Resource Types and Permissions of Asset Discovery

Review the table that provides a list of Oracle Cloud Migrations external asset discovery resource types and associated permissions.

You can write a policy with a <verb> <resource-type> statement for each of the individual resource types.


Resource Type	Permissions
ocb-asset-sources	OCB_ASSET_SOURCE_CREATE OCB_ASSET_SOURCE_INSPECT OCB_ASSET_SOURCE_DELETE OCB_ASSET_SOURCE_UPDATE OCB_ASSET_SOURCE_READ OCB_ASSET_SOURCE_MOVE
ocb-asset-source-connectors	OCB_ASSET_SOURCE_INSPECT OCB_ASSET_SOURCE_READ OCB_ASSET_SOURCE_CONNECTOR_DATA_UPDATE
ocb-discovery-schedules	OCB_DISCOVERY_SCHEDULE_INSPECT OCB_DISCOVERY_SCHEDULE_CREATE OCB_DISCOVERY_SCHEDULE_READ OCB_DISCOVERY_SCHEDULE_UPDATE OCB_DISCOVERY_SCHEDULE_DELETE OCB_DISCOVERY_SCHEDULE_MOVE
ocb-connectors	OCB_CONNECTOR_READ OCB_CONNECTOR_DATA_READ OCB_CONNECTOR_DATA_UPDATE

Details About Verb + Resource Type Combinations of Asset Discovery

Review the permissions and API operations covered by each verb for the external asset discovery resources.

The level of access is cumulative as you go from inspect to read to use to manage. A plus sign (+) in a table cell indicates incremental access when compared to the preceding cell.

For information about granting access, see Permissions.

ocb-asset-sources

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocb-asset-sources resource.


Verbs	Permissions	APIs Covered	Description
`inspect`	`OCB_ASSET_SOURCE_INSPECT`	`ListAssetSources`	List of all asset sources in a compartment.
`read`	`inspect+` `OCB_ASSET_SOURCE_READ`	`inspect+` `GetAssetSource` `ListAssetSourceConnections`	Get the asset source. Get known connections to the asset source by the asset source ID.
`use`	`read+` `OCB_ASSET_SOURCE_UPDATE`	`read+` `UpdateAssetSource` `RefreshAssetSource`	Update the asset source. Trigger work request to gather metadata for the asset source and push it to inventory. Also, report identifiers (AssetHandles) back to Asset Discovery.
`manage`	`use+` `OCB_ASSET_SOURCE_CREATE`	`use+` `CreateAssetSource`	Create an asset source.
`manage`	`use+` `OCB_ASSET_SOURCE_DELETE`	`use+` `DeleteAssetSource`	Delete a specific provisioned asset source.
`manage`	`use+` `OCB_ASSET_SOURCE_MOVE`	`use+` `ChangeAssetSourceCompartment`	Move a resource into a different compartment.

ocb-asset-source-connectors

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocb-asset-source-connectors resource.


Verbs	Permissions	APIs Covered	Description
`inspect`	`OCB_ASSET_SOURCE_INSPECT`	`ListAssetSources`	List all asset sources in a compartment.
`read`	`inspect+` `OCB_ASSET_SOURCE_READ`	`inspect+` `GetAssetSource` `ListAssetSourceConnections`	Get the asset source. Get known connections to the asset source by the asset source ID .
`use`	`read+` `OCB_ASSET_SOURCE_CONNECTOR_DATA_UPDATE`	`read+` `PushAssetHandles` `PushConnectionStatus`	Report batch operation for discovered AssetHandles for this source. Report connection status for the asset source.

ocb-discovery-schedules

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocb-discovery-schedules resource.


Verbs	Permissions	APIs Covered	Description
`inspect`	`OCB_DISCOVERY_SCHEDULE_INSPECT`	`ListDiscoverySchedules`	List all the discovery schedules.
`read`	`inspect+` `OCB_DISCOVERY_SCHEDULE_READ`	`inspect+` `GetDiscoverySchedule`	Get information about a specific discovery schedule.
`use`	`read+` `OCB_DISCOVERY_SCHEDULE_UPDATE`	`read+` `UpdateDiscoverySchedule`	Update a specific discovery schedule.
`manage`	`use+` `OCB_DISCOVERY_SCHEDULE_CREATE`	`use+` `CreateDiscoverySchedule`	Create a discovery schedule.
`manage`	`use+` `OCB_DISCOVERY_SCHEDULE_DELETE`	`use+` `DeleteDiscoverySchedule`	Delete a specific discovery schedule.
`manage`	`use+` `OCB_DISCOVERY_SCHEDULE_MOVE`	`use+` `ChangeDiscoveryScheduleCompartment`	Move a specific discovery schedule into a different compartment.

ocb-connectors

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocb-connectors resource.


Verbs	Permissions	APIs Covered	Description
`read`	`OCB_CONNECTOR_READ`	`GetConnector`	Get connector by ID.
`read`	`OCB_CONNECTOR_DATA_READ`	`GetConnectorConfiguration` `ListConnectorAssetSources` `ListConnectorAssetHandles` `ListConnectorTasks`	Get connector configuration. List asset sources related to the connector List asset handles for assets discovered by provided filter. List tasks assigned to a connector.
`use`	`read+` `OCB_CONNECTOR_DATA_UPDATE`	`read+` `UpdateConnectorTask`	Update the task state.

Oracle Cloud Infrastructure Documentation

Resource Types and Permissions of Asset Discovery

Details About Verb + Resource Type Combinations of Asset Discovery