Details for Verbs + Resource Type Combinations

There are various Oracle Cloud Infrastructure verbs and resource-types that you can use to create a policy.

The following tables show thePermissions and API operations covered by each verb for Application Dependency Management. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

For example, the read verb for the adm-knowledge-bases resource-type includes the same permissions and API operations as the inspect verb, plus the API_KNOWLEDGE_BASE_READ permission. The use verb covers additional permissions and API operations compared to read. Lastly, manage covers more permissions and operations compared to use.

For information about granting access, see Permissions.

adm-knowledge-bases


Verbs	Permissions	APIs covered	Description
`inspect`	`ADM_KNOWLEDGE_BASE_INSPECT`	`ListKnowledgeBases`	List all the knowledge bases in a compartment.
`read`	`inspect+` `ADM_KNOWLEDGE_BASE_READ`	`inspect+` `GetKnowledgeBase`	Get a specific knowledge base by ID.
`use`	`read+` `ADM_KNOWLEDGE_BASE_UPDATE`	`read+` `UpdateKnowledgeBase`	Update a specific knowledge base.
`manage`	`use+` `ADM_KNOWLEDGE_BASE_CREATE`	`use+` `CreateKnowledgeBase`	Create a knowledge base.
`manage`	`use+` `ADM_KNOWLEDGE_BASE_DELETE`	`use+` `DeleteKnowledgeBase`	Delete a specific knowledge base.
`manage`	`use+` `ADM_KNOWLEDGE_BASE_MOVE`	`use+` `ChangeKnowledgeBaseCompartment`	Move a knowledge base to a different compartment.

adm-vulnerability-audits


Verbs	Permissions	APIs covered	Description
`inspect`	`ADM_VULNERABILITY_AUDIT_INSPECT`	`ListVulnerabilityAudits`	List all the vulnerability audits in a compartment.
`read`	`inspect+` `ADM_VULNERABILITY_AUDIT_READ`	`inspect+` `GetVulnerabilityAudit`	Get a specific vulnerability audit by ID.
`use`	`read+` `ADM_VULNERABILITY_AUDIT_UPDATE`	`read+` `UpdateVulnerabilityAudit`	Update a specific vulnerability audit
`manage`	`use+` `ADM_VULNERABILITY_AUDIT_CREATE`	`use+` `CreateVulnerabilityAudit`	Create a vulnerability audit.
`manage`	`use+` `ADM_VULNERABILITY_AUDIT_DELETE`	`use+` `DeleteVulnerabilityAudit`	Delete a specific vulnerability audit.
`manage`	`use+` `ADM_VULNERABILITY_AUDIT_MOVE`	`use+` `ChangeVulnerabilityAuditCompartment`	Move a vulnerability audit to a different compartment.

adm-work-requests


Verbs	Permissions	APIs covered	Description
`inspect`	`ADM_WORK_REQUEST_INSPECT`	`ListWorkRequests`	List all the work requests resources in a compartment.
`read`	`inspect+` `ADM_WORK_REQUEST_READ`	`inspect+` `GetWorkRequest`	Get a specific work request by ID.
`use`	`read+` `ADM_WORK_REQUEST_CANCEL`	`read+` `CancelWorkRequest`	Cancel a specific work request.

adm-remediation-run


Verbs	Permissions	APIs covered	Description
`inspect`	`ADM_REMEDIATION_RUN_INSPECT`	`ListRemediationRuns`	List all the remediation runs in a compartment.
`read`	`inspect+` `ADM_REMEDIATION_RUN_READ`	`inspect+` `GetRemediationRun`	Get a specific remediation run by ID.
`use`	`read+` `ADM_REMEDIATION_RUN_UPDATE` `ADM_REMEDIATION_RUN_CANCEL`	`read+` `UpdateRemediationRun` `CancelRemediationRun`	Update a specific remediation run. Cancel a specific remediation run.
`manage`	`use+` `ADM_REMEDIATION_RUN_CREATE` `ADM_REMEDIATION_RUN_DELETE`	`use+` `CreateRemediationRun` `DeleteRemediationRun`	Create a specific remediation run. Delete a specific remediation run.

adm-remediation-recipe


Verbs	Permissions	APIs covered	Description
`inspect`	`ADM_REMEDIATION_RECIPE_INSPECT`	`ListRemediationRecipes`	List all the remediation recipes in a compartment.
`read`	`inspect+` `ADM_REMEDIATION_RECIPE_READ`	`inspect+` `GetRemediationRecipe`	Get a specific remediation recipe by ID.
`use`	`read+` `ADM_REMEDIATION_RECIPE_UPDATE`	`read+` `UpdateRemediationRecipe`	Update a specific remediation recipe.
`manage`	`use+` `ADM_REMEDIATION_RECIPE_CREATE` `ADM_REMEDIATION_RECIPE_DELETE` `ADM_REMEDIATION_RECIPE_MOVE`	`use+` `CreateRemediationRecipe` `DeleteRemediationRecipe` `ChangeRemediationRecipeCompartment`	Create a specific remediation recipe. Delete a specific remediation recipe. Move a specific remediation recipe.

adm-remediation-run-stages


Verbs	Permissions	APIs covered	Description
`inspect`	`ADM_REMEDIATION_RUN_STAGE_INSPECT`	`ListStages`	List all the remediation recipesn of a specific stage in a compartment.
`read`	`inspect+` `ADM_REMEDIATION_RUN_STAGE_READ`	`inspect+` `GetStage`	Get a specific remediation recipe and its stage by ID.
`use`	`read`	`use`

Oracle Cloud Infrastructure Documentation

Details for Verbs + Resource Type Combinations