My Oracle Support Banner

STREAMING policies - Stream level access via streampool (Doc ID 2775792.1)

Last updated on JULY 22, 2021

Applies to:

Oracle Cloud Infrastructure Streaming - Version N/A and later
Information in this document applies to any platform.

Goal

I have created user with access to a specific stream. However, the user can't create a consumer group, even it should be allowed based on the policy.

This is a Kafka group and not IAM group.

A consumer application uses this user to consume messages from the Kafka topic (stream). It can consume messages from a single topic partition but not from all partitions.

Original policies that were showing errors:
Policy:
Allow group streamden-group to use stream-push in compartment id ocid1.compartment.oc1..zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz where target.stream.id = 'ocid1.stream.oc1.uk-london-1.zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz'
Allow group streamden-group to use stream-pull in compartment id ocid1.compartment.oc1..xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx where target.stream.id = 'ocid1.stream.oc1.uk-london-1.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.