Use Identity and Access Management (IAM) Authentication with Autonomous AI Database

You can configure Autonomous AI Database to use Oracle Cloud Infrastructure Identity and Access Management (IAM) authentication and authorization to allow IAM users to access an Autonomous AI Database with IAM credentials.

Note:

Autonomous AI Database integration with Oracle Cloud Infrastructure IAM is supported in commercial regions with identity domains as well as in the legacy IAM, which does not include identity domains. IAM with identity domains was introduced with new Oracle Cloud Infrastructure tenancies that were created after November 8, 2021. Autonomous AI Database supports users and groups in default and non-default identity domains.

• About Identity and Access Management (IAM) Authentication with Autonomous AI Database
  You can enable an Autonomous AI Database instance to use Oracle Cloud Infrastructure (IAM) authentication and authorization for users.
• Prerequisites for Identity and Access Management (IAM) Authentication on Autonomous AI Database
  Describes the prerequisites for enabling IAM user access on Autonomous AI Database.
• Enable Identity and Access Management (IAM) Authentication on Autonomous AI Database
  Describes the steps to enable IAM user access on Autonomous AI Database.
• Create Identity and Access Management (IAM) Groups and Policies for IAM Users
  Describes the steps to write policy statements for an IAM group to enable IAM user access to Oracle Cloud Infrastructure resources, specifically Autonomous AI Database instances.
• Add IAM Users on Autonomous AI Database
  To add IAM users to allow access to Autonomous AI Database, map database global users to IAM groups or users with CREATE USER or ALTER USER statements (with IDENTIFIED GLOBALLY AS clause).
• Add IAM Roles on Autonomous AI Database
  Optionally, create global roles to provide additional database roles and privileges to IAM users when multiple IAM users are mapped to the same shared global user.
• Create IAM Database Password for IAM Users
  To add an IAM user and allow the IAM user to login to Autonomous AI Database by supplying a username and password, you must create an IAM database password.
• Connect to Autonomous AI Database with Identity and Access Management (IAM) Authentication
  After the ADMIN user enables Oracle Cloud Infrastructure IAM on Autonomous AI Database, users log in to the Autonomous AI Database instance using their Oracle Cloud Infrastructure IAM credentials or access the database through an Oracle Cloud Infrastructure IAM database token.
• Configure IAM Proxy Authentication
  Proxy authentication allows an IAM user to proxy to a database schema for tasks such as application maintenance.
• Disable Identity and Access Management (IAM) Authentication on Autonomous AI Database
  Describes the steps to disable IAM external authentication user access for Autonomous AI Database.
• Accessing a Database Cross-Tenancy Using an IAM Integration
  Users and groups in one tenancy can access Autonomous AI Database instances in another tenancy if policies in both tenancies allow this.
• Notes for Using Autonomous AI Database Tools with Identity and Access Management (IAM) Authentication
  Provides notes for using Autonomous AI Database tools with IAM authentication enabled.