Enable Access to AI Models You Deploy in a Dedicated AI Cluster

Oracle Analytics Cloud provides AI assistants for workbooks, data sets, catalog descriptions, and other features. You can assign a different AI model to each assistant. If you host AI models in a dedicated AI cluster in Oracle Cloud Infrastructure (OCI), you can register those models in Oracle Analytics Cloud and use them with AI assistants.

To enable Oracle Analytics Cloud to access AI models in a dedicated AI cluster, complete the following tasks:

  1. Allow Oracle Analytics Cloud to Access Your AI Models in OCI.
  2. Allow OCI Generative AI to Accept Requests from Oracle Analytics Cloud.

The security policies that you create in the Oracle Analytics Cloud tenancy and the OCI Generative AI tenancy establish the cross-tenancy access that Oracle Analytics Cloud requires to use models deployed on a dedicated AI cluster. Oracle Analytics Cloud currently supports OpenAI gpt-oss-120b models that are deployed on dedicated AI clusters.

Allow Oracle Analytics Cloud to Access Your AI Models in OCI

Create the Oracle Analytics Cloud security policy that is required for cross-tenancy access to Generative AI models deployed on a dedicated AI cluster in another Oracle Cloud Infrastructure (OCI) tenancy.

Before you begin, verify that your Generative AI environment meets the following prerequisites:
  • Verify the name of the OCI tenancy hosting the AI model that you want to use in Oracle Analytics Cloud.
  • Check the AI model deployed on the dedicated cluster is OpenAI gpt-oss-120b.

Note:

Not all Generative AI models are hosted in every region. To confirm whether the AI models you want to use are available in your subscribed region, see Generative AI Models by Region. If required, subscribe to a Generative AI region. See Subscribing to an Infrastructure Region.
  1. In OCI Console, select Identity & Security, then select Policies.
  2. Create a policy similar to the following example:
    Endorse any-user to use generative-ai-chat in tenancy <OCI Generative AI tenancy name> where request.principal.type='analyticsinstance'

    Where <OCI Generative AI tenancy name> is the tenancy that hosts the AI models you want Oracle Analytics Cloud to access.

Allow OCI Generative AI to Accept Requests from Oracle Analytics Cloud

Create the OCI Generative AI security policy that allows Oracle Analytics Cloud instances from another Oracle Cloud Infrastructure (OCI) tenancy to access Generative AI models you deployed on a dedicated AI cluster.

  1. In OCI Console, select Identity & Security, then select Policies.
  2. Create a policy similar to the following example:
    Admit any-user of tenancy <Oracle Analytics Cloud tenancy name> to use generative-ai-chat in compartment <OCI Generative AI Model compartment name> where request.principal.type='analyticsinstance'

    Where <Oracle Analytics Cloud tenancy name> is the tenancy that hosts your Oracle Analytics Cloud instance.

    Where <OCI Generative AI Model compartment name> is the compartment that hosts the model you want Oracle Analytics Cloud to access.