Detalles de Logging Analytics

En este tema, se tratan los detalles de la escritura de políticas para controlar el acceso al servicio Logging Analytics.

Tipos de recursos

Tipos de recursos Individuales

loganalytics-category

loganalytics-config-work-request

loganalytics-em-bridge

loganalytics-entity

loganalytics-entity-type

loganalytics-field

loganalytics-ingesttime-rule

loganalytics-label

loganalytics-lifecycle

loganalytics-log-group

loganalytics-lookup

loganalytics-object-collection-rule

loganalytics-ondemand-upload

loganalytics-parser

loganalytics-query

loganalytics-queryjob-work-request

loganalytics-scheduled-task

loganalytics-source

loganalytics-storage

loganalytics-storage-work-request

Tipos de recurso agregados

El tipo de recurso agregado loganalytics-features-family cubre estos tipos de recurso individuales (tipos de recurso que no se modelan como recursos; es decir, que no pertenecen a un compartimento):

loganalytics-category

loganalytics-entity-type

loganalytics-field

loganalytics-label

loganalytics-lifecycle

loganalytics-lookup

loganalytics-ondemand-upload

loganalytics-parser

loganalytics-query

loganalytics-source

loganalytics-storage

El tipo de recurso agregado loganalytics-resources-family cubre estos tipos de recurso individuales (tipos de recurso que se modelan como recursos; es decir, que pertenecen a un compartimento):

loganalytics-config-work-request

loganalytics-em-bridge

loganalytics-entity

loganalytics-ingesttime-rule

loganalytics-log-group

loganalytics-object-collection-rule

loganalytics-queryjob-work-request

loganalytics-scheduled-task

loganalytics-storage-work-request

Comentarios

Una política que utiliza <verb> loganalytics-features-family o <verb> loganalytics-resources-family equivale a escribir una sentencia <verb> <individual resource-type> independiente para cada uno de los tipos de recursos individuales de la familia.

Consulte en la tabla Permisos necesarios para cada operación de API los detalles de las operaciones de API que cubre cada verbo para cada tipo de recurso individual.

Variables soportadas

Solo están soportadas las variables generales (consulte Variables generales para todas las solicitudes).

Detalles de combinaciones de verbo + tipo de recurso

En las siguientes tablas, se muestran los permisos y las operaciones de API que abarca cada verbo. El nivel de acceso es acumulativo al recorrer la progresión inspect > read > use > manage. Por ejemplo, un grupo que puede utilizar un recurso también puede inspeccionar y leer ese recurso. Un signo más (+) en una celda de la tabla indica un acceso incremental en comparación con la celda directamente por encima, mientras que "no extra" indica que no hay acceso incremental.

loganalytics-category


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_CATEGORY_INSPECT	`ListCategories` `ListResourceCategories`	ninguna
read	INSPECT + LOG_ANALYTICS_CATEGORY_READ	`GetCategory`	ninguna
use	READ + no extra	ninguna	ninguna
manage	USE + LOG_ANALYTICS_CATEGORY_UPDATE LOG_ANALYTICS_CATEGORY_DELETE	`UpdateResourceCategories` `DeleteResourceCategories`	ninguna

loganalytics-config-work-request


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_CONFIG_WORK_REQUEST_INSPECT	`ListConfigWorkRequests`	ninguna
read	INSPECT + LOG_ANALYTICS_CONFIG_WORK_REQUEST_READ	`GetConfigWorkRequest`	ninguna
use	READ + LOG_ANALYTICS_CONFIG_WORK_REQUEST_CREATE LOG_ANALYTICS_CONFIG_WORK_REQUEST_DELETE	no extra	ninguna
manage	USE + no extra	no extra	ninguna

Loganalytics-em-bridge


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_EM_BRIDGE_INSPECT	`ListLogAnalyticsEMBridges` `GetLogAnalyticsEMBridgeSummary`	ninguna
read	INSPECT + LOG_ANALYTICS_EM_BRIDGE_READ	`GetLogAnalyticsEMBridge`	ninguna
use	READ + no extra	ninguna	ninguna
manage	USE + LOG_ANALYTICS_EM_BRIDGE_CREATE LOG_ANALYTICS_EM_BRIDGE_UPDATE LOG_ANALYTICS_EM_BRIDGE_DELETE LOG_ANALYTICS_EM_BRIDGE_MOVE	`CreateLogAnalyticsEMBridge` `UpdateLogAnalyticsEMBridge` `DeleteLogAnalyticsEMBridge` `ChangeLogAnalyticsEMBridgeCompartment`	ninguna

