This topic lists the individual permissions available in DCT, organized by functional area. Use this reference when building custom Roles to understand what each permission grants. For an overview of how permissions relate to Accounts, Access Groups, Roles, and Objects, see Access model overview.
Access Control
Access Groups
Permission |
Description |
|---|---|
Read | View Access Groups and their details. |
Create | Create new Access Groups. |
Update | Modify an existing Access Group, including its account and Role assignments. |
Delete | Delete an Access Group. |
Accounts
Permission |
Description |
|---|---|
Read | View accounts and their details. |
Create | Create new accounts. |
Password Reset | Enable the account owner to reset their own password. |
Reset API Key | Enable the account owner to reset their own API key. |
Delete API Key | Enable the account owner to delete their own API key. |
Update | Allow full administrative modification of the account object. |
Set Tags at Object Creation | Assign tags to an account at the time it's created. |
Manage Tags | Add or remove tags on an existing account. |
Delete | Delete an account. |
Roles
Permission |
Description |
|---|---|
Read | View Roles and their permission assignments. |
Create | Create new Roles. |
Update | Modify an existing Role's permissions or Object scope. |
Manage Tags | Add or remove tags on an existing Role. |
Delete | Delete a Role. |
Password Policy
Permission |
Description |
|---|---|
Read | View the configured password policy. |
Update | Modify the password policy. |
Authentication
LDAP/AD
Permission |
Description |
|---|---|
Read | View the LDAP/AD configuration. |
Validate | Confirm connectivity to the configured LDAP server. |
Update | Modify the LDAP/AD configuration. |
SAML/SSO
Permission |
Description |
|---|---|
Read | View the SAML/SSO configuration. |
Update | Modify the SAML/SSO configuration. |
System administration
SMTP Config
Permission |
Description |
|---|---|
Read | View the SMTP configuration. |
Validate | Confirm connectivity to the configured SMTP server. |
Update | Modify the SMTP configuration. |
Proxy Configuration
Permission |
Description |
|---|---|
Read | View the proxy configuration. |
Update | Modify the proxy configuration. |
License
Permission |
Description |
|---|---|
Update | Update the DCT license. |
Product Information
Permission |
Description |
|---|---|
Read | View product version and build information. |
Product Registration
Permission |
Description |
|---|---|
Read | View product registration status. |
Create | Register the product. |
Delete | Remove product registration. |
Phone Home Bundle
Permission |
Description |
|---|---|
Read | Generate the telemetry phone-home bundle. |
System
Permission |
Description |
|---|---|
Update | Modify system-level settings. Needs engineering confirmation. |
API Classification
Permission |
Description |
|---|---|
Read | View API classification settings. |
Update | Modify API classification settings. |
Toolkit
Permission |
Description |
|---|---|
Read | View DCT Toolkit-related settings and objects. |
Manage Tags | Add or remove tags related to Toolkit objects. |
Global Properties
Permission |
Description |
|---|---|
Read | View global DCT properties. |
Update | Modify global DCT properties. |
Engines and infrastructure
Engines
Permission |
Description |
|---|---|
Read | View connected engines and their details. |
Create | Register (connect) a new engine. |
Add Engine to Hyperscale | Designate a Compliance Engine as a Hyperscale engine. |
Read Storage Capacity Data | View the engine's storage capacity data. |
Validate | Confirm connectivity to the engine. |
Replicate | Enable the engine to act as a replication source. |
Replicate to | Enable the engine to act as a replication target. |
Update | Modify engine configuration. |
Import Bookmarks | Import bookmarks associated with the engine. |
