Connect to Oracle

Oracle Integration Overview

Oracle Cloud Infrastructure (OCI) is a comprehensive platform offering high-performance computing and a wide range of cloud services, designed for reliability, scalability, and security.

Integrating Finout with OCI allows you to efficiently manage your cloud resources, optimize spending, and gain valuable insights into your OCI cloud operations.

For official OCI documentation on these steps, refer to Oracle's documentation.

1. Create a New Group for Finout

Access permissions in Oracle are assigned to groups. Create a separate group for Finout to ensure access only to the necessary billing resources.

1. Go to the OCI navigation menu → Identity & Security → Domains → <Finout domain> → Groups (in the right-hand menu).

Note: If you choose to use a domain other than “Default” to set up the integration user make sure that both the user and group are contained in the same domain.

1. Click Create Group.

1. Fill in the Group Name and add some Description.

1. Click Create.

2. Add the Group a Policy to Access the Cost Reports

Assign a policy to the group for accessing cost reports. In OCI, group permissions are managed through policies. By assigning a policy to the Finout group, you ensure that all its members can access only what the group policies allow.

1. Go to the OCI navigation menu → Identity & Security → Policies.

   
2. Click Create policy.

3. Choose a name for the policy that clearly indicates its purpose for accessing cost reports.

4. In the policy builder box at the bottom of the screen, activate the Show manual editor button and enter the following statements:

   Note: Save your tenancy for step 5.

   • Statement 1:

     Important: The following statement is not an example. You need to run this statement exactly as it is shown below.

     define tenancy usage-report as ocid1.tenancy.oc1..aaaaaaaaned4fkpkisbwjlr56u7cj63lf3wffbilvqknstgtvzub7vhqkggq This specifies the tenancy for usage reports, which is in a bucket owned by Oracle.

   • Statement 2: endorse group <group name> to read objects in tenancy usage-report Replace <group name> with the name of the group created for Finout. If you want your own groups/users to access the cost reports as well, add another policy with the relevant <group name>.

     Examples:

     • If you chose the “Default” domain: endorse group default to read objects in tenancy usage-report

     • If you chose a custom domain named “finoutdomain”: endorse group finoutdomain/default to read objects in tenancy usage-report

5. Click Create.

   

3. Create a User for Finout

1. Go to the OCI navigation menu → Identity & Security → Domains → Users.

   
2. Click Create User.

   
3. Fill in the name and email of the Finout user.

4. Assign the user to the new Finout group you created in step 1 by selecting the appropriate box under the Groups section.

Note: This setup ensures that a Finout user will have access only to the specified policies, specifically the cost reports bucket. It's important to avoid selecting the administrator option and instead choose only the group dedicated to Finout for proper access control.

1. Click Create.

   Note: You can Edit the user capabilities and limit to only API keys.

4. Generate an API Key

Generate an API key to enable Finout users to access the reporting bucket via the Oracle API key.

For detailed instructions, refer to the official Oracle documentation here.

Create an API key pair in the OCI console to enable API signing for the Finout user:

1. Ensure an administrator user is logged into Oracle, as only administrators can perform these steps.

2. Navigate to Identity & Security → Domains → <Finout user domain> → Users, and click the Finout user to access their profile.

   
3. Navigate to the Resources section in the bottom left screen and select API keys.

   
4. Make sure that the Generate API key pair is chosen.

5. Click Download Private Key and save the key in a local directory.

6. Click Add.

   
7. A configuration is displayed. Click on the copy button below the text box and paste it into a local file editor (save for step 5).

   

Note: The Oracle documentation offers alternative methods for generating the key. Ensure that you have the complete configuration details as outlined in the following step.

5. Integrate Oracle with Finout

1. In Finout, navigate to Settings > Cost Centers and click Add cost center. The Connect Accounts window appears.

   
2. In OCI, click Connect Now. The Connect to OCI window appears.

   
3. Fill the relevant fields from the "Configuration file preview" text box you copied in the previous step (Step 4). For “Private key data” you need to open the file and copy the entire file contents, including the key header.

4. Click Next. The cost center is created.