Resource Types, Variables, and Permissions

WebLogic Management provides various resource-types, supported variables, and verb resource type combinations for writing policies.

Important

Pre-General Availability: 2024-10-11

The following legal notice applies to Oracle pre-GA releases. For copyright and other applicable notices, see Oracle Legal Notices.

Pre-General Availability Draft Documentation Notice

This documentation is in pre-General Availability status and is intended for demonstration and preliminary use only. It may not be specific to the hardware on which you are using the software. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to this documentation and will not be responsible for any loss, costs, or damages incurred due to the use of this documentation.

Resource-Types and Variables

WebLogic Management offers both aggregate and individual resource-types for writing policies.


Aggregate Resource Type	Individual Resource Types
`wlms-family`	`wlms-managed-instances` `wlms-wlsdomains` `wlms-config` `wlms-work-requests`

Details for Verb and Resource-Type Combinations

The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

Tip

For information about using verbs, see the Policy Reference

wlms-managed-instances


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	`WLMS_MANAGED_INSTANCE_INSPECT`	`ListManagedInstances`	none
read	INSPECT + `WLMS_MANAGED_INSTANCE_READ`	`GetManagedInstance` `ListManagedInstanceScanResults` `ListManagedInstanceServers`	`SummarizeResourceInventory`
use	READ + `WLMS_MANAGED_INSTANCE_USE` `WLMS_MANAGED_INSTANCE_UPDATE`	`ScanManagedInstance` (for `WLMS_MANAGED_INSTANCE_USE`) `UpdateManagedInstance` (for `WLMS_MANAGED_INSTANCE_UPDATE`)	none

wlms-wlsdomains


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	`WLMS_WLSDOMAIN_INSPECT`	`ListWlsDomains`	none
read	INSPECT + `WLMS_WLSDOMAIN_READ`	`GetWlsDomain` `GetWlsDomainCredential` `ListApplicablePatches` `ListAgreementRecords` `ListWlsDomainScanResults` `ListWlsDomainCredentials` `ListWlsDomainServers` `ListWlsDomainsSharingMiddleware`	`SummarizeResourceInventory`
use	READ + `WLMS_WLSDOMAIN_USE` `WLMS_WLSDOMAIN_UPDATE` `WLMS_WLSDOMAIN_RESTART` `WLMS_WLSDOMAIN_PATCH` `WLMS_WLSDOMAIN_MOVE`	`WLMS_WLSDOMAIN_USE`: `CreateAgreementRecord` `ScanWlsDomain` `WLMS_WLSDOMAIN_UPDATE`: `UpdateWlsDomain` `UpdateWlsDomainCredential` `SetRestartOrder` `WLMS_WLSDOMAIN_RESTART`: `StartWlsDomain` `StopWlsDomain` `RestartWlsDomain` `WLMS_WLSDOMAIN_PATCH`: `StartWlsDomain` `StopWlsDomain` `RestartWlsDomain` `InstallLatestPatchesOnWlsDomain` `UninstallLatestPatchesFromWlsDomain` `WLMS_WLSDOMAIN_MOVE`: `ChangeWlsDomainCompartment`	none
manage	USE + `WLMS_WLSDOMAIN_DELETE`	`DeleteWlsDomain`	none

wlms-config


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
read	INSPECT + `WLMS_CONFIG_READ`	`GetConfiguration`	none
use	READ + `WLMS_CONFIG_UPDATE`	`UpdateConfiguration`	none

wlms-work-requests


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
inspect	`WLMS_WORK_REQUEST_INSPECT`	`ListWorkRequests` `ListWorkRequestErrors` `ListWorkRequestLogs`	none
read	INSPECT + `WLMS_WORK_REQUEST_READ`	`GetWorkRequest`	none

wlms-managed-instance-plugin


Verbs	Permissions	APIs Fully Covered	APIs Partially Covered
use	`WLMS_MANAGED_INSTANCE_PLUGIN_ACCESS`	No API operations are covered for this permission. This permission controls whether the WebLogic Management Service agent on the Compute Instance can access the WebLogic Management service.	none

Permissions Required for Each API Operation

Domain API Operations


`API Operation`	`Permissions Required to Use the Operation`
`DeleteWlsDomain`	`WLMS_WLSDOMAIN_DELETE`
`ListWlsDomains`	`WLMS_WLSDOMAIN_INSPECT`
`ChangeWlsDomainCompartment`	`WLMS_WLSDOMAIN_MOVE`
`InstallLatestPatchesOnWlsDomain`	`WLMS_WLSDOMAIN_PATCH`
`UninstallLatestPatchesFromWlsDomain`	`WLMS_WLSDOMAIN_PATCH`
`ListAgreementRecords`	`WLMS_WLSDOMAIN_READ`
`GetWlsDomain`	`WLMS_WLSDOMAIN_READ`
`ListWlsDomainsSharingMiddlewares`	`WLMS_WLSDOMAIN_READ`
`ListWlsDomainCredentials`	`WLMS_WLSDOMAIN_READ`
`GetWlsDomainCredential`	`WLMS_WLSDOMAIN_READ`
`ListWlsDomainServers`	`WLMS_WLSDOMAIN_READ`
`ListApplicablePatches`	`WLMS_WLSDOMAIN_READ`
`ListWlsDomainScanResults`	`WLMS_WLSDOMAIN_READ`
`StartWlsDomain`	`WLMS_WLSDOMAIN_RESTART` or `WLMS_WLSDOMAIN_PATCH`
`StopWlsDomain`	`WLMS_WLSDOMAIN_RESTART` or `WLMS_WLSDOMAIN_PATCH`
`RestartWlsDomain`	`WLMS_WLSDOMAIN_RESTART` or `WLMS_WLSDOMAIN_PATCH`
`UpdateWlsDomain`	`WLMS_WLSDOMAIN_UPDATE`
`UpdateWlsDomainCredential`	`WLMS_WLSDOMAIN_UPDATE`
`SetRestartOrder`	`WLMS_WLSDOMAIN_UPDATE`
`CreateAgreementRecord`	`WLMS_WLSDOMAIN_USE`
`ScanWlsDomain`	`WLMS_WLSDOMAIN_USE`

Managed Instance API Operations


`API Operation`	`Permissions Required to Use the Operation`
`ListManagedInstance`	`WLMS_MANAGED_INSTANCE_INSPECT`
`GetManagedInstance`	`WLMS_MANAGED_INSTANCE_READ`
`ListManagedInstanceScanResults`	`WLMS_MANAGED_INSTANCE_READ`
`ListManagedInstanceServers`	`WLMS_MANAGED_INSTANCE_READ`
`ScanManagedInstance`	`WLMS_MANAGED_INSTANCE_USE`

Work Request API Operations


`API Operation`	`Permissions Required to Use the Operation`
`ListWorkRequests`	`WLMS_WORK_REQUEST_INSPECT`
`ListWorkRequestErrors`	`WLMS_WORK_REQUEST_INSPECT`
`ListWorkRequestLogs`	`WLMS_WORK_REQUEST_INSPECT`
`GetWorkRequest`	`WLMS_WORK_REQUEST_READ`