Oracle Cloud Infrastructure Documentation

Resource Types and Permissions

Learn about Batch resource types and permissions.

You must create policies to control users or user groups accessing specific resources with specific actions. The following table provides a detailed map of resources and the user permissions to create fine-grain access.

Resource Type Permissions Action Assigned
batch-computing-context/batch-computing-contexts
  • BATCH_COMPUTING_CONTEXT_CREATE
  • BATCH_COMPUTING_CONTEXT_READ
  • BATCH_COMPUTING_CONTEXT_UTILIZE
  • BATCH_COMPUTING_CONTEXT_UPDATE
  • BATCH_COMPUTING_CONTEXT_DELETE
  • BATCH_COMPUTING_CONTEXT_INSPECT
  • BATCH_COMPUTING_CONTEXT_MOVE
 Create, read, update, utilize, delete, inspect, and move a batch context.
batch-computing-job-pool/batch-computing-job-pools
  • BATCH_COMPUTING_JOB_POOL_CREATE
  • BATCH_COMPUTING_JOB_POOL_READ
  • BATCH_COMPUTING_JOB_POOL_UTILIZE
  • BATCH_COMPUTING_JOB_POOL_UPDATE
  • BATCH_COMPUTING_JOB_POOL_DELETE
  • BATCH_COMPUTING_JOB_POOL_INSPECT
  • BATCH_COMPUTING_JOB_POOL_MOVE
 Create, read, update, utilize, delete, and move a batch computing job pool.
batch-computing-job/batch-computing-jobs
  • BATCH_COMPUTING_JOB_CREATE
  • BATCH_COMPUTING_JOB_READ
  • BATCH_COMPUTING_JOB_UPDATE
  • BATCH_COMPUTING_JOB_DELETE
  • BATCH_COMPUTING_JOB_INSPECT
  • BATCH_COMPUTING_JOB_MOVE
 Create, read, update, delete, and move a batch job.
batch-task-profile/batch-task-profiles
  • BATCH_COMPUTING_TASK_PROFILE_CREATE
  • BATCH_COMPUTING_TASK_PROFILE_READ
  • BATCH_COMPUTING_TASK_PROFILE_UTILIZE
  • BATCH_COMPUTING_TASK_PROFILE_UPDATE
  • BATCH_COMPUTING_TASK_PROFILE_DELETE
  • BATCH_COMPUTING_TASK_PROFILE_INSPECT
  • BATCH_COMPUTING_TASK_PROFILE_MOVE
 Create, read, update, delete, inspect, and move a batch task profile.
batch-task-environment/batch-task-environments
  • BATCH_COMPUTING_TASK_ENVIRONMENT_CREATE
  • BATCH_COMPUTING_TASK_ENVIRONMENT_READ
  • BATCH_COMPUTING_TASK_ENVIRONMENT_UTILIZE
  • BATCH_COMPUTING_TASK_ENVIRONMENT_UPDATE
  • BATCH_COMPUTING_TASK_ENVIRONMENT_DELETE
  • BATCH_COMPUTING_TASK_ENVIRONMENT_INSPECT
  • BATCH_COMPUTING_TASK_ENVIRONMENT_MOVE
 Create, read, update, delete, inspect, and move a batch task environment.
batch-computing-work-request/batch-computing-work-requests
  • BATCH_COMPUTING_WORK_REQUEST_READ
  • BATCH_COMPUTING_WORK_REQUEST_INSPECT
 Read and inspect.
The following table describes Batch families that act as permission wrappers. A family resource is a grouping of related resources. For example, Batch computing includes job pool, jobs, and tasks. Permission to a family resource enables you to write a policy statement more easily and gives you the same level of access to related resources. For more information, see Policy Syntax.
Family Name Member Resources
batch-computing-family
  • batch-computing-context
  • batch-computing-job
  • batch-computing-job-pool
  • batch-computing-task-profile
  • batch-computing-task-environment
  • batch-computing-work-request
batch-computing-operations-family
  • batch-computing-job
  • batch-computing-job-pool
  • batch-computing-work-request

The following table list the different operations and their corresponding permissions for a batch context.

Operation ID Permissions Description
CreateBatchContext

BATCH_COMPUTING_CONTEXT_CREATE

 Create a new batch context.
GetBatchContext BATCH_COMPUTING_CONTEXT_READ Get information about a batch context.
UpdateBatchContext BATCH_COMPUTING_CONTEXT_UPDATE Modify a batch context name.
DeleteBatchContext BATCH_COMPUTING_CONTEXT_DELETE Delete a batch context.
ListBatchContexts BATCH_COMPUTING_CONTEXT_INSPECT List batch contexts.
ChangeBatchContextCompartment BATCH_COMPUTING_CONTEXT_MOVE Change the compartment of a batch context.
StopBatchContext BATCH_COMPUTING_CONTEXT_UPDATE Set the lifecycle State of a batch context to Inactive.
StartBatchContext BATCH_COMPUTING_CONTEXT_UPDATE Set the lifecycle State of a batch context to Active.
ListBatchContextShapes BATCH_COMPUTING_CONTEXT_INSPECT List compute shapes available to batch context.

