openapi: 3.2.0 info: description: 'Use the Managed Access API to approve access requests, create and manage templates, and manage resource approval settings. For more information, see [Managed Access Overview](https://docs.oracle.com/iaas/Content/managed-access/home.htm). Use the table of contents and search tool to explore the Managed Access API. ' title: Managed Access Access Request API version: '20220126' x-provenance: method: harvested first_party: true publisher: Oracle source: https://docs.oracle.com/en-us/iaas/api/specs/f397c9292e6f977d1885091f8a6e9a9c3cdcb882c49d89bc55720e8eec0c02d1.yaml harvested: '2026-08-04' note: Published by Oracle as the contract for the Managed Access API OCI service and stored verbatim; API Evangelist added only this provenance block. x-evidence: - url: https://docs.oracle.com/en-us/iaas/api/specs/index.json what: Oracle's own index of every OCI service specification - url: https://docs.oracle.com/en-us/iaas/api/specs/f397c9292e6f977d1885091f8a6e9a9c3cdcb882c49d89bc55720e8eec0c02d1.yaml what: the harvested document for Managed Access API servers: - url: http://127.0.0.1/20220126 - url: https://127.0.0.1/20220126 tags: - name: accessRequest paths: /accessRequests: get: description: 'Retrieves a list of AccessRequestSummary objects in a compartment. ' operationId: ListAccessRequests parameters: - $ref: '#/components/parameters/RequestIdHeader' - $ref: '#/components/parameters/LockboxIdOptionalQueryParam' - $ref: '#/components/parameters/IdentifierQueryParam' - $ref: '#/components/parameters/DisplayNameQueryParam' - $ref: '#/components/parameters/AccessRequestLifecycleStateQueryParam' - $ref: '#/components/parameters/LockboxPartnerOptionalQueryParam' - $ref: '#/components/parameters/LockboxPartnerIdOptionalQueryParam' - $ref: '#/components/parameters/RequestorIdentifierOptionalQueryParam' - $ref: '#/components/parameters/PaginationLimitQueryParam' - $ref: '#/components/parameters/PaginationTokenQueryParam' - $ref: '#/components/parameters/SortOrderQueryParam' - $ref: '#/components/parameters/SortByQueryParam' - $ref: '#/components/parameters/TimeCreatedAfterQueryParam' - $ref: '#/components/parameters/TimeCreatedBeforeQueryParam' responses: 200: description: A page of AccessRequestSummary objects. headers: opc-next-page: description: 'For pagination of a list of items. When paging through a list, if this header appears in the response, then a partial list might have been returned. Include this value as the `page` parameter for the subsequent GET request to get the next batch of items. ' schema: type: string opc-request-id: description: 'Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. ' schema: type: string content: application/json: schema: $ref: '#/components/schemas/AccessRequestCollection' 400: $ref: '#/components/responses/400' 401: $ref: '#/components/responses/401' 404: $ref: '#/components/responses/404' 429: $ref: '#/components/responses/429' 500: $ref: '#/components/responses/500' default: $ref: '#/components/responses/default' summary: Retrieves a list of all access requests in a compartment. tags: - accessRequest x-related-resource: '#/definitions/AccessRequestCollection' post: description: 'Creates a new access request. ' operationId: CreateAccessRequest parameters: - $ref: '#/components/parameters/RetryTokenHeader' - $ref: '#/components/parameters/RequestIdHeader' responses: 201: description: Successfully accepted the request. The access request will be created. headers: etag: description: 'For optimistic concurrency control. See `if-match`. ' schema: type: string location: description: 'this contains the full URI for the get request, e.g. "https://iaas.us-phoenix-1.oraclecloud.com/20210331/lockbox/" ' schema: type: string opc-request-id: description: 'Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. ' schema: type: string opc-work-request-id: description: 'Unique Oracle-assigned identifier for the asynchronous work. You can use this to query its status. ' schema: type: string content: application/json: schema: $ref: '#/components/schemas/AccessRequest' 400: $ref: '#/components/responses/400' 401: $ref: '#/components/responses/401' 404: $ref: '#/components/responses/404' 409: $ref: '#/components/responses/409' 429: $ref: '#/components/responses/429' 500: $ref: '#/components/responses/500' default: $ref: '#/components/responses/default' summary: Creates a new access request. tags: - accessRequest x-related-resource: '#/definitions/AccessRequest' requestBody: content: application/json: schema: $ref: '#/components/schemas/CreateAccessRequestDetails' description: Details for the new access request. required: true /accessRequests/actions/export: post: description: 'Exports a list of AccessRequestSummary objects within a compartment and during a specified time range in text