Details for Ops Insights
This topic covers details for writing policies to control access to the Ops Insights service.
Resource-Types
Individual Resource-Types
opsi-database-insights
opsi-enterprise-manager-bridges
opsi-host-insights
opsi-work-requests
opsi-exadata-insights
opsi-warehouses
opsi-warehouse-users
opsi-awr-hubs
opsi-private-endpoint
Aggregate Resource-Types
opsi-family
Comments
See the table in Permissions Required for Each API Operation for details of the API operations covered by each verb, for each individual resource-type.
Supported Variables
Only the general variables are supported (see General Variables for All Requests).
Details for Verb + Resource-Type Combinations
The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. For example, a group that can use a resource can also inspect and read that resource. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
OPSI_DATABASE_INSIGHT_INSPECT OPSI_DATABASE_CONFIGURATION_INSPECT |
|
none |
| read |
INSPECT + OPSI_DATABASE_INSIGHT_READ OPSI_DATABASE_INSIGHT_TABLESPACE_USAGE_TREND_READ OPSI_DATABASE_INSIGHT_RESOURCE_USAGE_TREND_READ OPSI_DATABASE_INSIGHT_RESOURCE_CAPACITY_TREND_READ OPSI_DATABASE_INSIGHT_RESOURCE_FORECAST_TREND_READ OPSI_DATABASE_INSIGHT_RESOURCE_UTILIZATION_INSIGHT_READ OPSI_DATABASE_INSIGHT_RESOURCE_USAGE_READ OPSI_DATABASE_INSIGHT_RESOURCE_STATISTICS_READ OPSI_DATABASE_INSIGHT_SQL_INSIGHTS_READ OPSI_DATABASE_INSIGHT_SQL_PLAN_INSIGHTS_READ OPSI_DATABASE_INSIGHT_SQL_STATISTICS_READ OPSI_DATABASE_INSIGHT_SQL_RESPONSE_TIME_DISTRIBUTIONS_READ OPSI_DATABASE_INSIGHT_SQL_STATISTICS_TIME_SERIES_READ OPSI_DATABASE_INSIGHT_SQL_STATISTICS_TIME_SERIES_BY_PLAN_READ OPSI_DATABASE_INSIGHT_SQL_SEARCH_READ OPSI_DATABASE_INSIGHT_SQL_PLAN_INSIGHTS_READ OPSI_DATABASE_INSIGHT_SQL_PLANS_READ OPSI_DATABASE_INSIGHT_SQL_TEXTS_READ |
|
none |
| use |
READ + OPSI_DATABASE_INSIGHT_SQL_BUCKET_INGEST OPSI_DATABASE_INSIGHT_SQL_TEXT_INGEST OPSI_DATABASE_INSIGHT_SQL_PLAN_LINES_INGEST OPSI_DATABASE_INSIGHT_METRICS_INGEST OPSI_DATABASE_INSIGHT_SQL_STATS_INGEST OPSI_DATABASE_INSIGHT_UPDATE |
|
none |
| manage |
USE + OPSI_DATABASE_INSIGHT_CREATE OPSI_DATABASE_INSIGHT_ENABLE OPSI_DATABASE_INSIGHT_DISABLE OPSI_DATABASE_INSIGHT_DELETE OPSI_DATABASE_INSIGHT_MOVE |
|
none |
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
OPSI_ENTERPRISE_MANAGER_BRIDGE_INSPECT |
|
none |
| read |
INSPECT + OPSI_ENTERPRISE_MANAGER_BRIDGE_READ OPSI_ENTERPRISE_MANAGER_BRIDGE_IMPORTABLE_ENTITIES_READ |
|
none |
| use |
READ + OPSI_ENTERPRISE_MANAGER_BRIDGE_UPDATE |
|
none |
| manage |
USE + OPSI_ENTERPRISE_MANAGER_BRIDGE_CREATE OPSI_ENTERPRISE_MANAGER_BRIDGE_DELETE OPSI_ENTERPRISE_MANAGER_BRIDGE_MOVE |
|
none |
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
OPSI_HOST_INSIGHT_INSPECT |
|
none |
| read |
INSPECT + OPSI_HOST_INSIGHT_RESOURCE_UTILIZATION_INSIGHT_READ OPSI_HOST_INSIGHT_RESOURCE_USAGE_TREND_READ OPSI_HOST_INSIGHT_RESOURCE_CAPACITY_TREND_READ OPSI_HOST_INSIGHT_RESOURCE_FORECAST_TREND_READ OPSI_HOST_INSIGHT_RESOURCE_USAGE_SUMMARY_READ OPSI_HOST_INSIGHT_RESOURCE_STATISTICS_READ OPSI_HOST_INSIGHT_HOSTED_ENTITIES_READ OPSI_HOST_INSIGHT_TOP_PROCESS_USAGE_TREND_READ |
