Oracle Cloud Infrastructure Documentation

Permissions Required to Monitor Exadata Infrastructure

To monitor Exadata Infrastructure and the associated storage server grid and storage servers using Database Management, you must belong to a user group in your tenancy with the required permissions on the following Database Management resource-types:

  • dbmgmt-external-exadata: This resource-type allows a user group to perform tasks such as monitoring the Exadata Infrastructure, viewing the storage server grid and storage server details, and checking the connection to the storage server.
  • dbmgmt-work-requests: This resource-type allows a user group to monitor the work requests associated with the Exadata Infrastructure.
  • dbmgmt-family: This aggregate resource-type includes the individual Database Management resource-types and allows a user group to discover and monitor Exadata Infrastructure. In addition, you can use this resource-type to grant the permissions required to perform the tasks pertaining to Oracle Databases and External Database Systems.

Here are a few examples of the individual policies that grant a user group the permissions required to use Database Management for Exadata Infrastructure:

  • To grant the DB-MGMT-EXADATA-USER user group the permission to use all Database Management features for the Exadata Infrastructure resources in the tenancy:
    Allow group DB-MGMT-EXADATA-USER to manage dbmgmt-external-exadata in tenancy
  • To grant the DB-MGMT-EXADATA-USER user group the permission to perform tasks such as enabling or disabling Database Management for the Exadata Infrastructure resources, viewing the I/O Resource Management (IORM) plan, and viewing the SQL statements with the top CPU activity in a storage server in the tenancy:
    Allow group DB-MGMT-EXADATA-USER to use dbmgmt-external-exadata in tenancy
  • To grant the DB-MGMT-EXADATA-USER user group the permission to perform tasks such as monitoring Exadata Infrastructure and the associated storage server grid and storage servers in the tenancy:
    Allow group DB-MGMT-EXADATA-USER to read dbmgmt-external-exadata in tenancy
  • To grant the DB-MGMT-EXADATA-USER user group the permission to monitor the work requests associated with the Exadata Infrastructure in the tenancy:
    Allow group DB-MGMT-EXADATA-USER to read dbmgmt-work-requests in tenancy

Alternatively, a single policy using the Database Management aggregate resource-type grants the DB-MGMT-EXADATA-USER user group the same permissions detailed in the preceding list as well as the permissions required to discover the Exadata Infrastructure resource and the associated DB system and monitor its components: 

Allow group DB-MGMT-EXADATA-USER to manage dbmgmt-family in tenancy

Additional Permissions Required to Monitor Exadata Infrastructure

In addition to Database Management permissions, Oracle Cloud Infrastructure Monitoring service permissions are required to monitor the Exadata Infrastructure and the associated storage server grid and storage servers.

Monitoring Service Permissions

Monitoring service permissions are required to:

  • View the metrics for the Exadata Infrastructure and the associated storage server grid and storage servers in Database Management.
  • View the open alarms for the storage servers in Database Management.

Here's information on the policies that provide the permissions required to perform the tasks given in the preceding list:

  • To view the metrics for the Exadata Infrastructure and the associated storage server grid and storage servers in Database Management, a policy with the read verb for the metrics resource-type must be created. Here's an example:
    Allow group DB-MGMT-EXADATA-USER to read metrics in compartment ABC
  • To view the open alarms for the storage servers in Database Management and on the Alarm Status and Alarm Definitions pages of the Monitoring service, a policy with the read verb for the alarms resource-type must be created (in addition to a policy with the read verb for the metrics resource-type). Here's an example:
    Allow group DB-MGMT-EXADATA-USER to read alarms in compartment ABC

To build queries and create alarms for the Exadata Infrastructure metrics using the Monitoring service, other permissions are required. For information on: