Details for Verbs + Resource-Type Combinations

There are various Oracle Cloud Infrastructure verbs and resource-types that you can use when you create a policy. The topics in this section show the permissions and API operations covered by each verb for Globally Distributed Database.

The level of access is cumulative as you go from inspect to read to use to manage.

Distributed-database

Permission	APIs Fully Covered
INSPECT
DISTRIBUTED_DB_INSPECT	`ListDistributedDatabases`
READ
INSPECT +	INSPECT+
DISTRIBUTED_DB_READ	`GetDistributedDatabase` `GenerateDistributedDatabaseWallet` `DownloadDistributedDatabaseGsmCertificateSigningRequest`
MANAGE
READ +	READ +
DISTRIBUTED_DB_MANAGE	`UpdateDistributedDatabase` `PatchDistributedDatabase` `ConfigureDistributedDatabaseSharding` `RotateDistributedDatabasePasswords` `StartDistributedDatabase` `StopDistributedDatabase` `ChangeDistributedDbBackupConfig` `ValidateDistributedDatabaseNetwork` `ConfigureDistributedDatabaseGsms` `UploadDistributedDatabaseSignedCertificateAndGenerateWallet` `GenerateDistributedDatabaseGsmCertificateSigningRequest` `AddDistributedDatabaseGdsControlNode`
DISTRIBUTED_DB_MOVE	`ChangeDistributedDatabaseCompartment`
CREATE
UPDATE+	UPDATE+
DISTRIBUTED_DB_CREATE	`CreateDistributedDatabase`
DELETE
CREATE+	CREATE+
DISTRIBUTED_DB_DELETE	`DeleteDistributedDatabase`

Distributed-database-privateendpoint

Permission	APIs Fully Covered
INSPECT
DISTRIBUTED_DB_PRIVATE_ENDPOINT_INSPECT	`ListDistributedDatabasePrivateEndpoints`
READ
INSPECT +	INSPECT+
DISTRIBUTED_DB_PRIVATE_ENDPOINT_READ	`GetDistributedDatabasePrivateEndpoint`
MANAGE
READ +	READ +
DISTRIBUTED_DB_PRIVATE_ENDPOINT_MANAGE	`UpdateDistributedDatabasePrivateEndpoint` `ReinstateProxyInstance`
DISTRIBUTED_DB_PRIVATE_ENDPOINT_MOVE	`ChangeDistributedDatabasePrivateEndpointCompartment`
CREATE
UPDATE+	UPDATE+
DISTRIBUTED_DB_PRIVATE_ENDPOINT_CREATE	`CreateDistributedDatabasePrivateEndpoint`
DELETE
CREATE+	CREATE+
DISTRIBUTED_DB_PRIVATE_ENDPOINT_DELETE	`DeleteDistributedDatabasePrivateEndpoint`

Distributed-database-workrequest

Permission	APIs Fully Covered
INSPECT
DISTRIBUTED_DB_WORK_REQUEST_LIST	`ListWorkRequests`
READ
INSPECT +	INSPECT+
DISTRIBUTED_DB_WORK_REQUEST_READ	`GetWorkRequest` `ListWorkRequestErrors` `ListWorkRequestLogs`