loganalytics-entity


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_ENTITY_INSPECT	`GetLogAnalyticsEntitiesSummary` `ListEntityAssociations` `ListLogAnalyticsEntities`	ninguna
read	INSPECT + LOG_ANALYTICS_ENTITY_READ	`GetLogAnalyticsEntity`	ninguna
use	READ + LOG_ANALYTICS_ENTITY_CREATE LOG_ANALYTICS_ENTITY_DELETE LOG_ANALYTICS_ENTITY_MOVE LOG_ANALYTICS_ENTITY_UPDATE LOG_ANALYTICS_ENTITY_UPLOAD_LOGS	`AddEntityAssociation` `ChangeLogAnalyticsEntityCompartment` `CreateLogAnalyticsEntity` `DeleteLogAnalyticsEntity` `RemoveEntityAssociations` `UpdateLogAnalyticsEntity`	ninguna
manage	USE + no extra	no extra	ninguna

loganalytics-Entity-type


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_ENTITY_TYPE_INSPECT	`ListLogAnalyticsEntityTypes`	ninguna
read	INSPECT + LOG_ANALYTICS_ENTITY_TYPE_READ	`GetLogAnalyticsEntityType`	ninguna
use	READ + LOG_ANALYTICS_ENTITY_TYPE_CREATE LOG_ANALYTICS_ENTITY_TYPE_DELETE LOG_ANALYTICS_ENTITY_TYPE_UPDATE	`CreateLogAnalyticsEntityType` `DeleteLogAnalyticsEntityType` `UpdateLogAnalyticsEntityType`	ninguna
manage	USE + no extra	no extra	ninguna

loganalytics-field


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_FIELD_INSPECT	`GetFieldsSummary` `ListFields`	ninguna
read	INSPECT + LOG_ANALYTICS_FIELD_READ	`GetField`	ninguna
use	READ + LOG_ANALYTICS_FIELD_CREATE LOG_ANALYTICS_FIELD_DELETE LOG_ANALYTICS_FIELD_UPDATE	`DeleteField` `UpsertField`	ninguna
manage	USE + no extra	no extra	ninguna

regla loganalytics-ingesttime


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_INGESTTIME_RULE_INSPECT	`ListIngestTimeRules`	ninguna
read	INSPECT + LOG_ANALYTICS_INGESTTIME_RULE_READ	`GetIngestTimeRule`	ninguna
use	READ + LOG_ANALYTICS_INGESTTIME_RULE_CREATE LOG_ANALYTICS_INGESTTIME_RULE_UPDATE LOG_ANALYTICS_INGESTTIME_RULE_DELETE LOG_ANALYTICS_INGESTTIME_RULE_MOVE	`CreateIngestTimeRule` `UpdateIngestTimeRule` `DeleteIngestTimeRule` `EnableIngestTimeRule` `DisableIngestTimeRule` `ChangeIngestTimeRuleCompartment`	ninguna
manage	USE + ninguna	no extra	ninguna

loganalytics-label


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_LABEL_INSPECT	`GetLabelSummary` `ListLabelPriorities` `ListLabels`	ninguna
read	INSPECT + LOG_ANALYTICS_LABEL_READ	`BatchGetBasicInfo` `GetLabel` `ListLabelSourceDetails`	ninguna
use	READ + LOG_ANALYTICS_LABEL_CREATE LOG_ANALYTICS_LABEL_DELETE LOG_ANALYTICS_LABEL_UPDATE	`DeleteLabel` `UpsertLabel`	ninguna
manage	USE + no extra	no extra	ninguna

loganalytics-lifecycle


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_LIFECYCLE_INSPECT	`ListNamespaces`	ninguna
read	INSPECT + LOG_ANALYTICS_LIFECYCLE_READ LOG_ANALYTICS_PREFERENCE_READ	`GetNamespace` `GetTenantPreferences`	ninguna
use	READ + no extra	no extra	ninguna
manage	USE + LOG_ANALYTICS_LIFECYCLE_HOMEPAGE_UPDATE LOG_ANALYTICS_PREFERENCE_UPDATE LOG_ANALYTICS_LIFECYCLE_OFFBOARD LOG_ANALYTICS_PREFERENCE_DELETE LOG_ANALYTICS_LIFECYCLE_ONBOARD	`OffboardNamespace` `OnboardNamespace` `DeleteTenantPreferences` `UpdateTenantPreferences`	ninguna

loganalytics-log-group


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_LOG_GROUP_INSPECT	`GetLogAnalyticsLogGroupsSummary` `ListLogAnalyticsLogGroups`	ninguna
read	INSPECT + LOG_ANALYTICS_LOG_GROUP_READ	`GetLogAnalyticsLogGroup`	ninguna
use	READ + LOG_ANALYTICS_LOG_GROUP_CREATE LOG_ANALYTICS_LOG_GROUP_UPDATE LOG_ANALYTICS_LOG_GROUP_UPLOAD_LOGS	`ChangeLogAnalyticsLogGroupCompartment` `CreateLogAnalyticsLogGroup` `UpdateLogAnalyticsLogGroup`	ninguna
manage	USE + LOG_ANALYTICS_LOG_GROUP_DELETE_LOGS	`DeleteLogAnalyticsLogGroup`	ninguna