|
none |
| use |
READ + OPSI_HOST_INSIGHT_METRICS_INGEST OPSI_HOST_INSIGHT_CONFIGURATION_METRICS_INGEST OPSI_HOST_INSIGHT_UPDATE |
|
none |
| manage |
USE + OPSI_HOST_INSIGHT_CREATE OPSI_HOST_INSIGHT_ENABLE OPSI_HOST_INSIGHT_DISABLE OPSI_HOST_INSIGHT_DELETE OPSI_HOST_INSIGHT_MOVE |
|
none |
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
OPSI_WORK_REQUEST_INSPECT |
|
none |
| read |
INSPECT + OPSI_WORK_REQUEST_READ |
|
none |
| use |
READ + no extra |
no extra |
none |
| manage |
USE + no extra |
no extra |
none |
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
OPSI_EXADATA_INSIGHT_INSPECT OPSI_EXADATA_CONFIGURATION_INSPECT |
|
none |
| read |
INSPECT + OPSI_EXADATA_INSIGHT_READ OPSI_EXADATA_INSIGHT_RESOURCE_CAPACITY_TREND_AGGREGATED_READ OPSI_EXADATA_INSIGHT_RESOURCE_CAPACITY_TREND_READ OPSI_EXADATA_INSIGHT_RESOURCE_FORECAST_TREND_AGGREGATED_READ OPSI_EXADATA_INSIGHT_RESOURCE_FORECAST_TREND_READ OPSI_EXADATA_INSIGHT_RESOURCE_UTILIZATION_INSIGHT_READ OPSI_EXADATA_INSIGHT_RESOURCE_USAGE_SUMMARY_AGGREGATED_READ OPSI_EXADATA_INSIGHT_RESOURCE_USAGE_SUMMARY_READ OPSI_EXADATA_INSIGHT_RESOURCE_STATISTICS_READ OPSI_EXADATA_INSIGHT_MEMBERS_READ |
|
none |
| use |
READ + OPSI_EXADATA_INSIGHT_UPDATE |
|
none |
| manage |
USE + OPSI_EXADATA_INSIGHT_CREATE OPSI_EXADATA_INSIGHT_DELETE OPSI_EXADATA_INSIGHT_ENABLE OPSI_EXADATA_INSIGHT_ENABLE OPSI_EXADATA_INSIGHT_DISABLE OPSI_EXADATA_INSIGHT_MOVE OPSI_EXADATA_INSIGHT_ADD_MEMBERS |
|
none |
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
OPSI_WAREHOUSE_INSPECT |
|
none |
| read |
INSPECT + OPSI_WAREHOUSE_READ |
|
none |
| use |
READ + OPSI_WAREHOUSE_UPDATE |
|
none |
| manage |
USE + OPSI_WAREHOUSE_CREATE OPSI_WAREHOUSE_DELETE OPSI_WAREHOUSE_MOVE OPSI_WAREHOUSE_DOWNLOAD_WALLET OPSI_WAREHOUSE_ROTATE_WALLET |
|
none |
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
OPSI_WAREHOUSE_USER_INSPECT |
|
none |
| read |
INSPECT + OPSI_WAREHOUSE_USER_READ |
|
none |
| use |
READ + OPSI_WAREHOUSE_USER_UPDATE |
|
none |
| manage |
USE + OPSI_WAREHOUSE_USER_CREATE OPSI_WAREHOUSE_USER_DELETE OPSI_WAREHOUSE_USER_MOVE |
|
none |
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
OPSI_AWRHUB_INSPECT |
|
none |
| read |
INSPECT + OPSI_AWRHUB_READ |
|
none |
| use |
READ + OPSI_AWRHUB_UPDATE |
|
none |
| manage |
USE + OPSI_AWRHUB_CREATE OPSI_AWRHUB_DELETE OPSI_AWRHUB_MOVE |
|
none |
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
OPSI_PRIVATE_ENDPOINT_INSPECT |
|
none |
| read |
INSPECT + OPSI_PRIVATE_ENDPOINT_READ |
|
none |
| use |
READ + OPSI_PRIVATE_ENDPOINT_UPDATE |
|
none |
| manage |
USE + OPSI_PRIVATE_ENDPOINT_CREATE OPSI_PRIVATE_ENDPOINT_DELETE OPSI_PRIVATE_ENDPOINT_MOVE |
|
none |
Permissions Required for Each API Operation
The following tables list the API operations in alphabetical order.
