Resource Types and Permissions of Migration

Review the table that provides a list of Oracle Cloud Migrations resource types and associated permissions.

To assign permissions to all migration resources, use the ocm-migration-family aggregate type. For more information, see Permissions.

A policy that uses <verb> ocm-migration-family is equivalent to writing a policy with a separate <verb> <resource-type> statement for each of the individual resource types.


Resource Type	Permissions
ocm-migration	OCM_MIGRATION_INSPECT OCM_MIGRATION_READ OCM_MIGRATION_UPDATE OCM_MIGRATION_REFRESH OCM_MIGRATION_REPLICATE OCM_MIGRATION_CREATE OCM_MIGRATION_DELETE OCM_MIGRATION_MOVE
ocm-migration-asset	OCM_MIGRATION_ASSET_INSPECT OCM_MIGRATION_ASSET_READ OCM_MIGRATION_ASSET_UPDATE OCM_MIGRATION_ASSET_REFRESH OCM_MIGRATION_ASSET_REPLICATE OCM_MIGRATION_ASSET_CREATE OCM_MIGRATION_ASSET_DELETE OCM_MIGRATION_ASSET_MOVE
ocm-migration-plan	OCM_MIGRATION_PLAN_INSPECT OCM_MIGRATION_PLAN_READ OCM_MIGRATION_PLAN_EXPORT OCM_MIGRATION_PLAN_UPDATE OCM_MIGRATION_PLAN_REFRESH OCM_MIGRATION_PLAN_EXECUTE OCM_MIGRATION_PLAN_CREATE OCM_MIGRATION_PLAN_DELETE OCM_MIGRATION_PLAN_IMPORT OCM_MIGRATION_PLAN_MOVE
ocm-target-asset	OCM_TARGET_ASSET_INSPECT OCM_TARGET_ASSET_READ OCM_TARGET_ASSET_UPDATE OCM_TARGET_ASSET_CREATE OCM_TARGET_ASSET_DELETE OCM_TARGET_ASSET_MOVE
ocm-replication-task	OCM_REPLICATION_TASK_INSPECT OCM_REPLICATION_TASK_READ OCM_REPLICATION_TASK_UPDATE
ocm-connector	OCM_CONNECTOR_INSPECT OCM_CONNECTOR_UPDATE OCM_CONNECTOR_READ
ocm-replication-schedule	OCM_REPLICATION_SCHEDULE_INSPECT OCM_REPLICATION_SCHEDULE_CREATE OCM_REPLICATION_SCHEDULE_READ OCM_REPLICATION_SCHEDULE_UPDATE OCM_REPLICATION_SCHEDULE_DELETE OCM_REPLICATION_SCHEDULE_MOVE
ocm-hydration-agent-task	OCM_HYDRATION_AGENT_TASK_UPDATE OCM_HYDRATION_AGENT_TASK_INSPECT
ocm-hydration-agent-report	OCM_HYDRATION_AGENT_REPORT_STATUS

Details About Verb + Resource Type Combinations of Migration

Review the permissions and API operations covered by each verb for Oracle Cloud Migrations resources.

The level of access is cumulative as you go from inspect to read to use to manage. A plus sign (+) in a table cell indicates incremental access when compared to the preceding cell.

For information about granting access, see Permissions.

ocm-migration

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocm-migration resource.


Verbs	Permissions	APIs Covered	Description
`inspect`	`OCM_MIGRATION_INSPECT`	`ListMigrations`	List all the migration projects in a compartment.
`read`	`inspect+` `OCM_MIGRATION_READ`	`inspect+` `GetMigration`	Get a specific migration project by ID.
`use`	`read+` `OCM_MIGRATION_UPDATE`	`read+` `UpdateMigration`	Update a specific migration project.
`use`	`read+` `OCM_MIGRATION_REFRESH`	`read+` `RefreshMigration`	Refresh a specific migration project.
`use`	`read+` `OCM_MIGRATION_REPLICATE`	`read+` `StartMigrationReplication`	Start replicating a specific migration project.
`manage`	`use+` `OCM_MIGRATION_CREATE`	`use+` `CreateMigration`	Create a migration project.
`manage`	`use+` `OCM_MIGRATION_DELETE`	`use+` `DeleteMigration`	Delete a specific migration project.

ocm-migration-asset

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocm-migration-asset resource.