format. You can filter the results by problem severity. ' operationId: ExportAccessRequests parameters: - $ref: '#/components/parameters/RequestIdHeader' - $ref: '#/components/parameters/IdentifierQueryParam' - $ref: '#/components/parameters/DisplayNameQueryParam' - $ref: '#/components/parameters/AccessRequestLifecycleStateQueryParam' - $ref: '#/components/parameters/LockboxPartnerOptionalQueryParam' - $ref: '#/components/parameters/LockboxPartnerIdOptionalQueryParam' - $ref: '#/components/parameters/RequestorIdentifierOptionalQueryParam' - $ref: '#/components/parameters/PaginationLimitQueryParam' - $ref: '#/components/parameters/PaginationTokenQueryParam' - $ref: '#/components/parameters/SortOrderQueryParam' - $ref: '#/components/parameters/SortByQueryParam' responses: 200: description: Successfully returned a string in binary format of all Access Requests for the lockbox in the compartment and in the time range filter. headers: etag: description: 'For optimistic concurrency control. See `if-match`. ' schema: type: string opc-request-id: description: 'Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. ' schema: type: string content: text/csv: schema: format: binary type: string 400: $ref: '#/components/responses/400' 401: $ref: '#/components/responses/401' 404: $ref: '#/components/responses/404' 429: $ref: '#/components/responses/429' 500: $ref: '#/components/responses/500' default: $ref: '#/components/responses/default' summary: Get the full list of AccessRequests in a compartment in binary format tags: - accessRequest x-related-resource: '#/definitions/AccessRequestCollection' requestBody: content: application/json: schema: $ref: '#/components/schemas/ExportAccessRequestsDetails' description: Information on which scan results to export as binary file description: Exports the list of access requests for given date range in text format required: true /accessRequests/{accessRequestId}: get: description: Retrieves an access request identified by the access request ID. operationId: GetAccessRequest parameters: - $ref: '#/components/parameters/AccessRequestIdentifierPathParam' - $ref: '#/components/parameters/RequestIdHeader' responses: 200: description: Successfully retrieved the access request. headers: etag: description: 'For optimistic concurrency control. See `if-match`. ' schema: type: string opc-request-id: description: 'Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. ' schema: type: string content: application/json: schema: $ref: '#/components/schemas/AccessRequest' 400: $ref: '#/components/responses/400' 401: $ref: '#/components/responses/401' 404: $ref: '#/components/responses/404' 429: $ref: '#/components/responses/429' 500: $ref: '#/components/responses/500' default: $ref: '#/components/responses/default' summary: Retrieves an access request. tags: - accessRequest /accessRequests/{accessRequestId}/accessMaterials: get: description: 'Retrieves the access credential/material associated with the access request. ' operationId: GetAccessMaterials parameters: - $ref: '#/components/parameters/AccessRequestIdentifierPathParam' - $ref: '#/components/parameters/RequestIdHeader' responses: 200: description: Successfully accepted the request. The credential will be returned. headers: opc-request-id: description: 'Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. ' schema: type: string content: application/json: schema: $ref: '#/components/schemas/AccessMaterials' 400: $ref: '#/components/responses/400' 401: $ref: '#/components/responses/401' 404: $ref: '#/components/responses/404' 409: $ref: '#/components/responses/409' 429: $ref: '#/components/responses/429' 500: $ref: '#/components/responses/500' default: $ref: '#/components/responses/default' summary: Retrieves the associated access details. tags: - accessRequest x-related-resource: '#/definitions/AccessMaterials' /accessRequests/{accessRequestId}/actions/handle: post: description: Handle the AccessRequest operationId: HandleAccessRequest parameters: - $ref: '#/components/parameters/AccessRequestIdentifierPathParam' - $ref: '#/components/parameters/IfMatchHeader' - $ref: '#/components/parameters/RetryTokenHeader' - $ref: '#/components/parameters/RequestIdHeader' responses: 202: description: Accepted the request. The AccessRequest will be handled. headers: opc-request-id: description: 'Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. ' schema: type: string opc-work-request-id: description: 'Unique Oracle-assigned identifier for the asynchronous work. You can use this to query its status. ' schema: type: string 400: $ref: '#/components/responses/400' 401: $ref: '#/components/responses/401' 404: $ref: '#/components/responses/404' 405: $ref: '#/components/responses/405' 409: $ref: '#/components/responses/409' 412: $ref: '#/components/responses/412' 429: $ref: '#/components/responses/429' 500: $ref: '#/components/responses/500' default: $ref: '#/components/responses/default' summary: Handle the AccessRequest identified by the id tags: - accessRequest x-related-resource: '#/definitions/AccessRequest' requestBody: content: application/json: schema: $ref: '#/components/schemas/HandleAccessRequestDetails' description: The details of handling access request required: true /accessRequests/{accessRequestId}/actions/remind: post: description: Remind the AccessRequest operationId: RemindAccessRequest parameters: - $ref: '#/components/parameters/AccessRequestIdentifierPathParam' - $ref: '#/components/parameters/IfMatchHeader' - $ref: '#/components/parameters/RetryTokenHeader' - $ref: '#/components/parameters/RequestIdHeader' responses: 202: description: Accepted the request. The AccessRequest will be reminded. headers: opc-request-id: description: 'Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. ' schema: type: string opc-work-request-id: description: 'Unique Oracle-assigned identifier for the asynchronous work. You can use this to query its status. ' schema: type: string 400: $ref: '#/components/responses/400' 401: $ref: '#/components/responses/401' 404: $ref: '#/components/responses/404' 405: $ref: '#/components/responses/405' 409: $ref: '#/components/responses/409' 412: $ref: '#/components/responses/412' 429: $ref: '#/components/responses/429' 500: $ref: '#/components/responses/500' default: $ref: '#/components/responses/default' summary: Remind the AccessRequest and resend notifications to pending approvers tags: - accessRequest x-related-resource: '#/definitions/AccessRequest' /accessRequests/{accessRequestId}/internal: get: description: Retrieves an access request identified by the access request ID for internal use. operationId: GetAccessRequestInternal parameters: - $ref: '#/components/parameters/AccessRequestIdentifierPathParam' - $ref: '#/components/parameters/RequestIdHeader' responses: 200: description: Successfully retrieved the access request. headers: etag: description: 'For optimistic concurrency control. See `if-match`. ' schema: type: string opc-request-id: description: 'Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. ' schema: type: string content: application/json: schema: $ref: '#/components/schemas/AccessRequestExt' 400: $ref: '#/components/responses/400' 401: $ref: '#/components/responses/401' 404: $ref: '#/components/responses/404' 429: $ref: '#/components/responses/429' 500: $ref: '#/components/responses/500' default: $ref: '#/components/responses/default' summary: Retrieves an access request for internal use. tags: - accessRequest components: parameters: LockboxPartnerOptionalQueryParam: description: The name of the lockbox partner. in: query name: lockboxPartner x-default-description: 'null' x-obmcs-top-level-enum: '#/definitions/LockboxPartner' schema: type: string enum: - FAAAS - CANARY PaginationTokenQueryParam: description: A token representing the position at which to start retrieving results. This must come from the `opc-next-page` header field of a previous response. in: query name: page x-default-description: 'null' schema: type: string minLength: 1 SortByQueryParam: description: 'The field to sort by. Only one sort order may be provided. Default order for timeCreated is descending. Default order for displayName is ascending. ' in: query name: sortBy schema: type: string enum: - timeCreated - displayName - id default: timeCreated IdentifierQueryParam: description: A generic Id query param used to filter lockbox, access request and approval template by Id. in: query name: id x-default-description: 'null' schema: type: string maxLength: 255 minLength: 1 AccessRequestIdentifierPathParam: description: The unique identifier (OCID) of the access request. in: path name: accessRequestId required: true schema: type: string TimeCreatedAfterQueryParam: description: Date and time on or after which Access Requests were created, as described in [RFC 3339](https://tools.ietf.org/rfc/rfc3339) in: query name: timeCreatedAfter x-default-description: 'null' schema: type: string format: date-time TimeCreatedBeforeQueryParam: description: Date and time on or before which Access requests were created, as described in [RFC 3339](https://tools.ietf.org/rfc/rfc3339) in: query name: timeCreatedBefore x-default-description: 'null' schema: type: string format: date-time LockboxIdOptionalQueryParam: description: The unique identifier (OCID) of the associated lockbox. in: query name: lockboxId x-default-description: 'null' schema: type: string maxLength: 255 minLength: 1 IfMatchHeader: description: 'For optimistic concurrency control. In the PUT or DELETE call for a resource, set the `if-match` parameter to the value of the etag from a previous GET or POST response for that