For information about permissions, see Permissions.
Database (Data Plane)
| API Operation | Permissions Required to Use the Operation |
|---|---|
IngestDatabaseMetrics |
OPSI_DATABASE_INSIGHT_METRICS_INGEST |
IngestSqlBucket |
OPSI_DATABASE_INSIGHT_SQL_BUCKET_INGEST |
IngestSqlPlanLines |
OPSI_DATABASE_INSIGHT_SQL_PLAN_LINES_INGEST |
IngestSqlStats |
OPSI_DATABASE_INSIGHT_SQL_STATS_INGEST |
IngestSqlText |
OPSI_DATABASE_INSIGHT_SQL_TEXT_INGEST |
ListDatabaseConfigurations |
OPSI_DATABASE_CONFIGURATION_INSPECT |
ListDatabaseInsights |
OPSI_DATABASE_INSIGHT_INSPECT |
ListSqlPlans |
OPSI_DATABASE_INSIGHT_SQL_PLANS_READ |
ListSqlSearches |
OPSI_DATABASE_INSIGHT_SQL_SEARCH_READ |
ListSqlTexts |
OPSI_DATABASE_INSIGHT_SQL_TEXTS_READ |
SummarizeDatabaseInsightResourceCapacityTrend |
OPSI_DATABASE_INSIGHT_RESOURCE_CAPACITY_TREND_READ |
SummarizeDatabaseInsightResourceForecastTrend |
OPSI_DATABASE_INSIGHT_RESOURCE_FORECAST_TREND_READ |
SummarizeDatabaseInsightResourceStatistics |
OPSI_DATABASE_INSIGHT_RESOURCE_STATISTICS_READ |
SummarizeDatabaseInsightResourceUsage |
OPSI_DATABASE_INSIGHT_RESOURCE_USAGE_READ |
SummarizeDatabaseInsightResourceUsageTrend |
OPSI_DATABASE_INSIGHT_RESOURCE_USAGE_TREND_READ |
SummarizeDatabaseInsightResourceUtilizationInsight |
OPSI_DATABASE_INSIGHT_RESOURCE_UTILIZATION_INSIGHT_READ |
SummarizeDatabaseInsightTablespaceUsageTrend |
OPSI_DATABASE_INSIGHT_TABLESPACE_USAGE_TREND_READ |
SummarizeSqlInsights |
OPSI_DATABASE_INSIGHT_SQL_INSIGHTS_READ |
SummarizeSqlPlanInsights |
OPSI_DATABASE_INSIGHT_SQL_PLAN_INSIGHTS_READ |
SummarizeSqlResponseTimeDistributions |
OPSI_DATABASE_INSIGHT_SQL_RESPONSE_TIME_DISTRIBUTIONS_READ |
SummarizeSqlStatistics |
OPSI_DATABASE_INSIGHT_SQL_STATISTICS_READ |
SummarizeSqlStatisticsTimeSeries |
OPSI_DATABASE_INSIGHT_SQL_STATISTICS_TIME_SERIES_READ |
SummarizeSqlStatisticsTimeSeriesByPlan |
OPSI_DATABASE_INSIGHT_SQL_STATISTICS_TIME_SERIES_BY_PLAN_READ |
Host (Data Plane)
| API Operation | Permissions Required to Use the Operation |
|---|---|
IngestHostConfiguration |
OPSI_HOST_INSIGHT_CONFIGURATION_METRICS_INGEST |
IngestHostMetrics |
OPSI_HOST_INSIGHT_METRICS_INGEST |
SummarizeHostedEntityResourceUtilizationTrends |
OPSI_HOST_INSIGHT_HOSTED_ENTITIES_READ |
SummarizeHostInsightResourceCapacityTrend |
OPSI_HOST_INSIGHT_RESOURCE_CAPACITY_TREND_READ |
SummarizeHostInsightResourceForecastTrend |
OPSI_HOST_INSIGHT_RESOURCE_FORECAST_TREND_READ |
SummarizeHostInsightResourceStatistics |
OPSI_HOST_INSIGHT_RESOURCE_STATISTICS_READ |
SummarizeHostInsightResourceUsage |
OPSI_HOST_INSIGHT_RESOURCE_USAGE_SUMMARY_READ |
SummarizeHostInsightResourceUsageTrend |
OPSI_HOST_INSIGHT_RESOURCE_USAGE_TREND_READ |
SummarizeHostInsightResourceUtilizationInsight |
OPSI_HOST_INSIGHT_RESOURCE_UTILIZATION_INSIGHT_READ |
