Resource Types and Permissions of Remote Connections Agent

Review the table that provides a list of Oracle Cloud Migrations remote connections agent resource types and associated permissions.

You can write a policy with a <verb> <resource-type> statement for each of the individual resource types.

Resource Type Permissions
ocb-environment
  • OCB_ENVIRONMENT_INSPECT
  • OCB_ENVIRONMENT_READ
  • OCB_ENVIRONMENT_CREATE
  • OCB_ENVIRONMENT_DELETE
  • OCB_ENVIRONMENT_MOVE
  • OCB_ENVIRONMENT_UPDATE
ocb-agent
  • OCB_AGENT_INSPECT
  • OCB_AGENT_READ
  • OCB_AGENT_CREATE
  • OCB_AGENT_DELETE
  • OCB_AGENT_MOVE
  • OCB_AGENT_UPDATE
ocb-agent-plugin

(ocb-agent subresource)

  • OCB_AGENT_PLUGIN_INSPECT
  • OCB_AGENT_PLUGIN_READ
  • OCB_AGENT_PLUGIN_UPDATE
ocb-agent-key

(ocb-agent subresource)

OCB_AGENT_KEY_UPDATE
ocb-agent-update-command

(ocb-agent subresource)

OCB_AGENT_UPDATE_COMMAND_CREATE
ocb-agent-dependency
  • OCB_AGENT_DEPENDENCY_INSPECT
  • OCB_AGENT_DEPENDENCY_READ
  • OCB_AGENT_DEPENDENCY_CREATE
  • OCB_AGENT_DEPENDENCY_DELETE
  • OCB_AGENT_DEPENDENCY_MOVE
  • OCB_AGENT_DEPENDENCY_UPDATE
ocb-update-bundle OCB_UPDATE_BUNDLE_MANAGE
ocb-workrequests

(Remote Connections Agents workrequests)

  • OCB_WORKREQUEST_INSPECT
  • OCB_WORKREQUEST_READ
  • OCB_WORKREQUEST_DELETE

Details About Verb + Resource Type Combinations of Remote Connections Agent

Review the permissions and API operations covered by each verb for remote connections agent resources.

The level of access is cumulative as you go from inspect to read to use to manage. A plus sign (+) in a table cell indicates incremental access when compared to the preceding cell.

For information about granting access, see Permissions.

ocb-environment

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocb-environment resource.

Verbs Permissions APIs Covered Description
inspect OCB_ENVIRONMENT_INSPECT listEnvironments List all source environment in a compartment.
read

inspect+

OCB_ENVIRONMENT_READ

inspect+

getEnvironment

Get a specific source environment by ID.

use

read+

OCB_ENVIRONMENT_UPDATE

read+

updateEnvironment

Update a specific source environment identified by an ID.

manage

use+

OCB_ENVIRONMENT_CREATE

use+

createEnvironment

Create a source environment.

manage

use+

OCB_ENVIRONMENT_DELETE

use+

deleteEnvironment

Delete a specific source environment identified by an ID.
manage

use+

OCB_ENVIRONMENT_MOVE

use+

changeEnvironmentCompartment

Move a source environment resource from one compartment to another.
ocb-agents

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocb-agents resource.

Verbs Permissions APIs Covered Description
inspect OCB_AGENT_INSPECT listAgents List all the agents in a compartment.
read

inspect+

OCB_AGENT_READ

inspect+

getAgent

Get a specific agent by an ID.
read

inspect+

OCB_AGENT_PLUGIN_READ

inspect+

getPlugin

Get plugin by name and agent OCID.
read

inspect+

OCB_AGENT_PLUGIN_INSPECT

inspect+

listPlugins

List all plugins running on a specific agent.
use

read+

OCB_AGENT_SYNC

read+

syncAgentState

Synchronize the state of an agent.
use

read+

OCB_AGENT_UPDATE

read+

updateAgent

Update the agent identified by an ID.
manage

use+

OCB_AGENT_CREATE

use+

createAgent

Create an agent.

manage

use+

OCB_AGENT_DELETE

use+

deleteAgent

Delete a specific agent resource identified by an ID.

manage

use+

OCB_AGENT_MOVE

use+

changeAgentCompartment

Move an agent resource from one compartment to another.
manage

use+

OCB_AGENT_PLUGIN_UPDATE

use+

updatePlugin

Update plugin identified by name and agent OCID.
manage

use+

OCB_AGENT_UPDATE_COMMAND_CREATE

use+

generateUpdateCommand

Create an update command.
ocb-agent-dependencies

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocb-agent-dependencies resource.

Verbs Permissions APIs Covered Description
inspect OCB_AGENT_DEPENDECNCY_INSPECT listAgentDependency List all the agent dependencies.
read

inspect+

OCB_AGENT_DEPENDECNCY_READ

inspect+

getAgentDependency

Get a specific agent dependency.
use

read+

OCB_AGENT_DEPENDENCY_UPDATE

read+

updateAgentDependency

Update a specific agent dependency.
manage

use+

OCB_AGENT_DEPENDENCY_CREATE

use+

createAgentDependency

Create an agent dependency.
manage

use+

OCB_AGENT_DEPENDENCY_DELETE

use+

deleteAgentDependency

Delete an agent dependency.

manage

use+

OCB_AGENT_DEPENDENCY_MOVE

use+

changeAgentDependencyCompartment

Move an agent dependency resource from one compartment to another.

ocb-agent-plugins

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocb-agent-plugins resource.

Verbs Permissions APIs Covered Description
inspect OCB_AGENT_PLUGIN_INSPECT listPlugins List plugins running on a specific agent.
read

inspect+

OCB_AGENT_PLUGIN_READ

inspect+

getPlugin

Get plugin by name and agent OCID.
use

read+

OCB_AGENT_PLUGIN_UPDATE

read+

updatePlugin

Update plugin identified by name and agent OCID.
ocb-update-bundle

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocb-update-bundle resource.

Verbs Permissions APIs Covered Description
manage

OCB_AGENT_UPDATE_COMMAND_CREATE

generateUpdateCommand

Create an update command.

ocb-workrequests

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocb-workrequests resource.

Verbs Permissions APIs Covered Description
inspect OCB_WORKREQUEST_INSPECT listWorkRequests List all the work requests in a compartment.
read

inspect+

OCB_WORKREQUEST_READ

inspect+

getWorkRequest

listWorkRequestErrors

listWorkRequestLogs

Get the status of the work request for a given ID.

Get the work request errors.

Get the work request logs.

manage

use+

OCB_WORKREQUEST_DELETE

use+

CancelWorkRequest

Cancel the work request with a given ID.