schema

OCI Schema

graph LR
    OCICompartment -- OCI_COMPARTMENT --> OCICompartment
    OCICompartment -- OCI_POLICY --> OCIPolicy
    OCICompartment -- PARENT --> OCICompartment
    OCIPolicy -- OCI_POLICY_REFERENCE --> OCICompartment
    OCIPolicy -- OCI_POLICY_REFERENCE --> OCIGroup
    OCITenancy -- OCI_COMPARTMENT --> OCICompartment
    OCITenancy -- OCI_POLICY --> OCIPolicy
    OCITenancy -- OCI_REGION_SUBSCRIPTION --> OCIRegion
    OCITenancy -- RESOURCE --> OCICompartment
    OCITenancy -- RESOURCE --> OCIGroup
    OCITenancy -- RESOURCE --> OCIPolicy
    OCITenancy -- RESOURCE --> OCIRegion
    OCITenancy -- RESOURCE --> OCIUser
    OCIUser -- MEMBER_OCID_GROUP --> OCIGroup
    OCIUser -- MEMBER_OF --> OCIGroup

OCICompartment

An OCI compartment linked to its tenancy and parent hierarchy.

Properties

Field Index Description
id Yes OCI compartment OCID.
firstseen Timestamp when a sync job first created this node.
lastupdated Yes Timestamp of the last sync that observed this node.
compartmentid OCID of the parent compartment or tenancy.
createdate Date and time when the compartment was created.
description Compartment description.
name Yes Compartment name.
ocid Yes OCI compartment OCID.

Relationships

  • (:OCICompartment)-[:OCI_COMPARTMENT]->(:OCICompartment): Compatibility edge from a parent OCI compartment to a nested compartment.

  • (:OCICompartment)-[:OCI_POLICY]->(:OCIPolicy): Compatibility edge from an OCI compartment to a compartment-level policy.

  • (:OCICompartment)-[:PARENT]->(:OCICompartment): An OCI compartment points to its parent compartment.

  • (:OCIPolicy)-[:OCI_POLICY_REFERENCE]->(:OCICompartment): An OCI policy references a compartment identified in its statements.

  • (:OCITenancy)-[:OCI_COMPARTMENT]->(:OCICompartment): Deprecated compatibility edge from an OCI tenancy to a root compartment.

  • (:OCITenancy)-[:RESOURCE]->(:OCICompartment): An OCI tenancy contains a compartment as a managed resource.

OCIGroup

This node label is loaded by more than one sync path:

  • An OCI user group.
  • The same group, resolved to the users that belong to it.

Ontology Mapping: This node uses the ontology label UserGroup.

Properties

Ontology-generated fields are shown in italics.

Field Index Description
id Yes OCI group OCID.
firstseen Timestamp when a sync job first created this node.
lastupdated Yes Timestamp of the last sync that observed this node.
compartmentid OCID of the tenancy containing the group.
createdate Date and time when the group was created.
description Group description.
name Group name.
ocid Yes OCI group OCID.
_ont_description Normalized field sourced from description.
_ont_name Yes Normalized field sourced from name.
_ont_source Module that populated this node's ontology fields.

Relationships

  • (:OCIPolicy)-[:OCI_POLICY_REFERENCE]->(:OCIGroup): An OCI policy references a group identified in its policy statements.

  • (:OCITenancy)-[:RESOURCE]->(:OCIGroup): An OCI tenancy contains a group as a managed resource.

  • (:OCIUser)-[:MEMBER_OCID_GROUP]->(:OCIGroup): Deprecated compatibility edge from an OCI user to an OCI group.

  • (:OCIUser)-[:MEMBER_OF]->(:OCIGroup): Canonical edge from an OCI user account to an OCI user group.

OCIPolicy

This node label is loaded by more than one sync path:

  • An OCI policy, with the deprecated OCI_POLICY edges to its parents.
  • The same policy, resolved to the groups and compartments its statements name.

Ontology Mapping: This node uses the ontology label PermissionRole.

Properties

Ontology-generated fields are shown in italics.

Field Index Description
id Yes OCI policy OCID.
firstseen Timestamp when a sync job first created this node.
lastupdated Yes Timestamp of the last sync that observed this node.
compartmentid OCID of the compartment containing the policy.
createdate Date and time when the policy was created.
description Policy description.
name Policy name.
ocid Yes OCI policy OCID.
statements Statements written in the OCI policy language.
updatedate Date and time when the policy was last updated.
_ont_name Yes Normalized field sourced from name.
_ont_source Module that populated this node's ontology fields.
_ont_type Yes Property generated by the ontology mapping.