loganalytics-lookup


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_LOOKUP_INSPECT	ninguna	ninguna
read	INSPECT + LOG_ANALYTICS_LOOKUP_READ	ninguna	ninguna
use	READ + LOG_ANALYTICS_LOOKUP_CREATE LOG_ANALYTICS_LOOKUP_DELETE LOG_ANALYTICS_LOOKUP_UPDATE	`RegisterLookups`	ninguna
manage	USE + no extra	no extra	ninguna

loganalytics-object-collection-rule


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_OBJECT_COLLECTION_RULE_INSPECT	`ListLogAnalyticsObjectCollectionRules`	ninguna
read	INSPECT + LOG_ANALYTICS_OBJECT_COLLECTION_RULE_READ	no extra	`GetLogAnalyticsObjectCollectionRule` (también necesita `inspect loganalytics-entity`, `inspect loganalytics-log-group` e `inspect loganalytics-source`)
use	READ + LOG_ANALYTICS_OBJECT_COLLECTION_RULE_CREATE LOG_ANALYTICS_OBJECT_COLLECTION_RULE_UPDATE LOG_ANALYTICS_OBJECT_COLLECTION_RULE_DELETE LOG_ANALYTICS_OBJECT_COLLECTION_RULE_MOVE	`ChangeLogAnalyticsObjectCollectionRuleCompartment` `DeleteLogAnalyticsObjectCollectionRule`	`CreateLogAnalyticsObjectCollectionRule`, `UpdateLogAnalyticsObjectCollectionRule` (ambos también necesitan `use loganalytics-entity`, `use loganalytics-log-group` y `read loganalytics-source`)
manage	USE + no extra	no extra	ninguna

loganalytics-ondemand-upload


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_ONDEMAND_UPLOAD_INSPECT	`ListSupportedCharEncodings` `ListSupportedTimezones` `ListUploads`	ninguna
read	INSPECT + LOG_ANALYTICS_ONDEMAND_UPLOAD_READ	`GetUpload` `ListUploadWarnings`	`ListUploadFiles` (también necesita `read loganalytics-log-group`)
use	READ + LOG_ANALYTICS_ONDEMAND_UPLOAD_CREATE	`ValidateFile` `ValidateSourceMapping`	`UploadLogFile` (también necesita `use loganalytics-entity`, `use loganalytics-log-group` y `read loganalytics-source`)
manage	USE + LOG_ANALYTICS_ONDEMAND_UPLOAD_DELETE	`DeleteUploadWarning`	`DeleteUpload` (también necesita `manage loganalytics-log-group`, `read loganalytics-query` y `read compartments`) `DeleteUploadFile` (también necesita `manage loganalytics-log-group`, `read loganalytics-query` y `read compartments`)

loganalytics-parser


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_PARSER_INSPECT	`GetParserSummary` `ListParserMetaPlugins` `ListParsers`	ninguna
read	INSPECT + LOG_ANALYTICS_PARSER_READ	`ExtractStructuredLogFieldPaths` `ExtractStructuredLogHeaderPaths` `GetParser` `ListParserFunctions` `TestParser`	ninguna
use	READ + LOG_ANALYTICS_PARSER_CREATE LOG_ANALYTICS_PARSER_DELETE LOG_ANALYTICS_PARSER_UPDATE	`DeleteParser` `UpsertParser`	ninguna
manage	USE + no extra	no extra	ninguna

loganalytics-query


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_QUERY_INSPECT	ninguna	`Filter`, `ParseQuery` (ambos también necesitan `read loganalytics-lifecycle`)
read	INSPECT + LOG_ANALYTICS_QUERY_VIEW	ninguna	`Export` (también necesita `read loganalytics-lifecycle`, `read loganalytics-log-group` y `read compartments` `GetQueryResult` (también necesita `read loganalytics-lifecycle` y `read loganalytics-queryjob-work-request`) `Suggest` (también necesita `read loganalytics-lifecycle` y `read compartments` `Query` (también necesita `read loganalytics-lifecycle`, `read loganalytics-log-group`, `read loganalytics-queryjob-work-request` y `read compartments`)
use	READ + no extra	ninguna	ninguna
manage	USE + no extra	ninguna	ninguna

loganalytics-queryjob-work-request


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_QUERYJOB_WORK_REQUEST_INSPECT	ninguna	`ListQueryWorkRequests` (también necesita `read loganalytics-lifecycle`)
read	INSPECT + LOG_ANALYTICS_QUERYJOB_WORK_REQUEST_READ	ninguna	`GetQueryResult` (también necesita `read loganalytics-lifecycle` y `read loganalytics-query`) `GetQueryWorkRequest`, `PutQueryWorkRequestBackground` (ambos también necesitan `read loganalytics-lifecycle`) `Query` (también necesita `read loganalytics-lifecycle`, `read loganalytics-log-group`, `read loganalytics-query` y `read compartments`)
use	READ + LOG_ANALYTICS_QUERYJOB_WORK_REQUEST_DELETE	ninguna	`CancelQueryWorkRequest` (también necesita `read loganalytics-lifecycle`)
manage	no extra	no extra	no extra

