Oracle Cloud Infrastructure (OCI) IAM Policies related to OCI Alarms

Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) is a critical component that allows you to control access and permissions for your OCI resources. When working with OCI Alarms, it’s essential to understand the IAM policies related to alarms to ensure proper access control and security. In this article, we’ll discuss the IAM policies related to OCI Alarms and how to configure them.

OCI IAM policies are statements that define who (users or groups) can access which resources and the type of actions they can perform. Policies consist of one or more statements, and each statement specifies a set of permissions using a simple, human-readable language.

Alarm-Viewers — to view alarms

Allow group Alarm-Viewers to read alarms in tenancy

Allow group Alarm-Viewers to read metrics in tenancy

Alarm-Admins — to create and manage alarms

Allow group Alarm-Admins to manage alarms in tenancy

Allow group Alarm-Admins to read metrics in tenancy

Allow group Alarm-Admins to manage ons-topics in tenancy

Metric-Readers — to view and retrieve metrics

Allow group Metric-Readers to read metrics in compartment ABC

Restrict group “Metric-Readers” to view and retrieve metrics from only the specified Metric Namespace:

Allow group Metric-Readers to read metrics in compartment ABC
where target.metrics.namespace='oci_computeagent'

Metric-Viewers — to only view metrics

Allow group Metric-Viewers to inspect metrics in compartment ABC

Metric-Developers — to publish custom metrics

Allow group Metric-Developers to use metrics in tenancy

Restrict group “Metric-Developers” to publish metrics only in the specified Metric Namespace:

Allow group Metric-Developers to use metrics in tenancy where target.metrics.namespace='mycustomnamespace'

Author
Recent Posts

Brijesh Gogia

I’m an experienced Cloud/Oracle Applications/DBA Architect with more than 15 years of full-time DBA/Architect experience. I have gained wide knowledge on Oracle and Non-Oracle software stack running on-prem and on Cloud and have worked on several big projects for multi-national companies. I enjoy working with leading-edge technology and have a passion for Cloud architecture, automation, database performance, and stability. Thankfully my work allows me time for researching new technologies (and to write about them).

Oracle Cloud Infrastructure (OCI) IAM Policies related to OCI Alarms

Related posts: