoint`	none
manage	USE + DBMGMT_PRIVATE_ENDPOINT_CREATE DBMGMT_PRIVATE_ENDPOINT_DELETE DBMGMT_PRIVATE_ENDPOINT_MOVE	`CreateDbManagementPrivateEndpoint` `DeleteDbManagementPrivateEndpoint` `ChangeDbManagementPrivateEndpointCompartment`	none

dbmgmt-work-requests

Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	DBMGMT_WORK_REQUEST_INSPECT	`ListWorkRequests`	none
read	INSPECT + DBMGMT_WORK_REQUEST_READ	`ListWorkRequestLogs` `ListWorkRequestErrors` `GetWorkRequest`	none
use	READ + no extra	no extra	none
manage	READ + USE + no extra	no extra	none

dbmgmt-external-dbsystem-discoveries

Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_INSPECT	`ListExternalDbSystemDiscoveries`	none
read	INSPECT + DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_READ	`GetExternalDbSystemDiscovery`	`CreateExternalDbSystem` (also needs `manage dbmgmt-external-dbsystems`)
use	READ + DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_UPDATE	`PatchExternalDbSystemDiscovery` `UpdateExternalDbSystemDiscovery`	none
manage	USE + DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_CREATE DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_DELETE	`CreateExternalDbSystemDiscovery` `DeleteExternalDbSystemDiscovery`	none

dbmgmt-external-dbsystems

Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	DBMGMT_EXTERNAL_DBSYSTEM_INSPECT	`ListExternalAsmInstances` `ListExternalAsms` `ListExternalClusterInstances` `ListExternalClusters` `ListExternalDatabases` `ListExternalDbHomes` `ListExternalDbNodes` `ListExternalDbSystemConnectors` `ListExternalDbSystems` `ListExternalListeners`	none
read	INSPECT + DBMGMT_EXTERNAL_DBSYSTEM_READ	`CheckExternalDbSystemConnectorConnectionStatus` `GetExternalAsm` `GetExternalAsmInstance` `GetExternalAsmMetrics` `GetExternalCluster` `GetExternalClusterInstance` `GetExternalClusterMetrics` `GetExternalDbHome` `GetExternalDbNode` `GetExternalDbNodeMetrics` `GetExternalDbSystem` `GetExternalDbSystemAvailabilityMetrics` `GetExternalDbSystemConnector` `GetExternalListener` `GetExternalListenerMetrics`	`ListExternalListenerServices` (also needs `use dbmgmt-managed-databases`)
use	READ + DBMGMT_EXTERNAL_DBSYSTEM_UPDATE DBMGMT_EXTERNAL_DBSYSTEM_CONTENT_READ DBMGMT_EXTERNAL_DBSYSTEM_CONTENT_WRITE	`DisableExternalDbSystemDatabaseManagement` `DisableExternalDbSystemStackMonitoring` `EnableExternalDbSystemDatabaseManagement` `EnableExternalDbSystemStackMonitoring` `GetExternalAsmConfiguration` `ListExternalAsmDiskGroups` `ListExternalAsmUsers` `UpdateExternalAsm` `UpdateExternalAsmInstance` `UpdateExternalCluster` `UpdateExternalClusterInstance` `UpdateExternalDbHome` `UpdateExternalDbNode` `UpdateExternalDbSystem` `UpdateExternalDbSystemConnector` `UpdateExternalListener`	none
manage	USE + DBMGMT_EXTERNAL_DBSYSTEM_CREATE DBMGMT_EXTERNAL_DBSYSTEM_DELETE DBMGMT_EXTERNAL_DBSYSTEM_MOVE	`ChangeExternalDbSystemCompartment` `CreateExternalDbSystemConnector` `DeleteExternalDbSystem` `DeleteExternalDbSystemConnector`	`CreateExternalDbSystem` (also needs `read dbmgmt-external-dbsystem-discoveries`)

dbmgmt-external-exadata

Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	DBMGMT_EXTERNAL_EXADATA_INSPECT	`ListExternalExadataInfrastructures` `ListExternalExadataStorageServerConnectors` `ListExternalExadataStorageServers`	none
read	INSPECT + DBMGMT_EXTERNAL_EXADATA_READ	`CheckExternalExadataStorageServerConnector` `GetExternalExadataInfrastructure` `GetExternalExadataStorageGrid` `GetExternalExadataStorageServer` `GetExternalExadataStorageServerConnector`	none
use	READ + DBMGMT_EXTERNAL_EXADATA_UPDATE DBMGMT_EXTERNAL_EXADATA_CONTENT_READ DBMGMT_EXTERNAL_EXADATA_CONTENT_WRITE	`DisableExternalExadataInfrastructureManagement` `EnableExternalExadataInfrastructureManagement` `GetIormPlan` `GetOpenAlertHistory` `GetTopSqlCpuActivity` `UpdateExternalExadataInfrastructure` `UpdateExternalExadataStorageServerConnector`	none
manage	USE + DBMGMT_EXTERNAL_EXADATA_CREATE DBMGMT_EXTERNAL_EXADATA_DELETE DBMGMT_EXTERNAL_EXADATA_MOVE	`ChangeExternalExadataInfrastructureCompartment` `CreateExternalExadataInfrastructure` `CreateExternalExadataStorageServerConnector` `DeleteExternalExadataInfrastructure` `DeleteExternalExadataStorageServerConnector` `DiscoverExternalExadataInfrastructure`	none

dbmgmt-named-credentials

Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	DBMGMT_NAMED_CREDENTIAL_INSPECT	`ListNamedCredentials`	none
read	INSPECT + DBMGMT_NAMED_CREDENTIAL_READ	`GetNamedCredential`	`TestNamedCredential` (also needs `use dbmgmt-managed-databases`)
use	READ + DBMGMT_NAMED_CREDENTIAL_UPDATE	none	`UpdateNamedCredential` (also needs `use dbmgmt-managed-databases`)
manage	USE + DBMGMT_NAMED_CREDENTIAL_CREATE DBMGMT_NAMED_CREDENTIAL_DELETE DBMGMT_NAMED_CREDENTIAL_MOVE	`ChangeNamedCredentialCompartment` `DeleteNamedCredential`	`CreateNamedCredential` (also needs `use dbmgmt-managed-databases`)

dbmgmt-managed-mysql-databases

Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	DBMGMT_MANAGED_MYSQL_DB_INSPECT	`ListManagedMySqlDatabases`	none
read	INSPECT + DBMGMT_MANAGED_MYSQL_DB_READ	`GetHeatWaveFleetMetric` `GetManagedMySqlDatabase` `GetMySqlFleetMetric` `SummarizeManagedMySqlDatabaseAvailabilityMetrics`	none
use	READ + DBMGMT_MANAGED_MYSQL_DB_CONTENT_READ	`ListManagedMySqlDatabaseConfigurationData` `ListManagedMySqlDatabaseSqlData`	none
manage	USE + no extra	no extra	none

Permissions Required for Each API Operation

The following table lists the API operations in alphabetical order.

Note

If using named credentials to perform an API operation pertaining to Oracle Databases and External Database Systems, the DBMGMT_NAMED_CREDENTIAL_READ permission may be required in addition to the permissions listed for the API operation.

For information on permissions, see Permissions.

