Políticas do Oracle Autonomous Database

Mostra como permitir que o DR (Disaster Recovery) gerencie bancos de dados do Oracle Autonomous Database Service, como o Oracle Autonomous Database Serverless e o Autonomous Database on Dedicated Exadata Infrastructure (Autonomous Container Database) que fazem parte da pilha de aplicativos.

Políticas para configurar usando o controlador de recursos


For Member Type: AUTONOMOUS_DATABASE
Allow dynamic-group <Dynamic_group_Name> to manage autonomous-database-family in compartment <compartment_name>
Allow dynamic-group <Dynamic_group_Name> read vaults in compartment <compartment_name>
Allow dynamic-group <Dynamic_group_Name> read secret-family in compartment <compartment_name>

For Member Type: AUTONOMOUS_CONTAINER_DATABASE
Allow dynamic-group <Dynamic_group_Name> to manage autonomous-database-family in compartment <compartment_name>
Allow dynamic-group <Dynamic_group_Name> to update cloud-autonomous-vmclusters in compartment <compartment_name>
Allow dynamic-group <Dynamic_group_Name> to update autonomous-vmclusters in compartment <compartment_name> 
Allow dynamic-group <Dynamic_group_Name> to update autonomousContainerDatabaseDataguardAssociations in compartment <compartment_name>

Políticas para configurar usando autenticação de usuário

Allow group group_name to manage autonomous-database-family in compartment compartment_name
Uma política mais restritiva que permite que o DR execute somente operações de switchover e failover em bancos de dados autônomos é semelhante à seguinte:
Allow group group_name to update autonomous-databases in compartment compartment_name

Para obter mais informações sobre as políticas de IAM (Identity and Access Management) para o Oracle Autonomous Database, consulte Detalhes do Serviço Database.

Para o Autonomous Database Serverless:
Allow group group_name to update AutonomousDatabaseDataguardAssociation in compartment
      compartment_name
Para o Autonomous Database on Dedicated Exadata Infrastructure (Autonomous Container Database):
Allow group group_name to manage autonomous-database-family in compartment compartment_name
Allow group group_name to update cloud-autonomous-vmclusters in compartment compartment_name
Allow group group_name to update autonomous-vmclusters in compartment compartment_name 
Allow group group_name to update autonomousContainerDatabaseDataguardAssociations in compartment compartment_name