Foglight for Azure SQL Database (Cartridge) 5.9.5.10

Table 10. Oracle views requiring Select permission
Dictionary view	Dictionary view	Dictionary view
dba_constraints dba_data_files dba_db_links dba_directories dba_extents	gv_$session gv_$session_wait gv_$sort_segment gv_$spparameter gv_$sql	v_$logfile v_$open_cursor v_$osstat v_$parameter v_$pgastat
dba_free_space dba_indexes dba_jobs dba_jobs_running dba_libraries	gv_$sysstat gv_$temp_extent_pool gv_$undostat obj$ recyclebin$	v_$pq_sysstat v_$process v_$recovery_file_dest v_$resource v_$result_cache_statistics
dba_objects dba_profiles dba_role_privs dba_roles dba_rollback_segs	ts$ uet$ user$ v_$archive_dest v_$archived_log	v_$rman_status v_$rowcache v_$segstat v_$segment_statistics v_$sess_time_model
dba_scheduler_jobs dba_scheduler_running_jobs dba_segments dba_sequences dba_sequences	v_$asm_disk v_$asm_disk_stat v_$asm_diskgroup v_$asm_diskgroup v_$asm_diskgroup_stat	v_$session v_$session_wait v_$sesstat v_$sga v_$sga_dynamic_components
dba_synonyms dba_sys_privs dba_tab_columns dba_tab_privs dba_tables	v_$asm_operation v_$asm_template v_$cell v_$controlfile v_$database	v_$sgainfo v_$sgastat v_$spparameter v_$sql v_$sql_plan
dba_tablespaces dba_temp_files dba_temp_free_space dba_undo_extents dba_users	v_$datafile v_$dataguard_status v_$dbfile v_$dispatcher v_$enqueue_stat	v_$sqlarea v_$sqltext_with_newlines v_$standby_log v_$statname v_$sysmetric
dba_views dba_recyclebin fet$ file$ gv_$archive_dest	v_$enqueue_statistics v_$event_name v_$filestat v_$fixed_table v_$flash_recovery_area_usage	v_$sysstat v_$system_event v_$system_parameter v_$tablespace v_$temp_extent_pool
gv_$archived_log gv_$instance gv_$instance_cache_transfer gv_$lock	v_$instance v_$instance_cache_transfer v_$iostat_file v_$librarycache	v_$temp_space_header v_$tempfile v_$tempstat v_$transaction
gv_$pq_sysstat gv_$rman_configuration gv_$rman_output	v_$lock v_$log v_$log_history v_$undostat	v_$memory_target_advice v_$pga_target_advice v_$sga_target_advice v_$sql_shared_cursor
gv_$archive_dest_status gv_$dataguard_stats gv_$dataguard_status	v_$flashback_database_log v_$dataguard_config	v_$backup_set_details v_$session_event v_$services

Additional configurations for Amazon Oracle RDS instances

There are two user credential options for monitoring Amazon Oracle RDS instances:

•

Master predefined user that comes as part of Amazon Oracle RDS instance

•

Separate user who has either of the following:

•

SELECT_CATALOG_ROLE or SELECT ANY TABLE system privilege

•

Grant additional permissions by manually executing the following commands from the master user:

•

EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'FET$',p_grantee =>'TEST', p_privilege => 'SELECT');

•

EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'UET$',p_grantee =>'TEST', p_privilege => 'SELECT');

•

EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'FILE$',p_grantee =>'TEST', p_privilege => 'SELECT');

•

EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'OBJ$',p_grantee =>'TEST', p_privilege => 'SELECT');

•

EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'TS$',p_grantee =>'TEST', p_privilege => 'SELECT');

•

EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'USER$',p_grantee =>'TEST', p_privilege => 'SELECT');

•

EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'RECYCLEBIN$',p_grantee =>'TEST', p_privilege => 'SELECT');

Permissions for SQL Server databases

If you are using SQL Server®, ensure that these permissions are set.


	NOTE: Monitoring mirroring requires sysadmin privileges. Foglight user needs to be created on every database within the instance, otherwise it cannot be monitored. New databases created after Foglight agent installation needs to be added either by running the permission script again or manually using CREATE USER <Foglight User> under the new database.

Table 11. SQL Server Permissions
Instance Level		Database Level
VIEW ANY DEFINITION VIEW SERVER STATE ALTER TRACE	Granted for: Tracing a Session Deadlocks monitoring PI Change-Tracking	Map Foglight Login to a database user* db_datareader db_ddladmin CREATE USER**	Granted for: Running DBCC commands for indexes

* Creation of a new user is not required if a domain group with the appropriate permissions is used.

** It's permission for SQL Server databases on Amazon RDS.

Grant Execute on these master database objects:

Table 12. Master database objects requiring Execute permission

xp_enumerrorlogs xp_readerrorlog	Granted for Error log monitoring

Grant Select on these msdb database objects:

Table 13. MSDB database objects requiring Select permission

log_shipping_monitor_primary log_shipping_monitor_secondary log_shipping_primaries log_shipping_secondaries log_shipping_primary_secondaries syscategories sysjobactivity sysjobs sysjobhistory dbm_monitor_data dbm_monitor sysalerts agent_datetime	Granted for Log Shipping monitoring Granted for Jobs and Replication monitoring Granted for Mirroring monitoring Granted for Agent alerts and services


	NOTE: 1. For SQL Server databases on Amazon RDS, msdb database fixed database role of SQLAgentUserRole is needed. 2. For SQL Server databases on Amazon RDS, Master user should have access to all databases in the instance.

Permissions for Sybase databases

If you are using Sybase®, ensure that these permissions are set.

Permission required — Sybase MDA Agent requires mon_role

In case the agent is created with a non-sa user, procedures need to be manually created on the monitored instance. This is achieved by executing the scripts available at the following directory:

<Agent Manager installation directory>\agents\SybaseCartridge\<version#>\config\Sybase\scripts\

请选择您的产品：

为向您提供更好的服务，请填写'Purpose of your Chat'（联系目的）：

针对您的问题建议的解决方案

Foglight for Azure SQL Database (Cartridge) 5.9.5.10 - Deployment Guide

Permissions for Oracle databases

Additional configurations for Amazon Oracle RDS instances

Permissions for SQL Server databases

Permissions for Sybase databases