loganalytics-scheduled-task


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_ACCELERATIONTASK_INSPECT LOG_ANALYTICS_PURGETASK_INSPECT LOG_ANALYTICS_SAVEDSEARCHTASK_INSPECT	`ListScheduledTasks`	ninguna
read	INSPECT + LOG_ANALYTICS_ACCELERATIONTASK_READ LOG_ANALYTICS_PURGETASK_READ LOG_ANALYTICS_SAVEDSEARCHTASK_READ	`Clean` `GetScheduledTask` `Run`	ninguna
use	READ + LOG_ANALYTICS_ACCELERATIONTASK_CREATE LOG_ANALYTICS_ACCELERATIONTASK_DELETE LOG_ANALYTICS_ACCELERATIONTASK_MOVE LOG_ANALYTICS_ACCELERATIONTASK_UPDATE LOG_ANALYTICS_SAVEDSEARCHTASK_CREATE LOG_ANALYTICS_SAVEDSEARCHTASK_DELETE LOG_ANALYTICS_SAVEDSEARCHTASK_MOVE LOG_ANALYTICS_SAVEDSEARCHTASK_UPDATE	`ChangeScheduledTaskCompartment` para taskType ACCELERATION, ACCELERATION_MAINTENANCE o SAVED_SEARCH `CreateScheduledTask` para taskType ACCELERATION, ACCELERATION_MAINTENANCE o SAVED_SEARCH `DeleteScheduledTask` para taskType ACCELERATION, ACCELERATION_MAINTENANCE o SAVED_SEARCH `UpdateScheduledTask` para taskType ACCELERATION, ACCELERATION_MAINTENANCE o SAVED_SEARCH	ninguna
manage	USE + LOG_ANALYTICS_PURGETASK_CREATE LOG_ANALYTICS_PURGETASK_DELETE LOG_ANALYTICS_PURGETASK_MOVE LOG_ANALYTICS_PURGETASK_UPDATE	`ChangeScheduledTaskCompartment` para taskType PURGE `CreateScheduledTask` para taskType PURGE `DeleteScheduledTask` para taskType PURGE `UpdateScheduledTask` para taskType PURGE	ninguna

loganalytics-source


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_SOURCE_INSPECT	`GetAssociationSummary` `GetSourceSummary` `ListAssociatedEntities` `ListEntitySourceAssociations` `ListMetaSourceTypes` `ListSourceLabelOperators` `ListSourceMetaFunctions` `ListSources`	ninguna
read	INSPECT + LOG_ANALYTICS_SOURCE_READ	`GetColumnNames` `GetSource` `ListSourceAssociations` `ListSourceExtendedFieldDefinitions` `ListSourcePatterns` `ValidateAssociationParameters` `ValidateSourceExtendedFieldDetails`	`ExportCustomContent` (también necesita `read loganalytics-field`, `read loganalytics-label` y `read loganalytics-parser`)
use	READ + LOG_ANALYTICS_SOURCE_CREATE LOG_ANALYTICS_SOURCE_DELETE LOG_ANALYTICS_SOURCE_ENTITY_ASSOC LOG_ANALYTICS_SOURCE_ENTITY_DISASSOC LOG_ANALYTICS_SOURCE_UPDATE	`DeleteAssociations` `DeleteSource` `UpsertAssociations` `UpsertSource` `ValidateSource`	`ImportCustomContent` (también necesita `use loganalytics-field`, `use loganalytics-label` y `use loganalytics-parser`)
manage	USE + LOG_ANALYTICS_SOURCE_DISABLE_AUTOASSOC LOG_ANALYTICS_SOURCE_ENABLE_AUTOASSOC	no extra	ninguna

loganalytics-storage


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_STORAGE_INSPECT	ninguna	ninguna
read	INSPECT + LOG_ANALYTICS_STORAGE_READ	`GetStorage` `GetStorageUsage`	`GetStorageWorkRequest`, `ListStorageWorkRequestErrors` (ambos también necesitan `read loganalytics-storage-work-request`) `ListStorageWorkRequests` (también necesita `inspect loganalytics-storage-work-request`)
use	READ + LOG_ANALYTICS_STORAGE_ARCHIVE_RECALL LOG_ANALYTICS_STORAGE_ARCHIVE_RELEASE	no extra	`RecallArchivedData`, `ReleaseRecalledData` (ambos también necesitan `manage loganalytics-storage-work-request`)
manage	USE + LOG_ANALYTICS_STORAGE_ARCHIVE_DISABLE LOG_ANALYTICS_STORAGE_ARCHIVE_ENABLE LOG_ANALYTICS_STORAGE_PURGE LOG_ANALYTICS_STORAGE_UPDATE	`DisableArchiving` `EnableArchiving` `EstimatePurgeDataSize` `UpdateStorage`	`PurgeStorageData` (también necesita `manage loganalytics-storage-work-request`)

loganalytics-storage-work-request


Verbos	Permisos	API totalmente cubiertas	API parcialmente cubiertas
inspect	LOG_ANALYTICS_STORAGE_WORK_REQUEST_INSPECT	ninguna	`ListStorageWorkRequests` (también necesita `read loganalytics-storage`)
read	INSPECT + LOG_ANALYTICS_STORAGE_WORK_REQUEST_READ	ninguna	`GetStorageWorkRequest`, `ListStorageWorkRequestErrors` (ambos también necesitan `read loganalytics-storage`)
use	READ + no extra	ninguna	ninguna
manage	USE + LOG_ANALYTICS_STORAGE_WORK_REQUEST_CREATE LOG_ANALYTICS_STORAGE_WORK_REQUEST_DELETE	ninguna	`PurgeStorageData` (también necesita `manage loganalytics-storage`) `RecallArchivedData`, `ReleaseRecalledData` (ambos también necesitan `use loganalytics-storage`)

