Requirements and Access for Fleet Application Management

Fleet Application Management uses a plugin to manage resources, discover product homes and apply patches on Compute instances.

OCI Compute instances use the Oracle Cloud Agent to interact with Fleet Application Management. The plugin influences the following areas in Fleet Application Management:

• Enables Fleet Application Management to discover and apply patches for the software running on Compute instances.
  Note
  
  The required policies are automatically updated when you upgrade to this release.
• Grants sudo permission on Oracle Linux instances and executes the tasks of discovering and applying patches for the software running on Compute instances with the sudo privilege.

  You must continue to state whether sudo permission is required by enabling it in the runbook and provide the correct user permissions (FAMS_SCHEDULE_CREATE_WITH_SUDO) for creating a schedule. See Basic information in creating a runbook and Permissions Required for Each API Operation.

For managing resources and fleets migrated from previous releases, where Fleet Application Management plugin isn't supported, see Migrating from Previous Releases in Fleet Application Management.

Before you begin using Fleet Application Management, ensure that you meet the following prerequisites:

• You're familiar with OCI and OCI services. To get started with OCI, see Welcome to Oracle Cloud Infrastructure.
• You have access to an OCI tenancy.
• A tenancy administrator in your organization enables Fleet Application Management and adds rules to the dynamic group  that Fleet Application Management creates during the onboarding process. See Fleet Application Management Policies and Permissions.
• A tenancy administrator in your organization has set up groups , compartments , and policies  that control which users in a group can access Fleet Application Management and its resources. See Authentication and Authorization.
• You have provisioned and deployed OCI resources that can be managed using Fleet Application Management.
• You have installed Oracle Cloud Agent for managing the plugins running on OCI Compute based on platform images supported by it. To know the supported images, see Oracle Cloud Agent.
• You have enabled OS Management Hub to discover and apply patches for Oracle Linux and Microsoft Windows OS. For more information, see Migrating from OS Management to OS Management Hub.
• You have enabled the Fleet Application Management plugin on the Oracle Cloud Agent before adding resources to a fleet. See Managing plugins.

  Important
  
  Failing to enable the plugin might delay the fleet validation process, as Fleet Application Management must automatically enable it during your fleet preparation. Note that on resource addition, Fleet Application Management automatically enables the Fleet Application Management plugin on the Oracle Cloud Agent.

To work in Fleet Application Management, a tenancy administrator in your organization must create groups, add users to groups, and add policies that control which users can access the service and its resources, and the type of access they have.

Create at least one user in the tenancy who wants to work with Fleet Application Management. This user must be created in the IAM service.

Follow these steps as a tenancy administrator:

1. Create a group or use an existing group in the tenancy.

2. Create users and add them to the group, or add existing users to the group.

3. Create policies for the groups that control users' access to Fleet Application Management resources. For more information about policy types, see Fleet Application Management Policies and Permissions.

If you're new to policies, see IAM Policies Overview.

Tenancy administrators: To know about policies that provide access to Fleet Application Management resources, see IAM Policies.

You can access Fleet Application Management by using the Console (a browser-based interface), REST API, or CLI. Instructions for using the Console, API, and CLI are included in topics throughout this documentation. For a list of available SDKs, see Software Development Kits and Command Line Interface.

• To access the Console, you must use a supported browser. To go to the Console sign-in page, open the navigation menu at the top of this page and select Infrastructure Console. You are prompted to enter your cloud tenant, your user name, and your password.

  After signing in to the Console, navigate to Fleet Application Management:

  Open the navigation menu  and select Observability & Management, and then select Fleet Application Management.

• To use the CLI or REST APIs, configure the environment by using the following options, or use OCI Cloud Shell:

  • To use the CLI or REST APIs in Cloud Shell, sign in to the Console. See Using Cloud Shell and the CLI Command Reference.

  • To install the CLI in your environment, follow the steps in Install CLI. For more information about CLI, see the Command Line Interface (CLI) overview.

  • To use the REST APIs, see REST API documentation and API Reference and Endpoints.

If you get a permission or authorization error, contact your tenancy administrator to verify the type of access that you're granted.

When you sign up for Oracle Cloud Infrastructure, a set of service limits is configured for your tenancy. The service limit is the quota or allowance set on a resource. Review the following service limits for Fleet Application Management.

See Service Limits for a list of applicable limits and instructions for requesting a limit increase.

For instructions to view the usage level against the tenancy's resource limits, see Viewing Your Service Limits, Quotas, and Usage.