API Operation	Permissions Required to Use the Operation
`AddManagedDatabaseToManagedDatabaseGroup`	DBMGMT_MANAGED_DB_GROUP_ADD_DATABASE and DBMGMT_MANAGED_DB_UPDATE
`AddmTasks`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ChangeDatabaseParameters`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`ChangeDatafiles`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`ChangeDbManagementPrivateEndpointCompartment`	DBMGMT_PRIVATE_ENDPOINT_MOVE
`ChangeExternalDbSystemCompartment`	DBMGMT_EXTERNAL_DBSYSTEM_MOVE
`ChangeExternalExadataInfrastructureCompartment`	DBMGMT_EXTERNAL_EXADATA_MOVE
`ChangeJobCompartment`	DBMGMT_JOB_MOVE
`ChangeManagedDatabaseGroupCompartment`	DBMGMT_MANAGED_DB_GROUP_MOVE
`ChangeNamedCredentialCompartment`	DBMGMT_NAMED_CREDENTIAL_MOVE
`ChangePlanRetention`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`ChangeSpaceBudget`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`ChangeSqlPlanBaselinesAttributes`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`CheckExternalDbSystemConnectorConnectionStatus`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`CheckExternalExadataStorageServerConnector`	DBMGMT_EXTERNAL_EXADATA_READ
`CloneSqlTuningTask`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`CoalesceTablespace`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`ConfigureAutomaticCaptureFilters`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`ConfigureAutomaticSpmEvolveAdvisorTask`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`CreateDbManagementPrivateEndpoint`	DBMGMT_PRIVATE_ENDPOINT_CREATE
`CreateExternalDbSystem`	DBMGMT_EXTERNAL_DBSYSTEM_CREATE and DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_READ
`CreateExternalDbSystemConnector`	DBMGMT_EXTERNAL_DBSYSTEM_CREATE
`CreateExternalDbSystemDiscovery`	DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_CREATE
`CreateExternalExadataInfrastructure`	DBMGMT_EXTERNAL_EXADATA_CREATE
`CreateExternalExadataStorageServerConnector`	DBMGMT_EXTERNAL_EXADATA_CREATE
`CreateJob`	The permissions required depend on the SQL type for SQL jobs and the resource-type. Query: Along with the DBMGMT_JOB_CREATE permission, the following CONTENT_READ permission is required: For a Managed Database: DBMGMT_MANAGED_DB_CONTENT_READ For a Database Group: DBMGMT_MANAGED_DB_GROUP_DB_CONTENT_READ DDL/DML/PLSQL: Along with the DBMGMT_JOB_CREATE permission, the following CONTENT_READ and CONTENT_WRITE permissions are required: For a Managed Database: DBMGMT_MANAGED_DB_CONTENT_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE For a Database Group: DBMGMT_MANAGED_DB_GROUP_DB_CONTENT_READ and DBMGMT_MANAGED_DB_GROUP_DB_CONTENT_WRITE
`CreateManagedDatabaseGroup`	DBMGMT_MANAGED_DB_GROUP_CREATE
`CreateNamedCredential`	DBMGMT_NAMED_CREDENTIAL_CREATE, DBMGMT_MANAGED_DB_READ, and DBMGMT_MANAGED_DB_CONTENT_READ
`CreateSqlTuningSet`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`CreateTablespace`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`DeleteDbManagementPrivateEndpoint`	DBMGMT_PRIVATE_ENDPOINT_DELETE
`DeleteExternalDbSystem`	DBMGMT_EXTERNAL_DBSYSTEM_DELETE
`DeleteExternalDbSystemConnector`	DBMGMT_EXTERNAL_DBSYSTEM_DELETE
`DeleteExternalDbSystemDiscovery`	DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_DELETE
`DeleteExternalExadataInfrastructure`	DBMGMT_EXTERNAL_EXADATA_DELETE
`DeleteExternalExadataStorageServerConnector`	DBMGMT_EXTERNAL_EXADATA_DELETE
`DeleteJob`	DBMGMT_JOB_DELETE
`DeleteManagedDatabaseGroup`	DBMGMT_MANAGED_DB_GROUP_DELETE
`DeleteNamedCredential`	DBMGMT_NAMED_CREDENTIAL_DELETE
`DeletePreferredCredential`	DBMGMT_MANAGED_DB_UPDATE
`DeleteTablespace`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`DisableAutomaticInitialPlanCapture`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`DisableAutomaticSpmEvolveAdvisorTask`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`DisableExternalDbSystemDatabaseManagement`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`DisableExternalDbSystemStackMonitoring`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`DisableExternalExadataInfrastructureManagement`	DBMGMT_EXTERNAL_EXADATA_UPDATE