Permisos requeridos para cada operación de API

En la siguiente tabla, se muestran las operaciones de API en orden alfabético.

Para obtener más información sobre los permisos, consulte Permisos.


Operación de API	Permisos necesarios para utilizar la operación
`AddEntityAssociation`	LOG_ANALYTICS_ENTITY_UPDATE
`BatchGetBasicInfo`	LOG_ANALYTICS_LABEL_READ
`CancelQueryWorkRequest`	LOG_ANALYTICS_QUERYJOB_WORK_REQUEST_DELETE y LOG_ANALYTICS_LIFECYCLE_READ
`ChangeIngestTimeRuleCompartment`	LOG_ANALYTICS_INGESTTIME_RULE_MOVE
`ChangeLogAnalyticsEMBridgeCompartment`	LOG_ANALYTICS_EM_BRIDGE_MOVE
`ChangeLogAnalyticsEntityCompartment`	LOG_ANALYTICS_ENTITY_MOVE
`ChangeLogAnalyticsLogGroupCompartment`	LOG_ANALYTICS_LOG_GROUP_UPDATE
`ChangeLogAnalyticsObjectCollectionRuleCompartment`	LOG_ANALYTICS_OBJECT_COLLECTION_RULE_MOVE en el compartimento de origen (actual) y en el de destino (nuevo).
`ChangeScheduledTaskCompartment`	LOG_ANALYTICS_SAVEDSEARCHTASK_MOVE o LOG_ANALYTICS_ACCELERATIONTASK_MOVE o LOG_ANALYTICS_PURGETASK_MOVE
`Clean`	LOG_ANALYTICS_ACCELERATIONTASK_READ
`CreateIngestTimeRule`	LOG_ANALYTICS_INGESTTIME_RULE_CREATE
`CreateLogAnalyticsEMBridge`	LOG_ANALYTICS_EM_BRIDGE_CREATE
`CreateLogAnalyticsEntity`	LOG_ANALYTICS_ENTITY_CREATE
`CreateLogAnalyticsEntityType`	LOG_ANALYTICS_ENTITY_TYPE_CREATE
`CreateLogAnalyticsLogGroup`	LOG_ANALYTICS_LOG_GROUP_CREATE
`CreateLogAnalyticsObjectCollectionRule`	LOG_ANALYTICS_OBJECT_COLLECTION_RULE_CREATE y LOG_ANALYTICS_SOURCE_READ y LOG_ANALYTICS_LOG_GROUP_UPLOAD_LOGS y LOG_ANALYTICS_ENTITY_UPLOAD_LOGS
`CreateScheduledTask`	LOG_ANALYTICS_SAVEDSEARCHTASK_CREATE o LOG_ANALYTICS_ACCELERATIONTASK_CREATE o LOG_ANALYTICS_PURGETASK_CREATE
`DeleteAssociations`	LOG_ANALYTICS_SOURCE_ENTITY_DISASSOC
`DeleteField`	LOG_ANALYTICS_FIELD_DELETE
`DeleteIngestTimeRule`	LOG_ANALYTICS_INGESTTIME_RULE_DELETE
`DeleteLabel`	LOG_ANALYTICS_LABEL_DELETE
`DeleteLogAnalyticsEMBridge`	LOG_ANALYTICS_EM_BRIDGE_DELETE
`DeleteLogAnalyticsEntity`	LOG_ANALYTICS_ENTITY_DELETE
`DeleteLogAnalyticsEntityType`	LOG_ANALYTICS_ENTITY_TYPE_DELETE
`DeleteLogAnalyticsLogGroup`	LOG_ANALYTICS_LOG_GROUP_DELETE_LOGS
`DeleteLogAnalyticsObjectCollectionRule`	LOG_ANALYTICS_OBJECT_COLLECTION_RULE_DELETE
`DeleteParser`	LOG_ANALYTICS_PARSER_DELETE
`DeleteResourceCategories`	LOG_ANALYTICS_CATEGORY_DELETE
`DeleteScheduledTask`	LOG_ANALYTICS_SAVEDSEARCHTASK_DELETE o LOG_ANALYTICS_ACCELERATIONTASK_DELETE o LOG_ANALYTICS_PURGETASK_DELETE
`DeleteSource`	LOG_ANALYTICS_SOURCE_DELETE
`DeleteTenantPreferences`	LOG_ANALYTICS_PREFERENCE_DELETE
`DeleteUpload`	LOG_ANALYTICS_ONDEMAND_UPLOAD_DELETE y LOG_ANALYTICS_LOG_GROUP_DELETE_LOGS y LOG_ANALYTICS_QUERY_VIEW y permios de compartimento (COMPARTMENT_READ)