Manage Tags | Add or remove tags on an existing engine. |
Set Tags at Object Creation | Assign tags to an engine at registration. |
Configure Predefined Auto Tagging | Configure predefined auto-tagging rules on the engine. |
Configure Custom Auto Tagging | Configure custom auto-tagging rules on the engine. |
Configure Predefined Auto Tagging at Registration | Configure predefined auto-tagging at engine registration time. |
Configure Custom Auto Tagging at Registration | Configure custom auto-tagging at engine registration time. |
Delete | Remove (disconnect) an engine. |
Engine Password Vaults
Permission |
Description |
|---|---|
Read | View password vaults configured on an engine. |
Vaults
Permission |
Description |
|---|---|
Read | View vaults. |
Create | Create a new vault. |
Manage Tags | Add or remove tags on an existing vault. |
Delete | Delete a vault. |
Kerberos Configs
Permission |
Description |
|---|---|
Read | View Kerberos configuration on an engine. |
Virtualization Alerts
Permission |
Description |
|---|---|
Read | View the Alerts tab on a Continuous Data Engine. |
Virtualization Faults
Permission |
Description |
|---|---|
Read | View and manage the Faults tab on a Continuous Data Engine. |
Resolve | Mark a fault as resolved. |
Resolve or Ignore | Mark a fault as resolved or ignored. |
Resolve All | Resolve all active faults the account has permission over. |
Environments
Permission |
Description |
|---|---|
Read | View environments. |
Create | Create a new environment. |
Refresh | Refresh environment metadata. |
Enable | Enable an environment. |
Disable | Disable an environment. |
Update | Modify an environment. |
Manage Tags | Add or remove tags on an existing environment. |
Set Tags at Object Creation | Assign tags to an environment at creation. |
Delete | Delete an environment. |
Staging Source
Permission |
Description |
|---|---|
Read | View staging source configuration for an environment. |
Update | Modify staging source configuration. |
Manage Tags | Add or remove tags on a staging source. |
Sources
These represent source configs.
Permission |
Description |
|---|---|
Read | View source configs. |
Create | Create a new source config. |
Link | Link a source config to a dataset. |
Attach Source | Attach a source config. |
Validate | Confirm connectivity of the source config. |
Update | Modify a source config. |
Manage Tags | Add or remove tags on a source config. |
Delete | Delete a source config. |
Compliance Environments
Permission |
Description |
|---|---|
Read | View Compliance environments. |
Data
dSources
Permission |
Description |
|---|---|
Read | View dSources. |
Refresh | Refresh a dSource. |
Provision | Provision a new VDB from this dSource. |
Provision from Bookmark | Provision new VDBs using this dSource's bookmarks. |
Refresh from Bookmark | Refresh VDBs using this dSource's bookmarks. |
Refresh from Snapshot | Refresh VDBs using this dSource's snapshots. |
Refresh from Timestamp | Refresh VDBs using this dSource timeline's timestamps. |
Refresh from Location | Refresh VDBs using this dSource timeline's change numbers (for example, SCN). |
Repair Timeline | Repair the dSource's timeline. Needs engineering confirmation. |
Enable | Enable a dSource. |
Disable | Disable a dSource. |
Attach Source | Attach a source to the dSource. |
Detach Source | Detach a source from the dSource. |
Replicate | Replicate the dSource. |
Update | Modify a dSource. |
Take Snapshot | Reingest (resync/full backup) the dataset from the linked source, take a new snapshot, and add it to the timeline. |
Update Snapshot | Modify an existing snapshot. |
Delete Snapshot | Delete a snapshot. |
Read Bookmark | View bookmarks associated with the dSource. |
Create Bookmark | Create a bookmark from the dSource. |
Update Bookmark | Modify a bookmark associated with the dSource. |
Delete Bookmark | Delete a bookmark associated with the dSource. |
