Data Subsetting Resources
An administrator in Oracle Cloud Infrastructure Identity and Access Management (IAM) can grant permissions as needed on individual Data Subsetting resources. As an alternative to selectively granting permissions, you can grant permissions on the data-safe-subsetting-family resource in relevant compartments, which includes permissions on all Data Subsetting related resources.
data-safe-subsetting-family Resource
The data-safe-subsetting-family resource includes all Oracle Data Safe resources related to Data Subsetting as well as target registration and common resources.
Data Subsetting resources:
Target registration resources:
Common resources:
The following table describes the permissions that you can assign to a group for the data-safe-subsetting-family resource.
| Permissions | Description |
|---|---|
inspect |
The user group can list subsetting policies and analytics. |
read or use |
The user group can list and view subsetting policies and rules. |
manage |
The user group can do the following: 1) List, view properties for, create, update, delete, and move (to another compartment) all Data Subsetting resources in a specified compartment. 2) Inspect, read, create, update, delete, and move Oracle Data Safe private endpoints, Oracle Data Safe on-premises connectors, and Oracle Data Safe target databases. 3) Read work requests in Oracle Data Safe. |
data-safe-subsetting-policies Resource
The data-safe-subsetting-policies resource represents subsetting policies in Data Subsetting.
The following table describes the permissions available for the data-safe-subsetting-policies resource.
| Permission | Description |
|---|---|
inspect |
The user group can list subsetting policies and analytics. |
read or use |
The user group can list and view properties of subsetting policies and rules. |
manage |
The user group can perform all tasks with subsetting policies, including the following: 1) List and view properties of subsetting policies and analytics. 2) Create, update, delete, and move (to another compartment) subsetting policies and rules. |
data-safe-subsetting-policy-healthreport Resource
The data-safe-subsetting-policy-healthreport resource represents subsetting readiness reports in Data Subsetting.
The following table describes the permissions available for the data-safe-subsetting-policy-healthreport resource.
| Permission | Description |
|---|---|
inspect |
The user group can list checks in subsetting readiness reports. |
read or use |
The user group can list and view checks in subsetting readiness reports. |
manage |
The user group can perform all tasks with subsetting readiness reports, including the following: 1) List and view checks in subsetting readiness reports. 2) Run a subsetting readiness report. 3) Move subsetting readiness reports to a different compartment. 4) Delete subsetting readiness reports. |
data-safe-subsetting-reports Resource
The data-safe-masking-reports resource represents reports in Data Subsetting.
The following table describes the permissions available for the data-safe-subsetting-reports resource.
| Permission | Description |
|---|---|
inspect |
The user group can list subsetting reports. |
read or use |
The user group can list and view subsetting report data. |
manage |
The user group can perform all tasks with subsetting reports, including the following: 1) List and view subsetting report data. 2) Run a data subsetting job that internally creates a report. 3) Delete subsetting reports. |