Restrict Access to Repository Objects

Prerequisites:

SSO and SCIM have been configured
Repository and repository users have been created and registered to ALTR
Sidecar has been installed and registered to ALTR. Contact ALTR Support to get started.
The sidecar has been bound to the relevant repositories

Create Access Management Policy

To create an access management policy:

Log into ALTR via Okta.
Click Policy in the Navigation menu.
Click Create Policy.
Locate the Access Management Policy card.
Click Create Policy.
Locate the Oracle card.
Click Create Policy.
Enter a Policy Name. This is a user-friendly name to identify the policy.
Enter a Data Source. This is the repository name exactly as it appears in Oracle.
Click Next.
Create the policy rule statement by selecting the following options:
1. user/group name that the policy affects, which is the individual user or group of users in Okta.
2. create, read, update or delete to determine the level of access of the schema object that the users with the selected role can access.
3. object type: database, schema, table/view or column to determine what kind of object the roles have access to. These fields are case sensitive; ensure they exactly match the names of the corresponding repository objects.
4. Define Object, which is the specific database, schema, table/view or column.
  Note
  When defining objects, either select specific object names or grant access to any object.
Click Save.

In this section: