Supported Features

The Oracle Database connector supports the following features:

Note
Before you can use any feature marked with an asterisk (*), SailPoint must activate the feature for your site.

  • Authentication

  • Accounts

  • *Password Management

  • *Provisioning

  • *Access Certifications (certification of entitlements connected to accounts)

For more information on features, refer to Identity Security Cloud Source Features.

In account - entitlement management, the Oracle Database connector supports the management of Oracle entitlements as system privileges.

  • Management of Oracle groups as ROLE

  • Aggregation and Refresh entitlement

  • Create and Update

The Oracle Database source supports:

  • Permissions directly assigned to accounts and groups as direct permissions during account and entitlement aggregation.

  • Revocation of the aggregated permissions for an account through certification.

The details of the features are:

Accounts

Features Users

Create

✔

Aggregate

✔

Enable/ Disable

✔

Password Management

✔

Group Entitlements (Read, Request, and Revoke)

✔ Roles

Additional Entitlements

SYSTEM_PRIVILEGES

Enable Direct Permissions

✔

Group Entitlements

Group Entitlements are the entitlement types for which Identity Security Cloud provides the ability to aggregate additional details of these entitlement types from the managed system. These objects have separate schema defining the list of attributes that the aggregation task fetches as additional details when aggregation is run for that Group Entitlement type.

The group hierarchy for the Roles attribute is supported.

Features Users

Aggregation

✔

Direct Permissions

✔

Read Group Hierarchy

✔

To enable direct permissions and their aggregation for the account or the group schema of your Oracle Database source, perform the following steps.

  1. Use listSources API to get the source ID for your source.

  2. Use listSchemas API to get the schema ID for the account or group schema for which you want to enable direct permissions.

  3. Use updateSchema API and enter the following content in the body.

    Copy 
    {
        "op": "replace",
        "path": "/includePermissions",
        "value": true
    }