When you add a cross tenancy Autonomous Data Guard standby, Autonomous Database provisions a standby database in a remote tenancy.

With a cross tenancy Autonomous Data Guard standby you can failover or switchover to a standby database in a different tenancy (or create a snapshot standby in a different tenancy). This feature also allows you to easily use an Autonomous Data Guard standby to migrate a database to a different tenancy.

Note the following for adding a cross tenancy Autonomous Data Guard standby:

• You can only create a cross tenancy Autonomous Data Guard standby using the CLI or the Autonomous Database REST APIs. This option is not available using the Oracle Cloud Infrastructure Console.

• Some of the features available when you enable an Autonomous Data Guard standby in the same tenancy, such as the automatic failover options, are not available with a cross tenancy Autonomous Data Guard standby.

  There are no automatic failover options for a cross tenancy Autonomous Data Guard standby and you can only use manual failover to failover to a cross tenancy standby.

• You can enable a cross tenancy Autonomous Database standby with either the ECPU or OCPU compute model. The standby database uses the same compute model as the primary database.

• A cross tenancy Autonomous Data Guard standby can be in the same region (local) or in a different region (cross-region).

• Only a single cross tenancy Autonomous Data Guard standby can be enabled, either local or cross-region. You cannot enable both a cross tenancy local and a cross tenancy cross-region Autonomous Data Guard standby.

  • In addition to a single cross tenancy Autonomous Data Guard standby, you can have one local or cross-region disaster recovery peer (either Autonomous Data Guard or Backup-Based Disaster Recovery).

• Customer-Managed Encryption Keys are not supported with a Cross Tenancy Autonomous Data Guard standby.

Describes prerequisites for creating a cross tenancy Autonomous Data Guard standby.

1. Create a group on the remote tenancy that contains the user that will be allowed to add the Autonomous Data Guard standby.
   1. On the remote tenancy, in the Oracle Cloud Infrastructure Console click Identity & Security.
   2. Under Identity click Domains and select an identity domain (or create a new identity domain).
   3. Under Identity domain, click Groups.
   4. To add a group, click Create group.
   5. On the Create group page, enter a Name and a Description.

      For example, enter the Name: CrossTenancyStandbyGroup.

   6. On the Create group page, click Create.
   7. Click Create to save the group.
   8. On the Group page, click Assign user to groups and select the users you want to add to the group.
   9. Click Add.
   10. On the Group page, from the Group information tab copy the OCID for use in Step 2.
2. On the source tenancy, define OCI Identity and Access Management policies for the source Autonomous Database instance.
   1. On the source tenancy, in the Oracle Cloud Infrastructure Console click Identity & Security.
   2. Under Identity, click Policies.
   3. To write a policy, click Create Policy.
   4. On the Create Policy page enter a Name and a Description.
   5. On the Create Policy page, select Show manual editor.
   6. In the policy builder, add policies so that the group in the destination tenancy is allowed to create a standby using an Autonomous Database instance on the source tenancy as the source.

      For example, define the following generic policies:

      define tenancy RemoteTenancy as ocid1.tenancy.oc1..unique_id
      define group GroupThatExistsInRemoteTenancy as ocid1.group.region1..unique_id
      admit group GroupThatExistsInRemoteTenancy of tenancy RemoteTenancy to read autonomous-databases
        in compartment id ocid1.compartment.region..unique_id

      This policy specifies the following:

      • Line 1: the OCID is the OCID of the remote tenancy. This is the tenancy where you are going to create the standby.

      • Line 2: the OCID is the OCID of the group to which the user who will create the standby belongs. This is the OCID for the group you created in Step 1.

      • Line 3: The OCID is the OCID of the compartment where the source database resides.

      Policies on Primary (Source) Tenancy To Add a Cross Tenancy Standby

      define tenancy RemoteTenancy as ocid1.tenancy.oc1..aaa_example_rcyx2a
      define group CrossTenancyStandbyGroup as ocid1.group.oc1..aaa_example_6vctn6xsaq
      admit group CrossTenancyStandbyGroup of tenancy RemoteTenancy to read autonomous-databases
         in compartment id ocid1.compartment.oc1..aaaaaaaabexample6q

      This policy specifies the CrossTenancyStandbyGroup group of the RemoteTenancy can read from Autonomous Databases in the specified compartment (on the source tenancy). To create a cross tenancy standby, the policy only needs to allow read on the source Autonomous Database instance.

   7. Click Create to save the policy.
3. Define policies for the remote tenancy.
   1. On the destination tenancy, in the Oracle Cloud Infrastructure Console click Identity & Security.
   2. Under Identity, click Policies.
   3. To write a policy, click Create Policy.
   4. On the Create Policy page enter a Name and a Description.
   5. On the Create Policy page, select Show manual editor.
   6. In the policy builder, add policies so that a group is endorsed to manage Autonomous Databases on the source tenancy.

      For example:

      Define tenancy PrimaryTenancy as ocid1.tenancy.oc1..aaaaaaaabexampleyx2a
      Endorse group CrossTenancyStandbyGroup to read autonomous-databases in tenancy PrimaryTenancy
      Allow group CrossTenancyStandbyGroup to manage autonomous-databases in tenancy

      This policy specifies the following:

      • Line 1: The OCID is the primary tenancy OCID. This is the tenancy where the primary Autonomous Database instance resides.

      • Line 2: Specifies that the CrossTenancyStandbyGroup group is endorsed in their own tenancy to read the source Autonomous Database in the primary tenancy.

      • Line 3: Specifies that the CrossTenancyStandbyGroup group is allowed to create/manage an Autonomous Database in the specified Tenancy (the tenancy where the Standby is going to be created).

Shows the steps to create a cross tenancy Autonomous Data Guard standby. This covers creating a cross tenancy standby when the source database and the standby database are in the same region (local) and when the source database and the standby database are in different regions (cross-region).

1. Copy the OCID of the Primary database (on the primary's Tenancy).
2. Access the tenancy where you want to create the standby, the remote tenancy, and use the CLI or the REST API to create the standby database.

   For example, with the CLI:

   oci db autonomous-database create-cross-tenancy-disaster-recovery-details 
   --compartment-id ocid1.tenancy.oc1..fcue4_example --source-id ocid1.autonomousdatabase.oc1.ap-mumbai-1.anrgexamples3q  --disaster-recovery-type ADG

   See update for more information.

   See UpdateAutonomousDatabase for more information.

Describes the procedure to switchover, failover, or create a snapshot standby with a cross tenancy standby.

Shows the steps to terminate a cross tenancy standby.