Allow Users to Manage Group Preferences in
Logging Analytics 🔗
The following permissions currently govern the management of tenant
preferences in Oracle Logging Analytics:
LOG_ANALYTICS_PREFERENCE_READ
LOG_ANALYTICS_PREFERENCE_UPDATE
LOG_ANALYTICS_PREFERENCE_DELETE
An example IAM policy statement that allows the user group
Logging-Analytics-Admins to operate on all preference groups in Oracle Logging Analytics:
allow group Logging-Analytics-Admins to {LOG_ANALYTICS_PREFERENCE_READ, LOG_ANALYTICS_PREFERENCE_UPDATE, LOG_ANALYTICS_PREFERENCE_DELETE} in tenancy
However, if you want to selectively authorize the user groups to update the
preferences for specific preference groups, then use the where clause
in the above policy statement and provide the preference group name for the parameter
target.preferences.groups.
For example, consider the requirement where you want the user group groupA to be
able to:
View all preferences in Oracle Logging Analytics
Update and delete the preferences in the preference group
entityLifecycle
Then the IAM policy statements can be:
allow group groupA to {LOG_ANALYTICS_PREFERENCE_READ} in tenancy
allow group groupA to {LOG_ANALYTICS_PREFERENCE_UPDATE, LOG_ANALYTICS_PREFERENCE_DELETE} in tenancy where target.preferences.groups = 'entityLifecycle'