Oracle Cloud Infrastructure Documentation

Details for Application Performance Monitoring

Details for Application Performance Monitoring.

This topic covers details for writing policies to control access to the Application Performance Monitoring (APM) service.

Resource-Types

apm-domains

Details for Verb + Resource-Type Combinations

The following table shows the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

For example, the use and manage verbs for the apm-domains resource-type cover no extra permissions or API operations compared to the read verb.

apm-domains

Verbs Permissions APIs Fully Covered APIs Partially Covered
inspect

APM_DOMAIN_LIST

ListApmDomains

ListWorkRequests

ListWorkRequestErrors

ListWorkRequestLogs

none
read

INSPECT +

APM_DOMAIN_READ

GetApmDomain

ListApmDomainWorkRequests

GetWorkRequest

GetMonitor

GetMonitorResult

ListMonitors

ListPublicVantagePoints

GetScript

ListScripts

ListQuickPicks

Query

GetSpan

GetTrace

RetrieveNamespaces

RetrieveNamespaceMetrics

ValidateSpanFilterPattern

GetConfig

ListConfigs

none
use

READ +

APM_DOMAIN_UPDATE

APM_DOMAIN_DATA_UPLOAD

UpdateApmDomain

ListDataKeys

GenerateDataKeys

RemoveDataKeys

CreateMonitor

DeleteMonitor

UpdateMonitor

CreateScript

DeleteScript

UpdateScript

CreateConfig

DeleteConfig

UpdateConfig

PostObservation

none
manage

USE +

APM_DOMAIN_CREATE

APM_DOMAIN_DELETE

APM_DOMAIN_MOVE

CreateApmDomain

DeleteApmDomain

ChangeApmDomainCompartment

none

Permissions Required for Each API Operation

The following tables list the API operations and the permissions required to use the operations. For information about permissions, see Permissions.

Application Performance Monitoring Control Plane API Operations

The following table lists the APM Control Plane API operations, grouped by resource. Permissions for WorkRequests operations are based on the permissions for the APM domain.

API Operation Permissions Required to Use the Operation
ChangeApmDomainCompartment APM_DOMAIN_MOVE permission on both the source and the destination compartments
CreateApmDomain APM_DOMAIN_CREATE
DeleteApmDomain APM_DOMAIN_DELETE
GenerateDataKeys APM_DOMAIN_UPDATE
GetApmDomain APM_DOMAIN_READ
ListApmDomains APM_DOMAIN_LIST
ListApmDomainWorkRequests APM_DOMAIN_READ
ListDataKeys APM_DOMAIN_UPDATE
RemoveDataKeys APM_DOMAIN_UPDATE
UpdateApmDomain APM_DOMAIN_UPDATE
GetWorkRequest APM_DOMAIN_READ
ListWorkRequests APM_DOMAIN_LIST
ListWorkRequestErrors APM_DOMAIN_LIST
ListWorkRequestLogs APM_DOMAIN_LIST

Application Performance Monitoring Synthetic Monitoring API Operations

The following table lists the APM Synthetic Monitoring API operations, grouped by resource. Permissions for the Synthetic Monitoring operations are based on the enclosing APM domain.

API Operation Permissions Required to Use the Operation
CreateMonitor APM_DOMAIN_UPDATE
DeleteMonitor APM_DOMAIN_UPDATE
GetMonitor APM_DOMAIN_READ
GetMonitorResult APM_DOMAIN_READ
ListMonitors APM_DOMAIN_READ
UpdateMonitor APM_DOMAIN_UPDATE
ListPublicVantagePoints APM_DOMAIN_READ
CreateScript APM_DOMAIN_UPDATE
DeleteScript APM_DOMAIN_UPDATE
GetScript APM_DOMAIN_READ
ListScripts APM_DOMAIN_READ
UpdateScript APM_DOMAIN_UPDATE

Application Performance Monitoring Trace Explorer API Operations

The following table lists the APM Trace Explorer API operations, grouped by resource. Permissions for the Trace Explorer operations are based on the enclosing APM domain.

API Operation Permissions Required to Use the Operation
GetSpan APM_DOMAIN_READ
GetTrace APM_DOMAIN_READ
ListQuickPicks APM_DOMAIN_READ
Query APM_DOMAIN_READ

Application Performance Monitoring Configuration API Operations

The following table lists the APM Configuration API operations, grouped by resource. Permissions for the Configuration operations are based on the enclosing APM domain.

API Operation Permissions Required to Use the Operation
RetrieveNamespaces APM_DOMAIN_READ
RetrieveNamespaceMetrics APM_DOMAIN_READ
ValidateSpanFilterPattern APM_DOMAIN_READ
CreateConfig APM_DOMAIN_UPDATE
DeleteConfig APM_DOMAIN_UPDATE
GetConfig APM_DOMAIN_READ
ListConfigs APM_DOMAIN_READ
UpdateConfig APM_DOMAIN_UPDATE

Application Performance Monitoring Collector API Operations

The following table lists the Collector API operations in alphabetical order by Top Level Path Resource and API Operation. Note that permissions for the Collector operations are based on the enclosing APM domain, not on any of the "nested" resources within the APM domain.

For information about permissions, see Permissions.

API Operation Permissions Required to Use the Operation
PostObservation APM_DOMAIN_DATA_UPLOAD