`DeleteUploadFile`	LOG_ANALYTICS_ONDEMAND_UPLOAD_DELETE y LOG_ANALYTICS_LOG_GROUP_DELETE_LOGS y LOG_ANALYTICS_QUERY_VIEW y permios de compartimento (COMPARTMENT_READ)
`DeleteUploadWarning`	LOG_ANALYTICS_ONDEMAND_UPLOAD_DELETE
`DisableArchiving`	LOG_ANALYTICS_STORAGE_ARCHIVE_DISABLE
`DisableIngestTimeRule`	LOG_ANALYTICS_INGESTTIME_RULE_UPDATE
`EnableArchiving`	LOG_ANALYTICS_STORAGE_ARCHIVE_ENABLE
`EnableIngestTimeRule`	LOG_ANALYTICS_INGESTTIME_RULE_UPDATE
`EstimatePurgeDataSize`	LOG_ANALYTICS_STORAGE_UPDATE
`Export`	LOG_ANALYTICS_QUERY_VIEW y READ_COMPARTMENTS y LOGANALYTICS_LOG_GROUP_READ_LOGS y LOG_ANALYTICS_LIFECYCLE_READ
`ExportCustomContent`	LOG_ANALYTICS_SOURCE_READ o LOG_ANALYTICS_PARSER_READ o LOG_ANALYTICS_FIELD_READ o LOG_ANALYTICS_LABEL_READ o LOG_ANALYTICS_METRIC_READ
`ExtractStructuredLogFieldPaths`	LOG_ANALYTICS_PARSER_READ
`ExtractStructuredLogHeaderPaths`	LOG_ANALYTICS_PARSER_READ
`Filter`	LOG_ANALYTICS_QUERY_INSPECT y LOG_ANALYTICS_LIFECYCLE_READ
`GetAssociationSummary`	LOG_ANALYTICS_SOURCE_INSPECT
`GetCategory`	LOG_ANALYTICS_CATEGORY_READ
`GetColumnNames`	LOG_ANALYTICS_SOURCE_READ
`GetConfigWorkRequest`	LOG_ANALYTICS_CONFIG_WORK_REQUEST_READ
`GetField`	LOG_ANALYTICS_FIELD_READ
`GetFieldsSummary`	LOG_ANALYTICS_FIELD_INSPECT
`GetIngestTimeRule`	LOG_ANALYTICS_INGESTTIME_RULE_READ
`GetLabel`	LOG_ANALYTICS_LABEL_READ
`GetLabelSummary`	LOG_ANALYTICS_LABEL_INSPECT
`GetLogAnalyticsEMBridge`	LOG_ANALYTICS_EM_BRIDGE_READ
`GetLogAnalyticsEMBridgeSummary`	LOG_ANALYTICS_EM_BRIDGE_INSPECT
`GetLogAnalyticsEntitiesSummary`	LOG_ANALYTICS_ENTITY_INSPECT
`GetLogAnalyticsEntity`	LOG_ANALYTICS_ENTITY_READ
`GetLogAnalyticsEntityType`	LOG_ANALYTICS_ENTITY_TYPE_READ
`GetLogAnalyticsLogGroup`	LOG_ANALYTICS_LOG_GROUP_READ
`GetLogAnalyticsLogGroupsSummary`	LOG_ANALYTICS_LOG_GROUP_INSPECT
`GetLogAnalyticsObjectCollectionRule`	LOG_ANALYTICS_OBJECT_COLLECTION_RULE_READ y LOG_ANALYTICS_LOG_GROUP_INSPECT y LOG_ANALYTICS_SOURCE_INSPECT y LOG_ANALYTICS_ENTITY_INSPECT
`GetNamespace`	LOG_ANALYTICS_LIFECYCLE_READ
`GetParser`	LOG_ANALYTICS_PARSER_READ
`GetParserSummary`	LOG_ANALYTICS_PARSER_INSPECT
`GetQueryResult`	LOG_ANALYTICS_QUERY_VIEW y LOG_ANALYTICS_QUERYJOB_WORK_REQUEST_READ y LOG_ANALYTICS_LIFECYCLE_READ
`GetQueryWorkRequest`	LOG_ANALYTICS_QUERYJOB_WORK_REQUEST_READ y LOG_ANALYTICS_LIFECYCLE_READ
`GetScheduledTask`	LOG_ANALYTICS_SAVEDSEARCHTASK_READ o LOG_ANALYTICS_ACCELERATIONTASK_READ o LOG_ANALYTICS_PURGETASK_READ
`GetSource`	LOG_ANALYTICS_SOURCE_READ
`GetSourceSummary`	LOG_ANALYTICS_SOURCE_INSPECT
`GetStorage`	LOG_ANALYTICS_STORAGE_READ
`GetStorageUsage`	LOG_ANALYTICS_STORAGE_READ
`GetStorageWorkRequest`	LOG_ANALYTICS_STORAGE_WORK_REQUEST_READ y LOG_ANALYTICS_STORAGE_READ
`GetTenantPreferences`	LOG_ANALYTICS_PREFERENCE_READ
`GetUpload`	LOG_ANALYTICS_ONDEMAND_UPLOAD_READ
`ImportCustomContent`	LOG_ANALYTICS_SOURCE_CREATE o LOG_ANALYTICS_PARSER_CREATE o LOG_ANALYTICS_FIELD_CREATE o LOG_ANALYTICS_LABEL_CREATE o LOG_ANALYTICS_METRIC_CREATE o LOG_ANALYTICS_SOURCE_UPDATE o LOG_ANALYTICS_PARSER_UPDATE o LOG_ANALYTICS_FIELD_UPDATE o LOG_ANALYTICS_LABEL_UPDATE o LOG_ANALYTICS_METRIC_UPDATE
`ListAssociatedEntities`	LOG_ANALYTICS_SOURCE_INSPECT
`ListCategories`	LOG_ANALYTICS_CATEGORY_INSPECT
`ListConfigWorkRequests`	LOG_ANALYTICS_CONFIG_WORK_REQUEST_INSPECT
`ListEntityAssociations`	LOG_ANALYTICS_ENTITY_INSPECT
`ListEntitySourceAssociations`	LOG_ANALYTICS_SOURCE_INSPECT
`ListFields`	LOG_ANALYTICS_FIELD_INSPECT
`ListIngestTimeRules`	LOG_ANALYTICS_INGESTTIME_RULE_INSPECT
`ListLabelPriorities`	LOG_ANALYTICS_LABEL_INSPECT
`ListLabels`	LOG_ANALYTICS_LABEL_INSPECT
`ListLabelSourceDetails`	LOG_ANALYTICS_LABEL_READ
`ListLogAnalyticsEMBridges`	LOG_ANALYTICS_EM_BRIDGE_INSPECT
`ListLogAnalyticsEntities`	LOG_ANALYTICS_ENTITY_INSPECT
`ListLogAnalyticsEntityTypes`	LOG_ANALYTICS_ENTITY_TYPE_INSPECT
`ListLogAnalyticsLogGroups`	LOG_ANALYTICS_LOG_GROUP_INSPECT
`ListLogAnalyticsObjectCollectionRules`	LOG_ANALYTICS_OBJECT_COLLECTION_RULE_INSPECT
`ListMetaSourceTypes`	LOG_ANALYTICS_SOURCE_INSPECT
`ListNamespaces`	LOG_ANALYTICS_LIFECYCLE_INSPECT
`ListParserFunctions`	LOG_ANALYTICS_PARSER_READ
`ListParserMetaPlugins`	LOG_ANALYTICS_PARSER_INSPECT
`ListParsers`	LOG_ANALYTICS_PARSER_INSPECT
`ListQueryWorkRequests`	LOG_ANALYTICS_QUERYJOB_WORK_REQUEST_INSPECT y LOG_ANALYTICS_LIFECYCLE_READ
`ListResourceCategories`	LOG_ANALYTICS_CATEGORY_INSPECT
`ListScheduledTasks`	LOG_ANALYTICS_SAVEDSEARCHTASK_INSPECT o LOG_ANALYTICS_ACCELERATIONTASK_INSPECT o LOG_ANALYTICS_PURGETASK_INSPECT
`ListSourceAssociations`	LOG_ANALYTICS_SOURCE_READ
`ListSourceExtendedFieldDefinitions`	LOG_ANALYTICS_SOURCE_READ
`ListSourceLabelOperators`	LOG_ANALYTICS_SOURCE_INSPECT
`ListSourceMetaFunctions`	LOG_ANALYTICS_SOURCE_INSPECT
`ListSourcePatterns`	LOG_ANALYTICS_SOURCE_READ
`ListSources`	LOG_ANALYTICS_SOURCE_INSPECT
`ListStorageWorkRequestErrors`	LOG_ANALYTICS_STORAGE_WORK_REQUEST_READ y LOG_ANALYTICS_STORAGE_READ
`ListStorageWorkRequests`	LOG_ANALYTICS_STORAGE_WORK_REQUEST_INSPECT y LOG_ANALYTICS_STORAGE_READ
`ListSupportedCharEncodings`	LOG_ANALYTICS_ONDEMAND_UPLOAD_INSPECT
`ListSupportedTimezones`	LOG_ANALYTICS_ONDEMAND_UPLOAD_INSPECT
`ListUploadFiles`	LOG_ANALYTICS_ONDEMAND_UPLOAD_READ y LOG_ANALYTICS_LOG_GROUP_READ
`ListUploads`	LOG_ANALYTICS_ONDEMAND_UPLOAD_INSPECT