Relationships

  • (:OCICompartment)-[:OCI_POLICY]->(:OCIPolicy): Compatibility edge from an OCI compartment to a compartment-level policy.

  • (:OCIPolicy)-[:OCI_POLICY_REFERENCE]->(:OCICompartment): An OCI policy references a compartment identified in its statements.

  • (:OCIPolicy)-[:OCI_POLICY_REFERENCE]->(:OCIGroup): An OCI policy references a group identified in its policy statements.

  • (:OCITenancy)-[:OCI_POLICY]->(:OCIPolicy): Deprecated compatibility edge from an OCI tenancy to a tenancy-level policy.

  • (:OCITenancy)-[:RESOURCE]->(:OCIPolicy): An OCI tenancy contains a policy as a managed resource.

OCIRegion

An OCI region subscribed by a tenancy.

Properties

Field Index Description
id Yes OCI region key.
firstseen Timestamp when a sync job first created this node.
lastupdated Yes Timestamp of the last sync that observed this node.
key Yes OCI region key.
name Yes OCI region name.

Relationships

  • (:OCITenancy)-[:OCI_REGION_SUBSCRIPTION]->(:OCIRegion): Deprecated compatibility edge from an OCI tenancy to a subscribed region.

  • (:OCITenancy)-[:RESOURCE]->(:OCIRegion): An OCI tenancy contains a subscribed region as a managed resource.

OCITenancy

An OCI tenancy that serves as the root OCI resource.

Properties

Field Index Description
id Yes OCI tenancy OCID.
firstseen Timestamp when a sync job first created this node.
lastupdated Yes Timestamp of the last sync that observed this node.
name Tenancy profile name.
ocid Yes OCI tenancy OCID.

Relationships

  • (:OCITenancy)-[:OCI_COMPARTMENT]->(:OCICompartment): Deprecated compatibility edge from an OCI tenancy to a root compartment.

  • (:OCITenancy)-[:OCI_POLICY]->(:OCIPolicy): Deprecated compatibility edge from an OCI tenancy to a tenancy-level policy.

  • (:OCITenancy)-[:OCI_REGION_SUBSCRIPTION]->(:OCIRegion): Deprecated compatibility edge from an OCI tenancy to a subscribed region.

  • (:OCITenancy)-[:RESOURCE]->(:OCICompartment): An OCI tenancy contains a compartment as a managed resource.

  • (:OCITenancy)-[:RESOURCE]->(:OCIGroup): An OCI tenancy contains a group as a managed resource.

  • (:OCITenancy)-[:RESOURCE]->(:OCIPolicy): An OCI tenancy contains a policy as a managed resource.

  • (:OCITenancy)-[:RESOURCE]->(:OCIRegion): An OCI tenancy contains a subscribed region as a managed resource.

  • (:OCITenancy)-[:RESOURCE]->(:OCIUser): An OCI tenancy contains a user as a managed resource.

OCIUser

An OCI user account with the UserAccount label.

Ontology Mapping: This node uses the ontology label UserAccount.

Properties

Ontology-generated fields are shown in italics.

Field Index Description
id Yes OCI user OCID.
firstseen Timestamp when a sync job first created this node.
lastupdated Yes Timestamp of the last sync that observed this node.
can_use_api_keys Whether the user can use API keys.
can_use_auth_tokens Whether the user can use auth tokens.
can_use_console_password Whether the user can sign in with a console password.
can_use_customer_secret_keys Whether the user can use customer secret keys.
can_use_smtp_credentials Whether the user can use SMTP credentials.
compartmentid OCID of the user's compartment.
createdate Date and time when the user was created.
description User description.
email Yes User email address.
is_mfa_activated Whether MFA is activated for the user.
lifecycle_state Current lifecycle state of the user.
name User name.
ocid Yes OCI user OCID.
_ont_active Yes Normalized field sourced from lifecycle_state.
_ont_email Yes Normalized field sourced from email.
_ont_fullname Yes Normalized field sourced from name.
_ont_has_mfa Yes Normalized field sourced from is_mfa_activated.
_ont_source Module that populated this node's ontology fields.

Relationships

  • (:OCITenancy)-[:RESOURCE]->(:OCIUser): An OCI tenancy contains a user as a managed resource.

  • (:OCIUser)-[:MEMBER_OCID_GROUP]->(:OCIGroup): Deprecated compatibility edge from an OCI user to an OCI group.

  • (:OCIUser)-[:MEMBER_OF]->(:OCIGroup): Canonical edge from an OCI user account to an OCI user group.

  • (:User)-[:HAS_ACCOUNT]->(:UserAccount)

On this page
OCI SchemaOCICompartmentOCIGroupOCIPolicyOCIRegionOCITenancyOCIUser