Permissions Required to Enable SQL Watch
Here's information on the permissions required to enable Database Management SQL Watch.
To enable SQL Watch for External Databases, you must have the following permissions:
External Database Permissions
To enable SQL Watch for External Databases, you must belong to a user
group in your tenancy with the use
permission on the External Database resource-types. When creating a
policy, the aggregate resource-type for External Databases,
external-database-family
, can be used.
Here's an example of a policy that grants the
DB-MGMT-ADMIN
user group the permission to enable SQL Watch for
all the External Databases in the tenancy:
Allow group DB-MGMT-ADMIN to use external-database-family in tenancy
Note that if you want to register and add a connection to an External
Database on the Database Management
Managed databases page, you need the manage
permission on the External Database resource-types.
Here's an example of a policy that grants the DB-MGMT-ADMIN
user
group the required permissions:
Allow group DB-MGMT-ADMIN to manage external-database-family in tenancy
In addition to the External Database permission, Management Agent permissions are
required to create a connection with the External Database. Here's an example of a
policy that grants the DB-MGMT-ADMIN
user group the required
Management Agent permissions:
Allow group DB-MGMT-ADMIN to manage management-agents in tenancy
For more information on the External Database service resource-types and permissions, see Details for External Database.
Database Management Permissions
To enable SQL Watch, you must belong to a user group in your tenancy with the required permissions on the following Database Management resource-types:
dbmgmt-work-requests
: This resource-type allows a user group to monitor the work requests generated when SQL Watch is being enabled.dbmgmt-family
: This aggregate resource-type includes all individual Database Management resource-types and allows a user group to enable and use all Database Management features.
Here's an example of the policy that grants the
DB-MGMT-ADMIN
user group the permission to monitor the work
requests generated when SQL Watch is enabled:
Allow group DB-MGMT-ADMIN to read dbmgmt-work-requests in tenancy
For more information on Database Management resource-types and permissions, see Policy Details for Database Management.