`ListUploadWarnings`	LOG_ANALYTICS_ONDEMAND_UPLOAD_READ
`OffboardNamespace`	LOG_ANALYTICS_LIFECYCLE_OFFBOARD
`OnboardNamespace`	LOG_ANALYTICS_LIFECYCLE_ONBOARD
`ParseQuery`	LOG_ANALYTICS_QUERY_INSPECT y LOG_ANALYTICS_LIFECYCLE_READ
`PurgeStorageData`	LOG_ANALYTICS_STORAGE_PURGE y LOG_ANALYTICS_STORAGE_WORK_REQUEST_CREATE
`PutQueryWorkRequestBackground`	LOG_ANALYTICS_QUERYJOB_WORK_REQUEST_READ y LOG_ANALYTICS_LIFECYCLE_READ
`Query`	LOG_ANALYTICS_QUERY_VIEW y READ_COMPARTMENTS y LOGANALYTICS_LOG_GROUP_READ_LOGS y LOG_ANALYTICS_LIFECYCLE_READ y LOG_ANALYTICS_QUERYJOB_WORK_REQUEST_READ
`RecallArchivedData`	LOG_ANALYTICS_STORAGE_ARCHIVE_RECALL y LOG_ANALYTICS_STORAGE_WORK_REQUEST_CREATE
`RegisterLookup`	LOG_ANALYTICS_LOOKUP_CREATE
`ReleaseRecalledData`	LOG_ANALYTICS_STORAGE_ARCHIVE_RELEASE y LOG_ANALYTICS_STORAGE_WORK_REQUEST_CREATE
`RemoveEntityAssociations`	LOG_ANALYTICS_ENTITY_UPDATE
`Run`	LOG_ANALYTICS_ACCELERATIONTASK_READ
`Suggest`	LOG_ANALYTICS_QUERY_VIEW y READ_COMPARTMENTS y LOG_ANALYTICS_LIFECYCLE_READ
`TestParser`	LOG_ANALYTICS_PARSER_READ
`UpdateLogAnalyticsEMBridge`	LOG_ANALYTICS_EM_BRIDGE_UPDATE
`UpdateLogAnalyticsEntity`	LOG_ANALYTICS_ENTITY_UPDATE
`UpdateLogAnalyticsEntityType`	LOG_ANALYTICS_ENTITY_TYPE_UPDATE
`UpdateLogAnalyticsLogGroup`	LOG_ANALYTICS_LOG_GROUP_UPDATE
`UpdateLogAnalyticsObjectCollectionRule`	LOG_ANALYTICS_OBJECT_COLLECTION_RULE_UPDATE y LOG_ANALYTICS_SOURCE_READ y LOG_ANALYTICS_LOG_GROUP_UPLOAD_LOGS y LOG_ANALYTICS_ENTITY_UPLOAD_LOGS
`UpdateResourceCategories`	LOG_ANALYTICS_CATEGORY_UPDATE
`UpdateScheduledTask`	LOG_ANALYTICS_SAVEDSEARCHTASK_UPDATE o LOG_ANALYTICS_ACCELERATIONTASK_UPDATE o LOG_ANALYTICS_PURGETASK_UPDATE
`UpdateStorage`	LOG_ANALYTICS_STORAGE_UPDATE
`UpdateTenantPreferences`	LOG_ANALYTICS_PREFERENCE_UPDATE
`UploadLogFile`	LOG_ANALYTICS_ONDEMAND_UPLOAD_CREATE y LOG_ANALYTICS_LOG_GROUP_UPLOAD_LOGS y LOG_ANALYTICS_SOURCE_READ y LOG_ANALYTICS_ENTITY_UPLOAD_LOGS
`UpsertAssociations`	LOG_ANALYTICS_SOURCE_ENTITY_ASSOC
`UpsertField`	LOG_ANALYTICS_FIELD_CREATE o LOG_ANALYTICS_FIELD_UPDATE
`UpdateIngestTimeRule`	LOG_ANALYTICS_INGESTTIME_RULE_UPDATE
`UpsertLabel`	LOG_ANALYTICS_LABEL_CREATE o LOG_ANALYTICS_LABEL_UPDATE
`UpsertParser`	LOG_ANALYTICS_PARSER_CREATE o LOG_ANALYTICS_PARSER_UPDATE
`UpsertSource`	LOG_ANALYTICS_SOURCE_CREATE o LOG_ANALYTICS_SOURCE_UPDATE
`ValidateAssociationParameters`	LOG_ANALYTICS_SOURCE_READ
`ValidateFile`	LOG_ANALYTICS_ONDEMAND_UPLOAD_CREATE
`ValidateSource`	LOG_ANALYTICS_SOURCE_CREATE o LOG_ANALYTICS_SOURCE_UPDATE
`ValidateSourceExtendedFieldDetails`	LOG_ANALYTICS_SOURCE_READ
`ValidateSourceMapping`	LOG_ANALYTICS_ONDEMAND_UPLOAD_CREATE

Documentación de Oracle Cloud Infrastructure