| SummarizeHostInsightTopProcessesUsageTrend | OPSI_HOST_INSIGHT_TOP_PROCESS_USAGE_TREND_READ |
Exadata (Data Plane)
| API Operation | Permissions Required to Use the Operation |
|---|---|
IngestHostConfiguration |
OPSI_EXADATA_CONFIGURATION_INSPECT |
SummarizeExadataInsightResourceCapacityTrendAggregated |
OPSI_EXADATA_INSIGHT_RESOURCE_CAPACITY_TREND_AGGREGATED_READ |
SummarizeExadataInsightResourceCapacityTrend |
OPSI_EXADATA_INSIGHT_RESOURCE_CAPACITY_TREND_READ |
SummarizeExadataInsightResourceForecastTrendAggregated |
OPSI_EXADATA_INSIGHT_RESOURCE_FORECAST_TREND_AGGREGATED_READ |
SummarizeExadataInsightResourceForecastTrend |
OPSI_EXADATA_INSIGHT_RESOURCE_FORECAST_TREND_READ |
SummarizeExadataInsightResourceUtilizationInsight |
OPSI_EXADATA_INSIGHT_RESOURCE_UTILIZATION_INSIGHT_READ |
SummarizeExadataInsightResourceUsageAggregated |
OPSI_EXADATA_INSIGHT_RESOURCE_USAGE_SUMMARY_AGGREGATED_READ |
SummarizeExadataInsightResourceUsage |
OPSI_EXADATA_INSIGHT_RESOURCE_USAGE_SUMMARY_READ |
SummarizeExadataInsightResourceStatistics |
OPSI_EXADATA_INSIGHT_RESOURCE_STATISTICS_READ |
SummarizeExadataMembers |
OPSI_EXADATA_INSIGHT_MEMBERS_READ |
Database (Control Plane)
| API Operation | Permissions Required to Use the Operation |
|---|---|
ChangeDatabaseInsightCompartment |
OPSI_DATABASE_INSIGHT_MOVE |
ChangeEnterpriseManagerBridgeCompartment |
OPSI_ENTERPRISE_MANAGER_BRIDGE_MOVE |
CreateEnterpriseManagerBridge
|
OPSI_ENTERPRISE_MANAGER_BRIDGE_CREATE |
DeleteDatabaseInsight |
OPSI_DATABASE_INSIGHT_DELETE |
DeleteEnterpriseManagerBridge
|
OPSI_ENTERPRISE_MANAGER_BRIDGE_DELETE |
DisableDatabaseInsight |
OPSI_DATABASE_INSIGHT_DISABLE |
EnableDatabaseInsight |
OPSI_DATABASE_INSIGHT_ENABLE |
GetDatabaseInsight |
OPSI_DATABASE_INSIGHT_READ |
GetEnterpriseManagerBridge
|
OPSI_ENTERPRISE_MANAGER_BRIDGE_READ |
ListDatabaseInsights |
OPSI_DATABASE_INSIGHT_INSPECT |
ListEnterpriseManagerBridge
|
OPSI_ENTERPRISE_MANAGER_BRIDGE_INSPECT |
ListImportableEnterpriseManagerEntities |
OPSI_ENTERPRISE_MANAGER_BRIDGE_IMPORTABLE_ENTITIES_READ |
UpdateDatabaseInsight |
OPSI_DATABASE_INSIGHT_UPDATE |
UpdateEnterpriseManagerBridge
|
OPSI_ENTERPRISE_MANAGER_BRIDGE_UPDATE |
Host (Control Plane)
| API Operation | Permissions Required to Use the Operation |
|---|---|
ChangeHostInsightCompartment |
OPSI_HOST_INSIGHT_MOVE |
CreateHostInsight |
OPSI_HOST_INSIGHT_CREATE |
DeleteHostInsight |
OPSI_HOST_INSIGHT_DELETE |
DisableHostInsight |
OPSI_HOST_INSIGHT_DISABLE |
EnableHostInsight |
OPSI_HOST_INSIGHT_ENABLE |
ListHostInsights |
OPSI_HOST_INSIGHT_INSPECT |
UpdateHostInsight |
OPSI_HOST_INSIGHT_UPDATE |
Exadata (Control Plane)
| API Operation | Permissions Required to Use the Operation |
|---|---|
ListExadataInsights |
OPSI_EXADATA_INSIGHT_INSPECT |
CreateExadataInsight |