resource. The resource will be updated or deleted only if the etag you provide matches the resource''s current etag value. ' in: header name: if-match required: false schema: type: string PaginationLimitQueryParam: description: The maximum number of items to return. in: query name: limit schema: type: integer default: 10 maximum: 1000 minimum: 1 SortOrderQueryParam: description: The sort order to use, either 'ASC' or 'DESC'. in: query name: sortOrder x-default-description: 'The default value depends upon `sortBy`, and in general is ''DESC'' when sorting by time and ''ASC'' otherwise. ' x-obmcs-top-level-enum: '#/definitions/SortOrder' schema: type: string enum: - ASC - DESC LockboxPartnerIdOptionalQueryParam: description: The ID of the partner. in: query name: partnerId x-default-description: 'null' schema: type: string RetryTokenHeader: description: 'A token that uniquely identifies a request so it can be retried in case of a timeout or server error without risk of executing that same action again. Retry tokens expire after 24 hours, but can be invalidated before then due to conflicting operations. For example, if a resource has been deleted and purged from the system, then a retry of the original creation request might be rejected. ' in: header name: opc-retry-token required: false schema: type: string maxLength: 64 minLength: 1 RequestorIdentifierOptionalQueryParam: description: The unique identifier (OCID) of the requestor in which to list resources. in: query name: requestorId x-default-description: 'null' schema: type: string maxLength: 255 minLength: 1 AccessRequestLifecycleStateQueryParam: description: A filter to return only resources their lifecycleState matches the given lifecycleState. in: query name: lifecycleState x-default-description: 'null' x-obmcs-enumref: '#/definitions/AccessRequest/lifecycleState' schema: type: string DisplayNameQueryParam: description: A filter to return only resources that match the entire display name given. in: query name: displayName x-default-description: 'null' schema: type: string maxLength: 255 minLength: 1 RequestIdHeader: description: The client request ID for tracing. in: header name: opc-request-id schema: type: string schemas: Error: description: Error Information. properties: code: description: A short error code that defines the error, meant for programmatic parsing. type: string message: description: A human-readable error string. type: string required: - code - message AccessRequestSummary: description: Summary information for an access request. properties: accessDuration: description: The maximum amount of time operator has access to associated resources. format: x-obmcs-duration type: string definedTags: additionalProperties: additionalProperties: description: 'The value of the tag. Only string type is supported. ' type: object description: 'Key-value pair representing predefined tags'' keys and values scoped to a namespace. Example: `{"bar-key": "value"}` ' type: object description: 'Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: `{"foo-namespace": {"bar-key": "value"}}` ' type: object description: description: The rationale for requesting the access request. type: string displayName: description: The name of the access request. type: string freeformTags: additionalProperties: type: string description: 'Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: `{"bar-key": "value"}` ' type: object id: description: The unique identifier (OCID) of the access request, which can't be changed after creation. type: string lifecycleState: description: The current state of the access request. type: string x-obmcs-enumref: '#/definitions/AccessRequest/lifecycleState' lockboxId: description: The unique identifier (OCID) of the lockbox box that the access request is associated with, which can't be changed after creation. type: string requestorId: description: The unique identifier of the requestor. type: string requestorLocation: description: 'The two-char country code of the requestor while creating the access request Example: `US` ' type: string systemTags: additionalProperties: additionalProperties: description: 'The value of the tag. Only string type is supported. ' type: object description: 'Key-value pair representing system tags'' keys and values scoped to a namespace. Example: `{"bar-key": "value"}` ' type: object description: 'Usage of system tag keys. These predefined keys are scoped to namespaces. Example: `{"orcl-cloud": {"free-tier-retained": "true"}}` ' type: object timeCreated: description: 'The time the access request was created. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339). Example: `2020-01-25T21:10:29.600Z` ' format: date-time type: string timeExpired: description: 'The time the access request expired. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339). Example: `2020-01-25T21:10:29.600Z` ' format: date-time type: string timeUpdated: description: 'The time the access request was last updated. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339). Example: `2020-01-25T21:10:29.600Z` ' format: date-time type: string required: - id - lockboxId - displayName - description - requestorId - lifecycleState - timeCreated - timeUpdated - timeExpired type: object HandleAccessRequestDetails: description: The details for handling access request. properties: action: description: The action take by persona enum: - APPROVE - DENY - REVOKE - CANCEL type: string x-obmcs-top-level-enum: '#/definitions/AccessRequestActionType' message: description: Action justification or details. maxLength: 255 minLength: 1 type: string required: - action type: object AccessRequest: description: 'An access request to a customer''s resource. An access request is a subsidiary resource of the Lockbox entity. ' properties: accessDuration: description: The maximum amount of time operator has access to associated resources. format: x-obmcs-duration type: string activityLogs: description: The actions taken by different persona on the access request, e.g. approve/deny/revoke items: $ref: '#/components/schemas/ActivityLog' type: array context: additionalProperties: type: string description: The context object containing the access request specific details. type: object description: description: The rationale for requesting the access request and any other related details.. type: string displayName: description: The name of the access request. type: string id: description: The unique identifier (OCID) of the access request, which can't be changed after creation. type: string lifecycleState: description: Possible access request lifecycle states. enum: - IN_PROGRESS - WAITING - SUCCEEDED - CANCELING - CANCELED - FAILED type: string lifecycleStateDetails: description: Details of access request lifecycle state. enum: - PROCESSING - WAITING_FOR_APPROVALS - APPROVED - AUTO_APPROVED - CANCELLING_ACCESS - EXPIRED - REVOKED - DENIED - ERROR type: string lockboxId: description: The unique identifier (OCID) of the lockbox box that the access request is associated with, which can't be changed after creation. type: string reminderCount: description: 'The count of times the access request was reminded. ' type: integer requestorId: description: The unique identifier of the requestor. type: string requestorLocation: description: 'The location of the requestor. Format with be two letters indicatiog operator''s country code defined by https://jira-sd.mc1.oracleiaas.com/browse/SSD-17880 Example: `US` ' type: string timeCreated: description: 'The time the access request was created. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339). Example: `2020-01-25T21:10:29.600Z` ' format: date-time type: string timeExpired: description: 'The time the access request expired. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339). Example: `2020-01-25T21:10:29.600Z` ' format: date-time type: string timeReminded: description: 'The time the access request was last reminded. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339). Example: `2020-01-25T21:10:29.600Z` ' format: date-time type: string timeUpdated: description: 'The time the access request was last updated. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339). Example: `2020-01-25T21:10:29.600Z` ' format: date-time type: string required: - id - lockboxId - displayName - description - requestorId - lifecycleState - lifecycleStateDetails - accessDuration - activityLogs - timeCreated - timeUpdated - timeExpired - timeReminded - reminderCount - requestorLocation type: object ExportAccessRequestsDetails: description: Details for generating report of Access Requests to export action properties: lockboxId: description: The unique identifier (OCID) of the lockbox box that the access request is associated with which is immutable. type: string timeCreatedAfter: description: Date and time after which access requests were created, as described in [RFC 3339](https://tools.ietf.org/rfc/rfc3339) format: date-time type: string timeCreatedBefore: description: Date and time before which access requests were created, as described in [RFC 3339](https://tools.ietf.org/rfc/rfc3339)s format: date-time type: string required: - lockboxId - timeCreatedAfter - timeCreatedBefore type: object ActivityLog: description: The log of the action taken by different persona on the access request, e.g. approve/deny/revoke properties: action: description: The action take by persona enum: - APPROVE - DENY - REVOKE - CANCEL type: string x-obmcs-top-level-enum: '#/definitions/AccessRequestActionType' message: description: The action justification or details. type: string timeUpdated: description: 'The time the action was taken. