Step 2: Create a User and Group and Add Policies

To export design-time metadata into an Oracle Integration instance, you must also create a user and group and add policies that enable you to perform the migration.

  1. Open the navigation menu.

  2. Go to Governance and Administration > Identity > Users to create the user to use for migration.
  3. Click Create User.
  4. Enter a name and description.
  5. Click Create.
  6. Under Governance and Administration, go to Identity, then click Groups.

    A list of the groups in your tenancy is displayed.

  7. Click Create Group to export your design-time metadata.

  8. Enter a name and description.

  9. Click Create Group.

    You are now ready to add the user to the group. When configuration is complete, users in this group can export design-time metadata into Oracle Integration.

  10. Locate the group you created in the list.

  11. Click the group. Its details are displayed.

  12. Click Add User to Group.

  13. Select the user you created from the list, then click Add User.

  14. Return to the navigation menu.

  15. Under Governance and Administration, go to Identity, then click Policies.

  16. Select the compartment you previously created.

  17. Click Create Policy.

  18. Enter a name and optional description.

  19. Leave KEEP POLICY CURRENT as the Policy Versioning selection.

  20. Add the following statements to migrate to Oracle Integration Generation 2. The statements to add are based on the migration tool you use.

    Migration Tool Statements
    If using Application Migration Service Add these statements:
    allow service applicationmigration to inspect compartments in tenancy
    allow service applicationmigration to { TENANCY_INSPECT } in tenancy
    allow service applicationmigration to { IDENTITY_PROVIDER_INSPECT } in tenancy
    allow service applicationmigration to manage database-family in tenancy
    allow service applicationmigration to use vcns in tenancy
    allow service applicationmigration to use subnets in tenancy
    allow service applicationmigration to use vnics in tenancy
    allow service applicationmigration to { VNIC_ATTACHMENT_READ } in tenancy
    allow service applicationmigration to { INSTANCE_INSPECT } in tenancy
    allow service applicationmigration to manage analytics-instances in tenancy
    allow service applicationmigration to manage integration-instances in tenancy
    allow service PSM to inspect vcns in tenancy
    allow service PSM to use subnets in tenancy
    allow service PSM to use vnics in tenancy
    allow service PSM to manage security-lists in tenancy
    allow service PSM to inspect database-family in tenancy
    If using a different migration tool, for example:
    • Import tool to export and import Processes design-time metadata
    • curl or postman command to export and import Integrations and Processes design-time metadata
    Add the following statements.
    • allow group Upgrade_Group to manage buckets in compartment Upgrade_Compartment

    • allow group Upgrade_Group to manage objects in compartment Upgrade_Compartment where any {request.permission='OBJECT_CREATE',request.permission='OBJECT_DELETE',request.permission='OBJECT_INSPECT'}

    where:
    • Upgrade_Group is the group you created.

    • Upgrade_Compartment is the compartment you created.

    This action enables users in this group to export design-time metadata to Oracle Integration.

  21. Click Create.