You're viewing OCI IAM documentation for tenancies in regions that have not been updated to use identity domains.

Details for the Streaming Service

This topic covers details for writing policies to control access to the Streaming service.

Resource-Types

streams

stream-pull

stream-push

connect-harness

stream-pools

stream-family

Supported Variables

The Streaming service supports all the general variables (see General Variables for All Requests) plus the following:

The streams resource type can use the following variables:

Variable Variable Type Source
target.stream.id Entity (OCID) Request

The connect-harness resource type can use the following variables:

Variable Variable Type Source
target.connectharness.id Entity (OCID) Request

The stream-pools resource type can use the following variables:

Variable Variable Type Source
target.streampool.id Entity (OCID) Request

Details for Verb + Resource-Type Combinations

The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. For example, a group that can use a resource can also inspect and read that resource. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

Permissions Required for Each API Operation

API Operation Permissions Required to Use the Operation
ListStreams STREAM_INSPECT
CreateStream STREAM_CREATE
GetStream STREAM_READ
DeleteStream STREAM_DELETE
GetMessages STREAM_CONSUME
PutMessages STREAM_PRODUCE
UpdateStream STREAM_UPDATE
CreateCursor STREAM_CONSUME
CreateGroupCursor STREAM_CONSUME
GetGroup STREAM_CONSUME
UpdateGroup STREAM_CONSUME
ConsumerHeartbeat STREAM_CONSUME
ConsumerCommit STREAM_CONSUME
ListStreamPools STREAM_POOL_INSPECT
CreateStreamPool STREAM_POOL_CREATE
GetStreamPool STREAM_POOL_READ
DeleteStreamPool STREAM_POOL_DELETE
MoveStreamPool STREAM_POOL_MOVE
UpdateStreamPool STREAM_POOL_UPDATE
ListConnectHarnesses CONNECT_HARNESS_INSPECT
CreateConnectHarness CONNECT_HARNESS_CREATE
GetConnectHarness CONNECT_HARNESS_READ
DeleteConnectHarness CONNECT_HARNESS_DELETE
MoveConnectHarness CONNECT_HARNESS_MOVE
UpdateConnectHarness CONNECT_HARNESS_UPDATE