The following table list the different operations and their corresponding permissions for a batch job pool.

Operation ID Permissions Description
CreateBatchJobPool

BATCH_COMPUTING_JOB_POOL_CREATE and BATCH_COMPUTING_JOB_POOL_UTILIZE

Create a new batch job pool.

All involved resources must be in the same tenancy where batch job pool is created.
GetBatchJobPool BATCH_COMPUTING_JOB_POOL_READ Get information about a batch job pool.
UpdateBatchJobPool BATCH_COMPUTING_JOB_POOL_UPDATE Modify information about batch job pool.
DeleteBatchJobPool BATCH_COMPUTING_JOB_POOL_DELETE Delete a batch job pool.
ListBatchJobPool BATCH_COMPUTING_JOB_POOL_INSPECT List batch job pool.
ChangeBatchJobPoolCompartment BATCH_COMPUTING_JOB_POOL_MOVE Change the compartment of a batch job pool.
StopBatchJobPool BATCH_COMPUTING_JOB_POOL_UPDATE Stop a batch context from accepting new jobs. Set the lifecycleState of a batch context as Inactive.
StartBatchJobPool BATCH_COMPUTING_JOB_POOL_UPDATE Start a batch context to accept new jobs. Set the lifecycleState of a batch context as Active.

The following table list the different operations and their corresponding permissions for a batch job.

Operation ID Permissions Description
CreateBatchJob

BATCH_COMPUTING_JOB_CREATE and BATCH_COMPUTING_JOB_POOL_UTILIZE and BATCH_COMPUTING_TASK_PROFILE_UTILIZEand BATCH_COMPUTING_TASK_ENVIRONMENT_UTILIZE

Create a new batch job.

All involved resources must be in the same tenancy where batch job is created.
GetBatchJob BATCH_COMPUTING_JOB_READ Get information about a batch job.
UpdateBatchJobPool BATCH_COMPUTING_JOB_UPDATE Modify information about batch job.
DeleteBatchJobPool BATCH_COMPUTING_JOB_DELETE Delete a batch job.
ListBatchJobPool BATCH_COMPUTING_JOB_INSPECT List batch job.
ChangeBatchJobCompartment BATCH_COMPUTING_JOB_MOVE Change the compartment of a batch job.
PauseBatchJob BATCH_COMPUTING_JOB_UPDATE Pause batch job execution.
UnpauseBatchJob BATCH_COMPUTING_JOB_UPDATE Unpause batch job execution.
ListBatchTasks BATCH_COMPUTING_JOB_INSPECT List batch tasks.
ListBatchJobTasks BATCH_COMPUTING_JOB_INSPECT List batch tasks belonging to specific batch job.
GetBatchTask BATCH_COMPUTING_JOB_READ Get information about a batch task.

The following table list the different operations and their corresponding permissions for a batch task profile.

Operation ID Permissions Description
CreateBatchTaskProfile

BATCH_COMPUTING_TASK_PROFILE_CREATE

Create a new batch task profile.
GetBatchTaskProfile BATCH_COMPUTING_TASK_PROFILE_READ Get information about a batch task profile.
UpdateBatchTaskProfile BATCH_COMPUTING_TASK_PROFILE_UPDATE Modify information about batch task profile.
DeleteBatchTaskProfile BATCH_COMPUTING_TASK_PROFILE_DELETE Delete a batch task profile.
ListBatchTaskProfile BATCH_COMPUTING_TASK_PROFILE_INSPECT List batch task profiles.
ChangeBatchTaskProfileCompartment BATCH_COMPUTING_TASK_PROFILE_MOVE Change the compartment of a batch task profile.

The following table list the different operations and their corresponding permissions for a batch task environment.

Operation ID Permissions Description
CreateBatchTaskEnvironment

BATCH_COMPUTING_TASK_ENVIRONMENT_CREATE

Create a new batch task profile.
GetBatchTaskEnvironment BATCH_COMPUTING_TASK_ENVIRONMENT_READ Get information about a batch task profile.
UpdateBatchTaskEnvironment BATCH_COMPUTING_TASK_ENVIRONMENT_UPDATE Modify information about batch task environment.
DeleteBatchTaskEnvironment BATCH_COMPUTING_TASK_ENVIRONMENT_DELETE Delete a batch task environment.
ListBatchTaskEnvironment BATCH_COMPUTING_TASK_ENVIRONMENT_INSPECT List batch task environments.
ChangeBatchTaskEnvironmentCompartment BATCH_COMPUTING_TASK_ENVIRONMENT_MOVE Change the compartment of a batch task environments.

The following table list the different operations and their corresponding permissions for Work Requests.

Operation ID Permissions Description
ListWorkRequests

BATCH_COMPUTING_WORK_REQUEST_INSPECT

Create a new batch task profile.
GetWorkRequest BATCH_COMPUTING_WORK_REQUEST_READ Get information about a batch task profile.
ListWorkRequestErrors BATCH_COMPUTING_WORK_REQUEST_READ List WorkRequest errors.
ListWorkRequestLogs BATCH_COMPUTING_WORK_REQUEST_READ List WorkRequests logs.