`DisableHighFrequencyAutomaticSpmEvolveAdvisorTask`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`DisableSqlPlanBaselinesUsage`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`DiscoverExternalExadataInfrastructure`	DBMGMT_EXTERNAL_EXADATA_CREATE
`DropSqlPlanBaselines`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`DropSqlsInSqlTuningSet`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`DropSqlTuningSet`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`DropSqlTuningTask`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`EnableAutomaticInitialPlanCapture`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`EnableAutomaticSpmEvolveAdvisorTask`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`EnableExternalDbSystemDatabaseManagement`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`EnableExternalDbSystemStackMonitoring`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`EnableExternalExadataInfrastructureManagement`	DBMGMT_EXTERNAL_EXADATA_UPDATE
`EnableHighFrequencyAutomaticSpmEvolveAdvisorTask`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`EnableSqlPlanBaselinesUsage`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`FetchSqlTuningSet`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`GenerateAwrSnapshot`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`GetAwrDbReport`	DBMGMT_MANAGED_DB_READ
`GetAwrDbSqlReport`	DBMGMT_MANAGED_DB_READ
`GetClusterCacheMetric`	DBMGMT_MANAGED_DB_READ
`GetDatabaseFleetHealthMetrics`	For a fleet of Managed Databases in a specific compartment: DBMGMT_MANAGED_DB_READ For a fleet of Managed Databases in a specific Database Group: DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_GROUP_READ
`GetDatabaseHomeMetrics`	DBMGMT_MANAGED_DB_READ
`GetDbManagementPrivateEndpoint`	DBMGMT_PRIVATE_ENDPOINT_READ
`GetExecutionPlanStatsComparision`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`GetExternalAsm`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalAsmConfiguration`	DBMGMT_EXTERNAL_DBSYSTEM_READ and DBMGMT_EXTERNAL_DBSYSTEM_CONTENT_READ
`GetExternalAsmInstance`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalAsmMetrics`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalCluster`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalClusterInstance`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalClusterMetrics`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalDbHome`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalDbNode`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalDbNodeMetrics`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalDbSystem`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalDbSystemAvailabilityMetrics`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalDbSystemConnector`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalDbSystemDiscovery`	DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_READ
`GetExternalExadataInfrastructure`	DBMGMT_EXTERNAL_EXADATA_READ
`GetExternalExadataStorageGrid`	DBMGMT_EXTERNAL_EXADATA_READ
`GetExternalExadataStorageServer`	DBMGMT_EXTERNAL_EXADATA_READ
`GetExternalExadataStorageServerConnector`	DBMGMT_EXTERNAL_EXADATA_READ
`GetExternalListener`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetExternalListenerMetrics`	DBMGMT_EXTERNAL_DBSYSTEM_READ
`GetHeatWaveFleetMetric`	DBMGMT_MANAGED_MYSQL_DB_READ
`GetIormPlan`	DBMGMT_EXTERNAL_EXADATA_READ and DBMGMT_EXTERNAL_EXADATA_CONTENT_READ
`GetJob`	DBMGMT_JOB_READ
`GetJobExecution`	DBMGMT_JOB_READ
`GetJobRun`	DBMGMT_JOB_READ
`GetManagedDatabase`	DBMGMT_MANAGED_DB_READ
`GetManagedDatabaseGroup`	DBMGMT_MANAGED_DB_GROUP_READ
`GetManagedMySqlDatabase`	DBMGMT_MANAGED_MYSQL_DB_READ
`GetMySqlFleetMetric`	DBMGMT_MANAGED_MYSQL_DB_READ
`GetNamedCredential`	DBMGMT_NAMED_CREDENTIAL_READ
`GetOpenAlertHistory`	DBMGMT_EXTERNAL_EXADATA_READ and DBMGMT_EXTERNAL_EXADATA_CONTENT_READ
`GetOptimizerStatisticsAdvisorExecution`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`GetOptimizerStatisticsAdvisorExecutionScript`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`GetOptimizerStatisticsCollectionOperation`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`GetPdbMetrics`	DBMGMT_MANAGED_DB_READ
`GetPreferredCredential`	DBMGMT_MANAGED_DB_READ
`GetSqlExecutionPlan`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`GetSqlPlanBaseline`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`GetSqlPlanBaselineConfiguration`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`GetSqlTuningAdvisorTaskSummaryReport`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`GetTablespace`	DBMGMT_MANAGED_DB_READ
`GetTopSqlCpuActivity`	DBMGMT_EXTERNAL_EXADATA_READ and DBMGMT_EXTERNAL_EXADATA_CONTENT_READ
`GetUser`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`GetWorkRequest`	DBMGMT_WORK_REQUEST_READ
`ImplementOptimizerStatisticsAdvisorRecommendations`	DBMGMT_MANAGED_DB_READ, DBMGMT_MANAGED_DB_CONTENT_READ, DBMGMT_MANAGED_DB_CONTENT_WRITE, and DBMGMT_JOB_CREATE
`ListAlertLogs`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListAttentionLogs`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListAwrDbs`	DBMGMT_MANAGED_DB_READ
`ListAwrDbSnapshots`	DBMGMT_MANAGED_DB_READ
`ListConsumerGroupPrivileges`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListCursorCacheStatements`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListDataAccessContainers`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListDatabaseParameters`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListDbManagementPrivateEndpoints`	DBMGMT_PRIVATE_ENDPOINT_INSPECT
`ListExternalAsmDiskGroups`	DBMGMT_EXTERNAL_DBSYSTEM_READ and DBMGMT_EXTERNAL_DBSYSTEM_CONTENT_READ
`ListExternalAsmInstances`	DBMGMT_EXTERNAL_DBSYSTEM_INSPECT
`ListExternalAsms`	DBMGMT_EXTERNAL_DBSYSTEM_INSPECT
`ListExternalAsmUsers`	DBMGMT_EXTERNAL_DBSYSTEM_READ and DBMGMT_EXTERNAL_DBSYSTEM_CONTENT_READ
`ListExternalClusterInstances`	DBMGMT_EXTERNAL_DBSYSTEM_INSPECT
`ListExternalClusters`	DBMGMT_EXTERNAL_DBSYSTEM_INSPECT
`ListExternalDatabases`	DBMGMT_EXTERNAL_DBSYSTEM_INSPECT
`ListExternalDbHomes`	DBMGMT_EXTERNAL_DBSYSTEM_INSPECT
`ListExternalDbNodes`	DBMGMT_EXTERNAL_DBSYSTEM_INSPECT
`ListExternalDbSystemConnectors`	DBMGMT_EXTERNAL_DBSYSTEM_INSPECT
`ListExternalDbSystemDiscoveries`	DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_INSPECT
`ListExternalDbSystems`	DBMGMT_EXTERNAL_DBSYSTEM_INSPECT
`ListExternalExadataInfrastructures`	DBMGMT_EXTERNAL_EXADATA_INSPECT
`ListExternalExadataStorageServerConnectors`	DBMGMT_EXTERNAL_EXADATA_INSPECT
`ListExternalExadataStorageServers`	DBMGMT_EXTERNAL_EXADATA_INSPECT
`ListExternalListeners`	DBMGMT_EXTERNAL_DBSYSTEM_INSPECT
`ListExternalListenerServices`	DBMGMT_EXTERNAL_DBSYSTEM_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListJobExecutions`	DBMGMT_JOB_READ
`ListJobRuns`	DBMGMT_JOB_READ
`ListJobs`	DBMGMT_JOB_INSPECT
`ListManagedDatabaseGroups`	DBMGMT_MANAGED_DB_GROUP_INSPECT
`ListManagedDatabases`	DBMGMT_MANAGED_DB_INSPECT
`ListManagedMySqlDatabaseConfigurationData`	DBMGMT_MANAGED_MYSQL_DB_READ and DBMGMT_MANAGED_MYSQL_DB_CONTENT_READ
`ListManagedMySqlDatabases`	DBMGMT_MANAGED_MYSQL_DB_INSPECT
`ListManagedMySqlDatabaseSqlData`	DBMGMT_MANAGED_MYSQL_DB_READ and DBMGMT_MANAGED_MYSQL_DB_CONTENT_READ
`ListNamedCredentials`	DBMGMT_NAMED_CREDENTIAL_INSPECT
`ListObjectPrivileges`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListOptimizerStatisticsAdvisorExecutions`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListOptimizerStatisticsCollectionAggregations`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListOptimizerStatisticsCollectionOperations`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListPreferredCredentials`	DBMGMT_MANAGED_DB_READ
`ListProxiedForUsers`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListProxyUsers`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListRoles`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListSpmJobs`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListSqlPlanBaselines`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListSqlTuningAdvisorTaskFindings`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListSqlTuningAdvisorTaskRecommendations`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListSqlTuningAdvisorTasks`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListSqlTuningSets`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListSystemPrivileges`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListTablespaces`	DBMGMT_MANAGED_DB_READ
