Welcome back. A few days ago, we posted the first blog on the topic, Policies in Oracle Cloud Infrastructure (OCI) Data Integration, check it out! Today, we will explore Policies some more.
Based on the previous blog, we now understand the Policies required for Oracle Cloud Infrastructure Data Integration. In this blog, let us take some example use-cases and use Policy variables and resource-type combinations. Oracle Cloud Infrastructure Data Integration is an ETL service that can be used by administrators, architects, data engineers, ETL developers, test engineers, etc. Every team has a different role to work with Data Integration. For example, Test Engineers may want to test the jobs and check if the business scenarios have been validated. Let us consider an example where an organization wants to build a data mart in an Autonomous Data Warehouse (ADW). To build a data mart, Oracle Cloud Infrastructure Data Integration has been selected.
Now, for the given scenario let us understand the Policies.
Similarly, create the policies for DI_Execution and DI_Developers.
With the help of the below policies, the DI_Execution group can only execute the Tasks in the assigned Workspace OCID. The users under the DI_Execution group cannot modify the Data Flow/Task in the given Workspace OCID.
With the help of the below policies, the DI_Developers group can create/modify/execute the Tasks in the assigned Workspace OCID.
Along with the policies mentioned above in point 5, the group (developers/QA) should have access to the Object Storage for execution and development purposes. To understand more, please refer to - Policies in Oracle Cloud Infrastructure (OCI) Data Integration
- allow group <<user_group_name>> to use objects in compartment <<compartment-name>>
- allow group <<user_group_name>> to use buckets in compartment <<compartment-name>>
This is how Policies can be used with Oracle Cloud Infrastructure Data Integration to get more control over the resources. To get further information on Policies, refer to Policies in the Service Documentation. We hope you are finding these blogs helpful! Let us know what you think.