A resource group is a logical container object in Oracle Data Safe that you can create to organize and control access to one or more Oracle Data Safe resources. For example, you can add multiple target databases to a resource group and then grant a user group access to the resource group, rather than to each target database.
A resource group can contain the following resources:
- Target databases
- Sensitive data models (SDMs)
- User-defined sensitive types
- User-defined masking formats
- Masking policies
- Audit policies
- Audit trails
- Custom reports
Oracle Data Safe resources are specific to a region in your tenancy. A database does not need to be located in the same region where Oracle Data Safe is enabled. You can register a target database in Oracle Data Safe to only one resource group per region.
The diagram at the top of the page illustrates the concept of resource groups. The Sales target database is assigned to the Sales resource group in Oracle Data Safe in the Mumbai region. Only groups that are granted access to the Sales resource group in Mumbai's Oracle Data Safe can access the Sales target database. The Finance target database is registered to the Finance resource group in Oracle Data Safe in the Frankfurt region. Only groups that are granted access to the Finance resource group in Frankfurt's Oracle Data Safe can access the Finance target database. The Test target database is assigned to the Default Resource Group in Oracle Data Safe in both regions. The Default Resource Group is available to all groups in Oracle Data Safe for convenience.
You do not use the Oracle Built-in and Oracle Privileged resource groups. You cannot delete a resource group, nor can you reassign an item to a different resource group.