The image shows these prerequisite configuration steps that you must perform to enable backups to Autonomous Recovery Service.

1. Use the Autonomous Recovery Service policy templates to assign permissions for Recovery Service user and administrators in your tenancy. You must also assign permissions for the target Database Service to use Recovery Service. Multicloud Oracle Database Services, such as Oracle Database@Azure and Oracle Database@Google Cloudhave specific policy templates that you can choose in the Policy Builder.
2. In the database VCN, create a private subnet (recommended size: /24), define the ingress and egress rules to enable the backup network traffic between your database and Recovery Service. You can either use Security Lists or Network Security Groups (NSG) to define the security rules.
3. Register the database private subnet (backup subnet) as the Recovery Service subnet. For multicloud Oracle Databases, you must register the Recovery Service subnet by associating NSGs.
4. Enable the OCI-managed Automatic Backups feature for your database. Select Autonomous Recovery Service as the backup destination. Choose a protection policy (Platinum, Gold, Silver, Bronze, or Custom) that best suits your backup retention, storage location, and protection rules. Enable Real-time data protection (extra-cost option) for zero data loss protection.