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339). Example: `2020-01-25T21:10:29.600Z` ' format: date-time type: string userId: description: User OCID of the persona type: string userLevel: description: Level of the persona enum: - LEVEL1 - LEVEL2 - LEVEL3 - ADMIN - OPERATOR type: string x-obmcs-top-level-enum: '#/definitions/PersonaLevel' type: object AccessRequestCollection: description: Results of access request search. Contains both AccessRequestSummary items and other information, such as metadata. properties: items: description: List of AccessRequestSummary. items: $ref: '#/components/schemas/AccessRequestSummary' type: array required: - items type: object AccessMaterials: description: Access materials details. properties: details: additionalProperties: format: password type: string description: The contents of the material. This is a map that contains the various fields needed for access. type: object required: - details type: object AccessRequestExt: allOf: - $ref: '#/components/schemas/AccessRequest' - properties: requestorUserName: description: 'The user name i.e. userId of the requestor. ' type: string required: - requestorUserName type: object description: 'An access request to a customer''s resource that includes additional requestor metadata. An access request is a subsidiary resource of the Lockbox entity. ' CreateAccessRequestDetails: description: 'The configuration details for a new access request. We don''t accept a compartmentId parameter because it is implied to be the same as the lockbox as a subsidiary resource. The requestorId is also based on the caller user info. ' properties: accessDuration: description: The maximum amount of time operator has access to associated resources. format: x-obmcs-duration type: string context: additionalProperties: type: string description: The context object containing the access request specific details. type: object description: description: The rationale for requesting the access request. maxLength: 255 minLength: 1 type: string displayName: description: The name of the access request. maxLength: 255 minLength: 1 type: string lockboxId: description: The unique identifier (OCID) of the lockbox box that the access request is associated with which is immutable. type: string required: - lockboxId - description - accessDuration type: object responses: default: description: Unknown Error headers: opc-request-id: description: 'Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. ' schema: type: string content: application/json: schema: $ref: '#/components/schemas/Error' x-anchors: x-headers: etag: description: 'For optimistic concurrency control. See `if-match`. ' type: string location: description: 'this contains the full URI for the get request, e.g. "https://iaas.us-phoenix-1.oraclecloud.com/20210331/lockbox/" ' type: string opc-next-page: description: 'For pagination of a list of items. When paging through a list, if this header appears in the response, then a partial list might have been returned. Include this value as the `page` parameter for the subsequent GET request to get the next batch of items. ' type: string opc-request-id: description: 'Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. ' type: string opc-work-request-id: description: 'Unique Oracle-assigned identifier for the asynchronous work. You can use this to query its status. ' type: string retry-after: description: A decimal number representing the number of seconds the client should wait before polling this endpoint again. type: integer x-properties: compartmentId: description: The unique identifier (OCID) of the compartment where the resource is located. maxLength: 255 minLength: 1 type: string definedTags: additionalProperties: additionalProperties: description: 'The value of the tag. Only string type is supported. ' type: object description: 'Key-value pair representing predefined tags'' keys and values scoped to a namespace. Example: `{"bar-key": "value"}` ' type: object description: 'Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: `{"foo-namespace": {"bar-key": "value"}}` ' type: object freeformTags: additionalProperties: type: string description: 'Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: `{"bar-key": "value"}` ' type: object systemTags: additionalProperties: additionalProperties: description: 'The value of the tag. Only string type is supported. ' type: object description: 'Key-value pair representing system tags'' keys and values scoped to a namespace. Example: `{"bar-key": "value"}` ' type: object description: 'Usage of system tag keys. These predefined keys are scoped to namespaces. Example: `{"orcl-cloud": {"free-tier-retained": "true"}}` ' type: object x-obmcs-client-retries-enabled: true x-oracle-package: com.oracle.pic.lockbox