Documentazione di Oracle Cloud Infrastructure

Criteri per Oracle Autonomous Database

Mostra come consentire al disaster recovery (DR) di gestire i database di Oracle Autonomous Database Service come Oracle Autonomous Database Serverless e Autonomous Database su un'infrastruttura Exadata dedicata (Autonomous Container Database) che fanno parte dello stack di applicazioni.

Criteri da configurare utilizzando il principal risorsa


For Member Type: AUTONOMOUS_DATABASE
Allow dynamic-group <Dynamic_group_Name> to manage autonomous-database-family in compartment <compartment_name>
Allow dynamic-group <Dynamic_group_Name> read vaults in compartment <compartment_name>
Allow dynamic-group <Dynamic_group_Name> read secret-family in compartment <compartment_name>

For Member Type: AUTONOMOUS_CONTAINER_DATABASE
Allow dynamic-group <Dynamic_group_Name> to manage autonomous-database-family in compartment <compartment_name>
Allow dynamic-group <Dynamic_group_Name> to update cloud-autonomous-vmclusters in compartment <compartment_name>
Allow dynamic-group <Dynamic_group_Name> to update autonomous-vmclusters in compartment <compartment_name> 
Allow dynamic-group <Dynamic_group_Name> to update autonomousContainerDatabaseDataguardAssociations in compartment <compartment_name>

Criteri da configurare mediante l'autenticazione utente

Allow group group_name to manage autonomous-database-family in compartment compartment_name
Un criterio più restrittivo che consente al DR di eseguire solo operazioni di switchover e failover su database autonomi è simile al seguente:
Allow group group_name to update autonomous-databases in compartment compartment_name

Per ulteriori informazioni sui criteri IAM (Identity and Access Management) per Oracle Autonomous Database, fare riferimento a Dettagli per il servizio di database.

Per Autonomous Database Serverless:
Allow group group_name to update AutonomousDatabaseDataguardAssociation in compartment
      compartment_name
Per Autonomous Database sull'infrastruttura Exadata dedicata (Autonomous Container Database):
Allow group group_name to manage autonomous-database-family in compartment compartment_name
Allow group group_name to update cloud-autonomous-vmclusters in compartment compartment_name
Allow group group_name to update autonomous-vmclusters in compartment compartment_name 
Allow group group_name to update autonomousContainerDatabaseDataguardAssociations in compartment compartment_name