Resource Types and Permissions of Remote Connections Agent
Review the table that provides a list of Oracle Cloud Migrations remote connections agent resource types and associated permissions.
You can write a policy with a <verb>
<resource-type>
statement for each of the individual resource
types.
Resource Type | Permissions |
---|---|
ocb-environment |
|
ocb-agent |
|
ocb-agent-plugin (ocb-agent subresource) |
|
ocb-agent-key (ocb-agent subresource) |
OCB_AGENT_KEY_UPDATE |
ocb-agent-update-command (ocb-agent subresource) |
OCB_AGENT_UPDATE_COMMAND_CREATE |
ocb-agent-dependency |
|
ocb-update-bundle | OCB_UPDATE_BUNDLE_MANAGE |
ocb-workrequests (Remote Connections Agents workrequests) |
|
Details About Verb + Resource Type Combinations of Remote Connections Agent
Review the permissions and API operations covered by each verb for remote connections agent resources.
The level of access is cumulative as you go from inspect
to
read
to use
to manage
. A plus sign
(+)
in a table cell indicates incremental access when compared to the
preceding cell.
For information about granting access, see Permissions.
This table lists the permissions and the APIs that are fully covered by the permissions,
for the ocb-environment
resource.
Verbs | Permissions | APIs Covered | Description |
---|---|---|---|
inspect |
OCB_ENVIRONMENT_INSPECT |
listEnvironments |
List all source environment in a compartment. |
read |
|
|
Get a specific source environment by ID. |
use |
|
|
Update a specific source environment identified by an ID. |
manage |
|
|
Create a source environment. |
manage |
|
|
Delete a specific source environment identified by an ID. |
manage |
|
|
Move a source environment resource from one compartment to another. |
This table lists the permissions and the APIs that are fully covered by the permissions,
for the ocb-agents
resource.
Verbs | Permissions | APIs Covered | Description |
---|---|---|---|
inspect |
OCB_AGENT_INSPECT |
listAgents |
List all the agents in a compartment. |
read |
|
|
Get a specific agent by an ID. |
read |
|
|
Get plugin by name and agent OCID. |
read |
|
|
List all plugins running on a specific agent. |
use |
|
|
Synchronize the state of an agent. |
use |
|
|
Update the agent identified by an ID. |
manage |
|
|
Create an agent. |
manage |
|
|
Delete a specific agent resource identified by an ID. |
manage |
|
|
Move an agent resource from one compartment to another. |
manage |
|
|
Update plugin identified by name and agent OCID. |
manage |
|
|
Create an update command. |
This table lists the permissions and the APIs that are fully covered by the permissions,
for the ocb-agent-dependencies
resource.
Verbs | Permissions | APIs Covered | Description |
---|---|---|---|
inspect |
OCB_AGENT_DEPENDECNCY_INSPECT |
listAgentDependency |
List all the agent dependencies. |
read |
|
|
Get a specific agent dependency. |
use |
|
|
Update a specific agent dependency. |
manage |
|
|
Create an agent dependency. |
manage |
|
|
Delete an agent dependency. |
manage |
|
|
Move an agent dependency resource from one compartment to another. |
This table lists the permissions and the APIs that are fully covered by the permissions,
for the ocb-agent-plugins
resource.
Verbs | Permissions | APIs Covered | Description |
---|---|---|---|
inspect |
OCB_AGENT_PLUGIN_INSPECT |
listPlugins |
List plugins running on a specific agent. |
read |
|
|
Get plugin by name and agent OCID. |
use |
|
|
Update plugin identified by name and agent OCID. |
This table lists the permissions and the APIs that are fully covered by the permissions,
for the ocb-update-bundle
resource.
Verbs | Permissions | APIs Covered | Description |
---|---|---|---|
manage |
|
|
Create an update command. |
This table lists the permissions and the APIs that are fully covered by the permissions,
for the ocb-workrequests
resource.
Verbs | Permissions | APIs Covered | Description |
---|---|---|---|
inspect |
OCB_WORKREQUEST_INSPECT |
listWorkRequests |
List all the work requests in a compartment. |
read |
|
|
Get the status of the work request for a given ID. Get the work request errors. Get the work request logs. |
manage |
|
|
Cancel the work request with a given ID. |