Use Identity and Access Management (IAM) Authentication with Autonomous Database
You can configure Autonomous Database to use Oracle Cloud Infrastructure Identity
and Access Management (IAM) authentication and authorization to allow IAM users to access an Autonomous Database with IAM credentials.
Note
Autonomous Database integration with Oracle Cloud Infrastructure IAM is supported in commercial regions with identity domains as well as in the legacy IAM, which does not include identity domains. IAM with identity domains was introduced with new Oracle Cloud Infrastructure tenancies that were created after November 8, 2021. Autonomous Database supports users and groups in default and non-default identity domains.
Autonomous Database integration with Oracle Cloud Infrastructure IAM is supported in commercial regions with identity domains as well as in the legacy IAM, which does not include identity domains. IAM with identity domains was introduced with new Oracle Cloud Infrastructure tenancies that were created after November 8, 2021. Autonomous Database supports users and groups in default and non-default identity domains.
- About Identity and Access Management (IAM) Authentication with Autonomous Database
You can enable an Autonomous Database instance to use Oracle Cloud Infrastructure (IAM) authentication and authorization for users. - Prerequisites for Identity and Access Management (IAM) Authentication on Autonomous Database
Describes the prerequisites for enabling IAM user access on Autonomous Database. - Enable Identity and Access Management (IAM) Authentication on Autonomous Database
Describes the steps to enable IAM user access on Autonomous Database. - Create Identity and Access Management (IAM) Groups and Policies for IAM Users
Describes the steps to write policy statements for an IAM group to enable IAM user access to Oracle Cloud Infrastructure resources, specifically Autonomous Database instances. - Add IAM Users on Autonomous Database
To add IAM users to allow access to Autonomous Database, map database global users to IAM groups or users withCREATE USER
orALTER USER
statements (withIDENTIFIED GLOBALLY AS
clause). - Add IAM Roles on Autonomous Database
Optionally, create global roles to provide additional database roles and privileges to IAM users when multiple IAM users are mapped to the same shared global user. - Create IAM Database Password for IAM Users
To add an IAM user and allow the IAM user to login to Autonomous Database by supplying a username and password, you must create an IAM database password. - Connect to Autonomous Database with Identity and Access Management (IAM) Authentication
After the ADMIN user enables Oracle Cloud Infrastructure IAM on Autonomous Database, users log in to the Autonomous Database instance using their Oracle Cloud Infrastructure IAM credentials or access the database through an Oracle Cloud Infrastructure IAM database token. - Configure IAM Proxy Authentication
Proxy authentication allows an IAM user to proxy to a database schema for tasks such as application maintenance. - Disable Identity and Access Management (IAM) Authentication on Autonomous Database
Describes the steps to disable IAM external authentication user access for Autonomous Database. - Accessing a Database Cross-Tenancy Using an IAM Integration
Users and groups in one tenancy can access Autonomous Database instances in another tenancy if policies in both tenancies allow this. - Notes for Using Autonomous Database Tools with Identity and Access Management (IAM) Authentication
Provides notes for using Autonomous Database tools with IAM authentication enabled.
Parent topic: Manage Users