OPSI_EXADATA_INSIGHT_CREATE |
GetExadataInsight |
OPSI_EXADATA_INSIGHT_READ |
UpdateExadataInsight |
OPSI_EXADATA_INSIGHT_UPDATE |
DeleteExadataInsight |
OPSI_EXADATA_INSIGHT_DELETE |
EnableExadataInsight |
OPSI_EXADATA_INSIGHT_ENABLE |
DisableExadataInsight |
OPSI_EXADATA_INSIGHT_DISABLE |
ChangeExadataInsightCompartment |
OPSI_EXADATA_INSIGHT_MOVE |
Work Requests (Control Plane)
| API Operation | Permissions Required to Use the Operation |
|---|---|
GetWorkRequest |
OPSI_WORK_REQUEST_READ |
ListWorkRequestErrors |
OPSI_WORK_REQUEST_INSPECT |
ListWorkRequestLogs |
OPSI_WORK_REQUEST_INSPECT |
ListWorkRequests |
OPSI_WORK_REQUEST_INSPECT |
Warehouse (Control Plane)
| API Operation | Permissions Required to Use the Operation |
|---|---|
ListOperationsInsightsWarehouses |
OPSI_WAREHOUSE_INSPECT |
GetOperationsInsightsWarehouse |
OPSI_WAREHOUSE_READ |
SummarizeOperationsInsightsWarehouseResourceUsage |
OPSI_WAREHOUSE_READ |
CreateOperationsInsightsWarehouse |
OPSI_WAREHOUSE_CREATE |
UpdateOperationsInsightsWarehouse |
OPSI_WAREHOUSE_UPDATE |
DeleteOperationsInsightsWarehouse |
OPSI_WAREHOUSE_DELETE |
ChangeOperationsInsightsWarehouseCompartment |
OPSI_WAREHOUSE_MOVE |
DownloadOperationsInsightsWarehouseWallet |
OPSI_WAREHOUSE_DOWNLOAD_WALLET |
RotateOperationsInsightsWarehouseWallet |
OPSI_WAREHOUSE_ROTATE_WALLET |
Warehouse User (Control Plane)
| API Operation | Permissions Required to Use the Operation |
|---|---|
ListOperationsInsightsWarehouseUsers |
OPSI_WAREHOUSE_USER_INSPECT |
GetOperationsInsightsWarehouseUser |
OPSI_WAREHOUSE_USER_READ |
CreateOperationsInsightsWarehouseUser |
OPSI_WAREHOUSE_USER_CREATE |
UpdateOperationsInsightsWarehouseUser |
OPSI_WAREHOUSE_USER_UPDATE |
DeleteOperationsInsightsWarehouseUser |
OPSI_WAREHOUSE_USER_DELETE |
ChangeOperationsInsightsWarehouseUserCompartment |
OPSI_WAREHOUSE_USER_MOVE |
AWR Hub (Control Plane)
| API Operation | Permissions Required to Use the Operation |
|---|---|
ListAwrHubs |
OPSI_AWRHUB_INSPECT |
GetAwrHub |
OPSI_AWRHUB_READ |
CreateAwrHub |
OPSI_AWRHUB_CREATE |
UpdateAwrHub |
OPSI_AWRHUB_UPDATE |
DeleteAwrHub |
OPSI_AWRHUB_DELETE |
ChangeAwrHubCompartment |
OPSI_AWRHUB_MOVE |
SummarizeAwrSourcesSummaries |
OPSI_AWRHUB_READ |
ListAwrSnapshots |
OPSI_AWRHUB_READ |
Private Endpoints (Control Plane)
| API Operation | Permissions Required to Use the Operation |
|---|---|
ListOperationsInsightsPrivateEndpoints |
OPSI_PRIVATE_ENDPOINT_INSPECT |
CreateOperationsInsightsPrivateEndpoint |
OPSI_PRIVATE_ENDPOINT_CREATE |
GetOperationsInsightsPrivateEndpoint |
OPSI_PRIVATE_ENDPOINT_READ |
UpdateOperationsInsightsPrivateEndpoint |
OPSI_PRIVATE_ENDPOINT_UPDATE |
DeleteOperationsInsightsPrivateEndpoint |
OPSI_PRIVATE_ENDPOINT_DELETE |
ChangeOperationsInsightsPrivateEndpointCompartment |
OPSI_PRIVATE_ENDPOINT_MOVE |