Oracle Cloud Infrastructure Documentation

Connect to Data Integration

Before you use Data Integration, a user with administrator privileges configures security and networking, and then creates workspaces for different data integration solutions, for example, staging, testing, and production scenarios.

In this tutorial, you:

  1. Create access policies for users who don't have administrative privileges.
  2. Create a workspace for the Data Integration resources that you create and use.
  3. Get the workspace OCID to create the policies you need to restrict access to that workspace.

1. Creating Access Policies

  1. Open the Oracle Cloud Infrastructure Console navigation menu  and select Identity & Security. Then under Identity, select Policies.
  2. Select the compartment that you want to use for Data Integration.
  3. Select Create Policy and complete the following fields:
    1. For Name, enter a name without any spaces. You can use alphanumeric characters, hyphens, periods, and underscores only.
    2. For Description, enter a description to help other users know the purpose of this set of policies.
    3. In Policy Builder, use the manual editor to add the following statements, then select Create. 
      allow group <group-name> to manage dis-workspaces in compartment <compartment-name>
allow group <group-name> to manage dis-work-requests in compartment <compartment-name>
allow group <group-name> to use virtual-network-family in compartment <compartment-name>
allow group <group-name> to manage tag-namespaces in compartment <compartment-name>
  4. If you're enabling a private network for the workspace, repeat the steps to create the following policy at the compartment level: 
    allow service dataintegration to use virtual-network-family in compartment <your_compartment>
  5. In the Console navigation menu, select Networking, and then select Virtual Cloud Networks.
  6. In the list of virtual cloud networks, select the VCN that you want to work with.
  7. In the VCN's list of subnets, select the subnet that you want to work with.
  8. Select the link next to Route Table.
  9. In the Route Rules section, select Add Route Rules.
  10. Add a route rule to include the Service Gateway as its Target Type. The route rule ensures connectivity to other services such as Oracle Cloud Infrastructure Object Storage.

    For more information about recommended service gateways, see Network Configurations.

    Note

    Ensure that the Service Gateway Destination is set to All IAD Services in Oracle Services Network.

2. Creating and Accessing a Workspace

  1. In the Console navigation menu, select Analytics & AI. Under Data Lake, select Data Integration.
  2. Select Workspaces.
    Data Integration displays the Workspaces in <compartment-name> compartment page. This page shows a list of workspaces that have been created.
  3. Under List Scope, from the Compartment menu, select the compartment in which you created policies in the previous section.
  4. Select Create workspace.
  5. In the Create workspace panel, complete the fields as follows, and then select Create:
    1. For Name, enter a name without any spaces.

      You can only use alphanumeric characters, hyphens, periods, and underscores in the name.

    2. Under Network selection, leave Enable private network selected.
    3. Select the VCN and subnet where the data sources reside.
      Note

      These are the networks where the source and target data sources that you're using are located. If the source and target data sources are in a different network or region, you must separately configure appropriate gateways to establish routing between the networks. If you don't see the subnets that you want, it could be because they weren't created as regional subnets.
    The workspace takes a few minutes to create and become active. After the creation process is completed, you can access the workspace from the list on the Workspaces in <compartment-name> compartment page.
  6. On the Workspaces list page, select the workspace name.
    The home page of the workspace opens.

3. Getting Workspace OCID to Create Policies

To restrict policies at the workspace level, you need the workspace OCID. Perform either one of the procedures to get the OCID of the workspace that you created.

You use the workspace OCID to create policies later, before connecting to data sources.

  • From the Workspaces page, select the Actions menu (Actions menu) corresponding to the workspace, and then select Copy OCID.

    copy-ocid-from-workspace-page

  • From the Home tab in a workspace, select Copy in the tip that's next to the workspace name.

    copy-ocid-from-workspace-details-page