Manage Tags | Add or remove tags on an existing dSource. |
Set Tags at Object Creation | Assign tags to a dSource at creation. |
Delete | Delete a dSource. |
VDBs
Permission |
Description |
|---|---|
Read | View VDBs. |
Create | Create a new VDB. |
Refresh | Refresh this VDB using any available bookmark, snapshot, timestamp, or location. |
Provision | Provision a new VDB from this VDB. |
Provision from Bookmark | Provision new VDBs using this VDB's bookmarks. |
Refresh from Bookmark | Refresh other VDBs using this VDB's bookmarks. |
Refresh from Snapshot | Refresh other VDBs using this VDB's snapshots. |
Refresh from Timestamp | Refresh other VDBs using this VDB timeline's timestamps. |
Refresh from Location | Refresh other VDBs using this VDB timeline's change numbers (for example, SCN). |
Undo Refresh | Revert the VDB back to the previously available snapshot; creates a new timeline. |
Enable | Enable a VDB. |
Disable | Disable a VDB. |
Start | Start a VDB. |
Stop | Stop a VDB. |
Migrate | Migrate a VDB. |
Export | Export a VDB (V2P). |
Replicate | Replicate a VDB. |
Validate | Validate the VDB configuration. |
Lock | Lock a VDB. |
Lock for Other Account | Lock a VDB on behalf of another account. |
Unlock | Unlock a VDB. |
Force Unlock | Forcibly unlock a VDB regardless of lock owner. |
Switch Timeline | Make a chosen timeline the active timeline. |
Update Timeline | Rename a timeline. |
Delete Timeline | Delete a timeline. |
Take Snapshot | Create a new snapshot based on the current dataset state and add it to the timeline. |
Update Snapshot | Modify an existing snapshot. |
Delete Snapshot | Delete a snapshot. |
Read Bookmark | View bookmarks associated with the VDB. |
Create Bookmark | Create a bookmark from the VDB. |
Update Bookmark | Modify a bookmark associated with the VDB. |
Delete Bookmark | Delete a bookmark associated with the VDB. |
Create VDB Group | Create a VDB Group from this VDB. |
Update | Modify a VDB. |
Manage Tags | Add or remove tags on an existing VDB. |
Set Tags at Object Creation | Assign tags to a VDB at creation. |
Delete | Delete a VDB. |
VDB Groups
Permission |
Description |
|---|---|
Read | View VDB Groups. |
Create | Create a new VDB Group. |
Refresh | Refresh this VDB Group using any available set of snapshots, bookmarks, timestamps, or locations. |
Provision from Bookmark | Provision new VDB Groups using this VDB Group's bookmarks. |
Refresh from Bookmark | Refresh other VDB Groups using this VDB Group's bookmarks. |
Enable | Enable a VDB Group. |
Disable | Disable a VDB Group. |
Start | Start a VDB Group. |
Stop | Stop a VDB Group. |
Lock | Lock a VDB Group. |
Lock for Other Account | Lock a VDB Group on behalf of another account. |
Unlock | Unlock a VDB Group. |
Force Unlock | Forcibly unlock a VDB Group regardless of lock owner. |
Read Bookmark | View bookmarks associated with the VDB Group. |
Create Bookmark | Create a bookmark from the VDB Group. |
Update Bookmark | Modify a bookmark associated with the VDB Group. |
Delete Bookmark | Delete a bookmark associated with the VDB Group. |
Update | Modify a VDB Group. |
Manage Tags | Add or remove tags on an existing VDB Group. |
Set Tags at Object Creation | Assign tags to a VDB Group at creation. |
Delete | Delete a VDB Group. |
Bookmarks
Permission |
Description |
|---|---|
Read | View bookmarks. |
Create | Create a new bookmark. |
Provision from Bookmark | Provision a new VDB from this bookmark. Useful if the account doesn't also hold the data object's Provision from Bookmark permission. |
Refresh from Bookmark | Refresh any compatible VDB from this bookmark. Useful if the account doesn't also hold the data object's Refresh from Bookmark permission. |
Update | Modify a bookmark. Useful if the account doesn't hold another update permission, such as VDB > Update Bookmark. |
Manage Tags | Add or remove tags on an existing bookmark. |