Verbs	Permissions	APIs Covered	Description
`inspect`	`OCM_MIGRATION_ASSET_INSPECT`	`ListMigrationAssets`	List all the assets in a migration Project.
`read`	`inspect+` `OCM_MIGRATION_ASSET_READ`	`inspect+` `GetMigrationAsset`	Get a specific asset in a migration project by ID.
`use`	`read+` `OCM_MIGRATION_ASSET_UPDATE`	`read+` `UpdateMigrationAsset`	Update a specific asset in a migration project by ID.
`use`	`read+` `OCM_MIGRATION_ASSET_REFRESH`	`read+` `RefreshMigration`	Refresh a specific migration project.
`use`	`read+` `OCM_MIGRATION_ASSET_REPLICATE`	`read+` `StartAssetReplication`	Start replicating a specific asset in a migration project.
`manage`	`use+` `OCM_MIGRATION_ASSET_CREATE`	`use+` `CreateMigrationAsset`	Create an asset within a migration project.
`manage`	`use+` `OCM_MIGRATION_ASSET_DELETE`	`use+` `DeleteMigrationAsset`	Delete a specific asset by ID.

ocm-migration-plan

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocm-migration-plan resource.


Verbs	Permissions	APIs Covered	Description
`inspect`	`OCM_MIGRATION_PLAN_INSPECT`	`ListMigrationPlans`	List all the migration plans for a migration project.
`read`	`inspect+` `OCM_MIGRATION_PLAN_READ`	`inspect+` `GetMigrationPlan`	Get a specific migration plan by ID.
`read`	`inspect+` `OCM_MIGRATION_PLAN_EXPORT`	`inspect+` `ExportMigrationPlan`	Export a specific migration plan by ID.
`use`	`read+` `OCM_MIGRATION_PLAN_UPDATE`	`read+` `UpdateMigrationPlan`	Update a specific migration plan by ID.
`use`	`read+` `OCM_MIGRATION_PLAN_EXPORT`	`read+` `ExportMigrationPlan`	Export a specific migration plan by ID.
`use`	`read+` `OCM_MIGRATION_PLAN_REFRESH`	`read+` `RefreshMigrationPlan`	Refresh a specific migration plan.
`use`	`read+` `OCM_MIGRATION_PLAN_EXECUTE`	`read+` `ExecuteMigrationPlan`	Run a migration plan by ID.
`manage`	`use+` `OCM_MIGRATION_PLAN_CREATE`	`use+` `CreateMigrationPlan`	Create a migration plan for migration projects.
`manage`	`use+` `OCM_MIGRATION_PLAN_DELETE`	`use+` `DeleteMigrationPlan`	Delete a specific migration plan.
`manage`	`use+` `OCM_MIGRATION_PLAN_IMPORT`	`use+` `ImportMigrationPlan`	Import a specific migration plan by ID.

ocm-target-asset

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocm-target-asset resource.


Verbs	Permissions	APIs Covered	Description
`inspect`	`OCM_TARGET_ASSET_INSPECT`	`ListTargetAssets`	List all the target assets in a migration plan.
`read`	`inspect+` `OCM_TARGET_ASSET_READ`	`inspect+` `GetTargetAsset`	Get a target asset in a migration plan.
`use`	`read+` `OCM_TARGET_ASSET_UPDATE`	`read+` `UpdateTargetAsset`	Update a target asset in a migration plan.
`manage`	`use+` `OCM_TARGET_ASSET_CREATE`	`use+` `CreateTargetAsset`	Create a target asset.
`manage`	`use+` `OCM_TARGET_ASSET_DELETE`	`use+` `DeleteDeployPipeline`	Delete a specific target asset.

ocm-replication-task

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocm-replication-task resource.


Verbs	Permissions	APIs Covered	Description
`inspect`	`OCM_REPLICATION_TASK_INSPECT`	`ListReplicationTasks`	List all the replication tasks in a compartment.
`read`	`inspect+` `OCM_REPLICATION_TASK_READ`	`inspect+` `GetReplicationTask`	Get a specific replication task by ID.
`use`	`read+` `OCM_REPLICATION_TASK_UPDATE`	`read+` `UpdateStatusReplicationTask`	Update the status of the replication status.

ocm-connector

This table lists the permissions and the APIs that are fully covered by the permissions, for the ocm-connector resource.


Verbs	Permissions	APIs Covered	Description
`inspect`	`OCM_CONNECTOR_INSPECT`	`GetConnectorAssetSources`	Get asset sources of the connector.
`use`	`read+` `OCM_CONNECTOR_UPDATE`	`read+` `UpdateConnectorStatus`	Update the status of the connector.
`manage`	`use+` `OCM_CONNECTOR_CREATE`	`use+` `CreateConnector`	Create a connector.

Oracle Cloud Infrastructure Documentation

Resource Types and Permissions of Migration

Details About Verb + Resource Type Combinations of Migration