Permissions Required to Monitor Exadata Infrastructure
To monitor Exadata Infrastructure and the associated storage server grid and storage servers using Database Management, you must belong to a user group in your tenancy with the required permissions on the following Database Management resource-types:
dbmgmt-external-exadata
: This resource-type allows a user group to perform tasks such as monitoring the Exadata Infrastructure, viewing the storage server grid and storage server details, and checking the connection to the storage server.dbmgmt-work-requests
: This resource-type allows a user group to monitor the work requests associated with the Exadata Infrastructure.dbmgmt-family
: This aggregate resource-type includes the individual Database Management resource-types and allows a user group to discover and monitor Exadata Infrastructure. In addition, you can use this resource-type to grant the permissions required to perform the tasks pertaining to Oracle Databases and External Database Systems.
Here are a few examples of the individual policies that grant a user group the permissions required to use Database Management for Exadata Infrastructure:
- To grant the
DB-MGMT-EXADATA-USER
user group the permission to use all Database Management features for the Exadata Infrastructure resources in the tenancy:Allow group DB-MGMT-EXADATA-USER to manage dbmgmt-external-exadata in tenancy
- To grant the
DB-MGMT-EXADATA-USER
user group the permission to perform tasks such as enabling or disabling Database Management for the Exadata Infrastructure resources, viewing the I/O Resource Management (IORM) plan, and viewing the SQL statements with the top CPU activity in a storage server in the tenancy:Allow group DB-MGMT-EXADATA-USER to use dbmgmt-external-exadata in tenancy
- To grant the
DB-MGMT-EXADATA-USER
user group the permission to perform tasks such as monitoring Exadata Infrastructure and the associated storage server grid and storage servers in the tenancy:Allow group DB-MGMT-EXADATA-USER to read dbmgmt-external-exadata in tenancy
- To grant the
DB-MGMT-EXADATA-USER
user group the permission to monitor the work requests associated with the Exadata Infrastructure in the tenancy:Allow group DB-MGMT-EXADATA-USER to read dbmgmt-work-requests in tenancy
Alternatively, a single policy using the Database Management aggregate resource-type grants the
DB-MGMT-EXADATA-USER
user group the same permissions detailed in
the preceding list as well as the permissions required to discover the Exadata
Infrastructure resource and the associated DB system and monitor its components:
Allow group DB-MGMT-EXADATA-USER to manage dbmgmt-family in tenancy
Additional Permissions Required to Monitor Exadata Infrastructure
In addition to Database Management permissions, Oracle Cloud Infrastructure Monitoring service permissions are required to monitor the Exadata Infrastructure and the associated storage server grid and storage servers.
Monitoring Service Permissions
Monitoring service permissions are required to:
- View the metrics for the Exadata Infrastructure and the associated storage server grid and storage servers in Database Management.
- View the open alarms for the storage servers in Database Management.
Here's information on the policies that provide the permissions required to perform the tasks given in the preceding list:
- To view the metrics for the Exadata Infrastructure and the associated
storage server grid and storage servers in Database Management, a
policy with the
read
verb for themetrics
resource-type must be created. Here's an example:Allow group DB-MGMT-EXADATA-USER to read metrics in compartment ABC
- To view the open alarms for the storage servers in Database Management and on the Alarm Status and
Alarm Definitions pages of the Monitoring service, a policy with
the
read
verb for thealarms
resource-type must be created (in addition to a policy with theread
verb for themetrics
resource-type). Here's an example:Allow group DB-MGMT-EXADATA-USER to read alarms in compartment ABC
To build queries and create alarms for the Exadata Infrastructure metrics using the Monitoring service, other permissions are required. For information on:
-
Monitoring service resource-types and permissions, see Details for Monitoring.
-
Common Monitoring service policies, see Common Policies.