`ListTableStatistics`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListUsers`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`ListWorkRequestErrors`	DBMGMT_WORK_REQUEST_READ
`ListWorkRequestLogs`	DBMGMT_WORK_REQUEST_READ
`ListWorkRequests`	DBMGMT_WORK_REQUEST_INSPECT
`LoadSqlPlanBaselinesFromAwr`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`LoadSqlPlanBaselinesFromCursorCache`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`LoadSqlTuningSet`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`ModifySnapshotSettings`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`PatchExternalDbSystemDiscovery`	DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_UPDATE
`RemoveManagedDatabaseFromManagedDatabaseGroup`	DBMGMT_MANAGED_DB_GROUP_REMOVE_DATABASE and DBMGMT_MANAGED_DB_UPDATE
`ResetDatabaseParameters`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`RunHistoricAddm`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`SaveSqlTuningSetAs`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`ShrinkTablespace`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`StartSqlTuningTask`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`SummarizeAwrDbCpuUsages`	DBMGMT_MANAGED_DB_READ
`SummarizeAwrDbMetrics`	DBMGMT_MANAGED_DB_READ
`SummarizeAwrDbParameterChanges`	DBMGMT_MANAGED_DB_READ
`SummarizeAwrDbParameters`	DBMGMT_MANAGED_DB_READ
`SummarizeAwrDbSnapshotRanges`	DBMGMT_MANAGED_DB_READ
`SummarizeAwrDbSysstats`	DBMGMT_MANAGED_DB_READ
`SummarizeAwrDbTopWaitEvents`	DBMGMT_MANAGED_DB_READ
`SummarizeAwrDbWaitEventBuckets`	DBMGMT_MANAGED_DB_READ
`SummarizeAwrDbWaitEvents`	DBMGMT_MANAGED_DB_READ
`SummarizeJobExecutionsStatuses`	DBMGMT_JOB_READ
`SummarizeManagedMySqlDatabaseAvailabilityMetrics`	DBMGMT_MANAGED_MYSQL_DB_READ
`SummarizeSqlPlanBaselines`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`SummarizeSqlPlanBaselinesByLastExecution`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ
`TestNamedCredential`	DBMGMT_NAMED_CREDENTIAL_READ, DBMGMT_MANAGED_DB_READ, and DBMGMT_MANAGED_DB_CONTENT_READ
`TestPreferredCredential`	DBMGMT_MANAGED_DB_READ
`UpdateDbManagementPrivateEndpoint`	DBMGMT_PRIVATE_ENDPOINT_UPDATE
`UpdateExternalAsm`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`UpdateExternalAsmInstance`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`UpdateExternalCluster`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`UpdateExternalClusterInstance`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`UpdateExternalDbHome`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`UpdateExternalDbNode`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`UpdateExternalDbSystem`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`UpdateExternalDbSystemConnector`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`UpdateExternalDbSystemDiscovery`	DBMGMT_EXTERNAL_DBSYSTEM_DISCOVERY_UPDATE
`UpdateExternalExadataInfrastructure`	DBMGMT_EXTERNAL_EXADATA_UPDATE
`UpdateExternalExadataStorageServerConnector`	DBMGMT_EXTERNAL_EXADATA_UPDATE
`UpdateExternalListener`	DBMGMT_EXTERNAL_DBSYSTEM_UPDATE
`UpdateJob`	DBMGMT_JOB_UPDATE
`UpdateManagedDatabase`	DBMGMT_MANAGED_DB_UPDATE
`UpdateManagedDatabaseGroup`	DBMGMT_MANAGED_DB_GROUP_UPDATE
`UpdateNamedCredential`	DBMGMT_NAMED_CREDENTIAL_UPDATE, DBMGMT_MANAGED_DB_READ, and DBMGMT_MANAGED_DB_CONTENT_READ
`UpdatePreferredCredential`	DBMGMT_MANAGED_DB_UPDATE
`UpdateTablespace`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_WRITE
`ValidateBasicFilter`	DBMGMT_MANAGED_DB_READ and DBMGMT_MANAGED_DB_CONTENT_READ

Oracle Cloud Infrastructure Documentation

Resource-Types

Supported Variables

Details for Verb + Resource-Type Combinations

Permissions Required for Each API Operation