{"id":4562,"date":"2020-03-18T19:13:44","date_gmt":"2020-03-18T22:13:44","guid":{"rendered":"https:\/\/www.dbarj.com.br\/2020\/03\/oci-manage-database-family-policy-not-working\/"},"modified":"2020-03-18T19:13:44","modified_gmt":"2020-03-18T22:13:44","slug":"oci-manage-database-family-policy-not-working","status":"publish","type":"post","link":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/","title":{"rendered":"OCI &#8220;manage database-family&#8221; policy not working"},"content":{"rendered":"<p>On OCI, sometimes you may want to restrict the capability of a given <strong>group<\/strong> to only <strong>manage databases<\/strong> in a given compartment. Let&#8217;s say your compartment name is <strong>NPRD<\/strong> and the group name is <strong>DBAs<\/strong>.<\/p>\n<p>Usually you would end-up with something like this on your policies:<\/p>\n<ul>\n<li>\n<pre class=\"\">allow group DBAs to manage database-family in compartment NPRD<\/pre>\n<\/li>\n<li>\n<pre>allow group DBAs to read all-resources in compartment NPRD<\/pre>\n<\/li>\n<\/ul>\n<p>As I also want to give them the capability of adding tags to the newly created objects, I&#8217;ve also added:<\/p>\n<ul>\n<li>\n<pre class=\"\">allow group DBAs to use tag-namespaces in compartment NPRD<\/pre>\n<\/li>\n<li>\n<pre class=\"\">allow group DBAs to inspect tag-namespaces in tenancy<\/pre>\n<\/li>\n<\/ul>\n<p>However, when clicking on &#8220;<span style=\"color: #000080;\"><strong>Create Database<\/strong><\/span>&#8221; button after filling all the fields of the &#8220;<em>Create VM DB<\/em>&#8221; flow, <span style=\"text-decoration: underline;\">nothing happened<\/span>! Searching for the audit logs, I&#8217;ve noticed some errors related to some listing functions.<\/p>\n<p id=\"cCXlfzM\"><img loading=\"lazy\" decoding=\"async\" width=\"2012\" height=\"366\" class=\"alignnone size-full wp-image-4559 \" src=\"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2020\/03\/img_5e7297f34371e.png\" alt=\"\" srcset=\"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2020\/03\/img_5e7297f34371e.png 2012w, https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2020\/03\/img_5e7297f34371e-300x55.png 300w, https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2020\/03\/img_5e7297f34371e-1024x186.png 1024w, https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2020\/03\/img_5e7297f34371e-768x140.png 768w, https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2020\/03\/img_5e7297f34371e-1536x279.png 1536w\" sizes=\"auto, (max-width: 2012px) 100vw, 2012px\" \/><\/p>\n<p>However, my &#8220;<strong>read all-resources in compartment<\/strong>&#8221; should be handling that.<\/p>\n<p>Finally, I could only solve the issue adding the following rule:<\/p>\n<ul>\n<li>\n<pre class=\"\">allow group DBAs to use virtual-network-family in compartment NPRD<\/pre>\n<\/li>\n<\/ul>\n<b>Have you enjoyed? Please leave a comment or give a \ud83d\udc4d!<\/b>\n<div class='watch-action'><div class='watch-position align-left'><div class='action-like'><a class='lbg-style2 like-4562 jlk' href='javascript:void(0)' data-task='like' data-post_id='4562' data-nonce='de4404f630' rel='nofollow'><img class='wti-pixel' src='https:\/\/www.dbarj.com.br\/wp-content\/plugins\/wti-like-post\/images\/pixel.gif' title='Like' \/><span class='lc-4562 lc'>+1<\/span><\/a><\/div><\/div> <div class='status-4562 status align-left'><\/div><\/div><div class='wti-clear'><\/div>","protected":false},"excerpt":{"rendered":"<p>On OCI, sometimes you may want to restrict the capability of a given group to only manage databases in a given compartment. Let&#8217;s say your compartment name is NPRD and the group name is DBAs. Usually you would end-up with something like this on your policies: allow group DBAs to manage database-family in compartment NPRD &hellip; <\/p>\n<p><a class=\"more-link btn\" href=\"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/\">Continue lendo<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[44],"tags":[],"class_list":["post-4562","post","type-post","status-publish","format-standard","hentry","category-oracle-cloud","item-wrap"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>OCI &quot;manage database-family&quot; policy not working - DBA - Rodrigo Jorge - Oracle Tips and Guides<\/title>\n<meta name=\"description\" content=\"This post will explain how to solve the problem of not being able to create VM Databases even when &quot;manage database-family&quot; policy is applied.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"DBA RJ\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minuto\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/\"},\"author\":{\"name\":\"DBA RJ\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\"},\"headline\":\"OCI &#8220;manage database-family&#8221; policy not working\",\"datePublished\":\"2020-03-18T22:13:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/\"},\"wordCount\":134,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/img_5e7297f34371e.png\",\"articleSection\":[\"Oracle Cloud\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/\",\"url\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/\",\"name\":\"OCI \\\"manage database-family\\\" policy not working - DBA - Rodrigo Jorge - Oracle Tips and Guides\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/img_5e7297f34371e.png\",\"datePublished\":\"2020-03-18T22:13:44+00:00\",\"description\":\"This post will explain how to solve the problem of not being able to create VM Databases even when \\\"manage database-family\\\" policy is applied.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/img_5e7297f34371e.png\",\"contentUrl\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/img_5e7297f34371e.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2020\\\/03\\\/oci-manage-database-family-policy-not-working\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OCI \\\"manage database-family\\\" policy not working\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#website\",\"url\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/\",\"name\":\"DBA - Rodrigo Jorge - Oracle Tips and Guides\",\"description\":\"Blog about Databases, Security and High Availability\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\",\"name\":\"DBA RJ\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\",\"url\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\",\"contentUrl\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\",\"width\":712,\"height\":712,\"caption\":\"DBA RJ\"},\"logo\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OCI \"manage database-family\" policy not working - DBA - Rodrigo Jorge - Oracle Tips and Guides","description":"This post will explain how to solve the problem of not being able to create VM Databases even when \"manage database-family\" policy is applied.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/","twitter_misc":{"Escrito por":"DBA RJ","Est. tempo de leitura":"1 minuto"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/#article","isPartOf":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/"},"author":{"name":"DBA RJ","@id":"https:\/\/www.dbarj.com.br\/pt-br\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9"},"headline":"OCI &#8220;manage database-family&#8221; policy not working","datePublished":"2020-03-18T22:13:44+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/"},"wordCount":134,"commentCount":0,"publisher":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9"},"image":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2020\/03\/img_5e7297f34371e.png","articleSection":["Oracle Cloud"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/","url":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/","name":"OCI \"manage database-family\" policy not working - DBA - Rodrigo Jorge - Oracle Tips and Guides","isPartOf":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/#primaryimage"},"image":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2020\/03\/img_5e7297f34371e.png","datePublished":"2020-03-18T22:13:44+00:00","description":"This post will explain how to solve the problem of not being able to create VM Databases even when \"manage database-family\" policy is applied.","breadcrumb":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/#primaryimage","url":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2020\/03\/img_5e7297f34371e.png","contentUrl":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2020\/03\/img_5e7297f34371e.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbarj.com.br\/pt-br\/2020\/03\/oci-manage-database-family-policy-not-working\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.dbarj.com.br\/pt-br\/"},{"@type":"ListItem","position":2,"name":"OCI \"manage database-family\" policy not working"}]},{"@type":"WebSite","@id":"https:\/\/www.dbarj.com.br\/pt-br\/#website","url":"https:\/\/www.dbarj.com.br\/pt-br\/","name":"DBA - Rodrigo Jorge - Oracle Tips and Guides","description":"Blog about Databases, Security and High Availability","publisher":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbarj.com.br\/pt-br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":["Person","Organization"],"@id":"https:\/\/www.dbarj.com.br\/pt-br\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9","name":"DBA RJ","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png","url":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png","contentUrl":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png","width":712,"height":712,"caption":"DBA RJ"},"logo":{"@id":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png"}}]}},"_links":{"self":[{"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/posts\/4562","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/comments?post=4562"}],"version-history":[{"count":0,"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/posts\/4562\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/media?parent=4562"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/categories?post=4562"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/tags?post=4562"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}