Set Tags at Object Creation | Assign tags to a bookmark at creation. |
Delete | Delete a bookmark. |
Database Templates
Permission |
Description |
|---|---|
Read | View Database Templates. |
Create | Create a new Database Template. |
Import | Create new Database Templates from those available on the selected Continuous Data Engine. |
Undo Import | Revert an imported Database Template. |
Update | Modify a Database Template. |
Manage Tags | Add or remove tags on an existing Database Template. |
Set Tags at Object Creation | Assign tags to a Database Template at creation. |
Delete | Delete a Database Template. |
Dataset Groups
Permission |
Description |
|---|---|
Read | View Dataset Groups. |
Replicate | Replicate a Dataset Group. |
Update | Modify a Dataset Group. |
Oracle Multitenant
CDBs
Permission |
Description |
|---|---|
Read | View Container Databases. |
Attach Source | Attach a source to a CDB. |
Detach Source | Detach a source from a CDB. |
Enable | Enable a CDB. |
Disable | Disable a CDB. |
Replicate | Replicate a CDB. |
Validate | Validate the CDB configuration. |
Update | Modify a CDB. |
Manage Tags | Add or remove tags on an existing CDB. |
Delete | Delete a CDB. |
VCDBs
Permission |
Description |
|---|---|
Read | View Virtual Container Databases. |
Enable | Enable a VCDB. |
Disable | Disable a VCDB. |
Start | Start a VCDB. |
Stop | Stop a VCDB. |
Replicate | Replicate a VCDB. |
Validate | Validate the VCDB configuration. |
Update | Modify a VCDB. |
Manage Tags | Add or remove tags on an existing VCDB. |
Delete | Delete a VCDB. |
PDBs and VPDBs: Managed using the dSource and VDB permission sets, respectively.
Replication
Namespace
Permission |
Description |
|---|---|
Read | View replication namespaces. |
Failover | Fail over a replicated namespace. |
Commit Failover | Commit a previously initiated failover. |
Failback | Fail back a replicated namespace. |
Discard | Discard a replication namespace. |
Update | Modify a replication namespace. |
Delete | Delete a replication namespace. |
Replication Policy
Permission |
Description |
|---|---|
Read | View replication policies. |
Create | Create a replication policy. |
Execute | Run a replication policy. |
Enable | Enable a replication policy. |
Disable | Disable a replication policy. |
Update | Modify a replication policy. |
Manage Tags | Add or remove tags on an existing replication policy. |
Set Tags at Object Creation | Assign tags to a replication policy at creation. |
Delete | Delete a replication policy. |
Policies
Virtualization Policies
Permission |
Description |
|---|---|
Read | View virtualization policies. |
Create | Create a virtualization policy. |
Apply | Apply a policy to an object. |
Unapply | Remove a policy from an object. |
Update | Modify a virtualization policy. |
Manage Tags | Add or remove tags on an existing virtualization policy. |
Set Tags at Object Creation | Assign tags to a virtualization policy at creation. |
Delete | Delete a virtualization policy. |
Virtualization Policy Target
Permission |
Description |
|---|---|
Read | View virtualization policy targets. |
Continuous Compliance
Compliance Jobs
Permission |
Description |
|---|---|
Read | View Compliance Jobs. |
Create | Create a Compliance Job. |
Execute | Run a Compliance Job. |
Copy | Copy a Compliance Job. |
Migrate | Migrate a Compliance Job. |
Cancel | Cancel a running Compliance Job. |
Update | Modify a Compliance Job. |
Manage Tags | Add or remove tags on an existing Compliance Job. |
Set Tags at Object Creation | Assign tags to a Compliance Job at creation. |
Delete | Delete a Compliance Job. |
Compliance Job Collection
Permission |
Description |
|---|---|
Read | View Compliance Job Collections. |
Create | Create a Compliance Job Collection. |
Cancel | Cancel a running Compliance Job Collection. |
Update | Modify a Compliance Job Collection. |
Manage Tags | Add or remove tags on an existing Compliance Job Collection. |
Set Tags at Object Creation | Assign tags to a Compliance Job Collection at creation. |
Delete | Delete a Compliance Job Collection. |
Algorithms
Permission |
Description |
|---|---|
Read | View masking algorithms. |
Manage Tags | Add or remove tags on an existing algorithm. |
Data Class
Permission |
Description |
|---|---|
Read | View data classes. |
Update | Modify a data class. |
Manage Tags | Add or remove tags on an existing data class. |
Discovery Expressions
Permission |
Description |
|---|---|
Read | View discovery expressions. |
Manage Tags | Add or remove tags on an existing discovery expression. |
Discovery Policies
Permission |
Description |
|---|---|
Read | View discovery policies. |
Manage Tags | Add or remove tags on an existing discovery policy. |
Rule Sets
Permission |
Description |
|---|---|
Read | View rule sets. |
Manage Tags | Add or remove tags on an existing rule set. |
Classifiers
Permission |
Description |
|---|---|
Read | View classifiers. |
Manage Tags | Add or remove tags on an existing classifier. |
Compliance Uploads
Permission |
Description |
|---|---|
Read | View compliance uploads. |
Update | Modify a compliance upload. |
Manage Tags | Add or remove tags on an existing compliance upload. |
Connectors
Permission |
Description |
|---|---|
Read | View connectors. |
Execute | Run a connector. |
Update | Modify a connector. |
Manage Tags | Add or remove tags on an existing connector. |
Hyperscale Compliance
Hyperscale Datasets
Permission |
Description |
|---|---|
Read | View Hyperscale datasets. |
Update | Modify a Hyperscale dataset. |
Manage Tags | Add or remove tags on an existing Hyperscale dataset. |
Hyperscale Orchestrators
Permission |
Description |
|---|---|
Read | View Hyperscale Orchestrators. |
Create | Create a Hyperscale Orchestrator. |
Sync Compliance Engines | Sync the Compliance Engines associated with the Hyperscale Orchestrator. Needs engineering confirmation. |
Update | Modify a Hyperscale Orchestrator. |
Manage Tags | Add or remove tags on an existing Hyperscale Orchestrator. |
Set Tags at Object Creation | Assign tags to a Hyperscale Orchestrator at creation. |
Delete | Delete a Hyperscale Orchestrator. |
Hyperscale Connectors
Permission |
Description |
|---|---|
Read | View Hyperscale Connectors. |
Create | Create a Hyperscale Connector. |
Update | Modify a Hyperscale Connector. |
Manage Tags | Add or remove tags on an existing Hyperscale Connector. |
Set Tags at Object Creation | Assign tags to a Hyperscale Connector at creation. |
Delete | Delete a Hyperscale Connector. |
Insights and reporting
Reports
Each report permission is read-only and controls visibility of that report.
Permission |
Description |
|---|---|
Data at Risk Report | View the Data at Risk report. |
dSource Consumption Report | View the dSource consumption report. |
VDB Inventory Report | View the VDB inventory report. |
dSource Usage Report | View the dSource usage report. |
Oracle Container Database Inventory Report | View the Oracle Container Database inventory report. |
Masking Execution Metrics Report | View the masking execution metrics report. |
Engine Performance Analytic Report | View the engine performance analytic report. |
Engine Global Object State Report | View the engine global object state report. |
Storage Summary Report | View the storage summary report. |
Storage Savings Summary Report | View the storage savings summary report. |
Audit Logs Summary Report | View the audit logs summary report. |
API Usage Report | View the API usage report. This report is available through the API only. |
Scheduling
Permission |
Description |
|---|---|
Read | View report schedules. |
Create | Create a report schedule. |
Update | Modify a report schedule. |
Manage Tags | Add or remove tags on an existing report schedule. |
Delete | Delete a report schedule. |