Permissions Required for Each API Operation

The following table lists the Application Dependency Management permissions required for each API operation in a logical order, grouped by resource-type.

For information about permissions, see Permissions.

Required Permissions
API Operation Permissions
ListKnowledgeBases ADM_KNOWLEDGE_BASE_INSPECT
GetKnowledgeBase ADM_KNOWLEDGE_BASE_READ
UpdateKnowledgeBase ADM_KNOWLEDGE_BASE_UPDATE
CreateKnowledgeBase ADM_KNOWLEDGE_BASE_CREATE
DeleteKnowledgeBase ADM_KNOWLEDGE_BASE_DELETE
ChangeKnowledgeBaseCompartment ADM_KNOWLEDGE_BASE_MOVE
ListRemediationRuns ADM_REMEDIATION_RUN_INSPECT
CreateRemediationRun ADM_REMEDIATION_RUN_CREATE
CreateRemediationRun ADM_REMEDIATION_RECIPE_READ
CreateRemediationRun ADM_KNOWLEDGE_BASE_READ
GetRemediationRun ADM_REMEDIATION_RUN_READ
UpdateRemediationRun ADM_REMEDIATION_RUN_UPDATE
DeleteRemediationRun ADM_REMEDIATION_RUN_DELETE
DeleteRemediationRun ADM_VULNERABILITY_AUDIT_DELETE
DeleteRemediationRun ADM_RECOMMENDATION_DELETE
CancelRemediationRun ADM_REMEDIATION_RUN_CANCEL
ListRemediationRecipes ADM_REMEDIATION_RECIPE_INSPECT
CreateRemediationRecipe ADM_REMEDIATION_RECIPE_CREATE
CreateRemediationRecipe ADM_KNOWLEDGE_BASE_INSPECT
DeleteRemediationRecipe ADM_REMEDIATION_RECIPE_DELETE
DeleteRemediationRecipe ADM_REMEDIATION_RUN_DELETE
DeleteRemediationRecipe ADM_VULNERABILITY_AUDIT_DELETE
DeleteRemediationRecipe ADM_RECOMMENDATION_DELETE
GetRemediationRecipe ADM_REMEDIATION_RECIPE_READ
GetRemediationRecipe ADM_KNOWLEDGE_BASE_INSPECT
UpdateRemediationRecipe ADM_REMEDIATION_RECIPE_UPDATE
UpdateRemediationRecipe ADM_KNOWLEDGE_BASE_INSPECT
ActivateRemediationRecipe ADM_REMEDIATION_RECIPE_UPDATE
DeactivateRemediationRecipe ADM_REMEDIATION_RECIPE_UPDATE
ChangeRemediationRecipeCompartment ADM_REMEDIATION_RECIPE_MOVE
ListVulnerabilityAudits ADM_VULNERABILITY_AUDIT_INSPECT
GetVulnerabilityAudit ADM_VULNERABILITY_AUDIT_READ
UpdateVulnerabilityAudit ADM_VULNERABILITY_AUDIT_UPDATE
CreateVulnerabilityAudit ADM_KNOWLEDGE_BASE_READ and ADM_VULNERABILITY_AUDIT_CREATE
DeleteVulnerabilityAudit ADM_VULNERABILITY_AUDIT_DELETE
ChangeVulnerabilityAuditCompartment ADM_VULNERABILITY_AUDIT_MOVE
ListWorkRequests ADM_WORK_REQUEST_INSPECT
GetWorkRequest ADM_WORK_REQUEST_READ
CancelWorkRequest ADM_WORK_REQUEST_CANCEL