Skip to content
Release: Australia · Updated: 2026-07-06 · Official documentation · View source

Create an AI connection for AI Service Graph Connector for OCI

Create an AI connection for OCI in AI Control Tower using the  AI Service Graph Connector for OCI.

Before you begin

Role required: sn_ai_disc.discovery_admin and sn_cmdb_int_util.sgc_admin

Procedure

  1. Navigate to SGC Central > Create Connection.

  2. Select OCI GenAI from the list of connectors, and then select Create connection.

  3. On the Grant attachment update permissions page, enable edit permissions for the Attachment [sys_attachment] table, and then select Continue.

  4. On the  Review setup instructions  page, select I have read the setup instructions, and then select Continue.

  5. Create an X.509 certificate.

    1. Select New.

    2. Enter the Name for the certificate.

    3. Enter the Key store password.

    4. Select Add file to attach the Java KeyStore (JKS) file.

    5. Select Upload to upload the JKS file, and note the generated fingerprint.

    6. Select Save, and then select Continue.

  6. Select the source system.

    1. Select the services that you want to discover.

      • ** Generative AI**: Discovers base models, custom (fine-tuned) models, and imported models.
      • Generative AI Agents: Discovers AI agents, agent-referenced models, AI tools, AI prompts, and agent usage metrics. Note: You can select both services, if required.
    2. Select Continue.

  7. Configure and test the connection.

    1. Enter the following details for the connection.

      FieldDescription
      Connection nameName to identify the OCI connection.
      Tenancy IDThe OCID of your OCI tenancy. For example, ocid1.tenancy.oc1..aaaaaa....
      User IDThe OCID of the OCI user whose API key is configured.
      Key FingerprintThe fingerprint generated when uploading the public key in step 5.
      RegionThe OCI region identifier. For example, us-chicago-1.
      CertificateThe keystore.jks file generated in step 5.
      Certificate AliasThe alias used during JKS creation in step 5.
      Certificate Alias PasswordThe password used during JKS creation in step 5.
      Compartment ID (optional)The OCID of a specific compartment to scope discovery to that compartment and its sub-tree. If no value is specified, the entire tenancy is discovered.
    2. Select a MID Server.

    3. Select Create and test connection, and then select Continue.

  8. Configure the import schedule.

    1. Verify that the parent scheduled jobs are active.

      These jobs are shipped as inactive and must be activated manually.

      • SG-OCIGenAI-Discovery for Model Track .
      • **SG-OCIGenAIAgents-Discovery ** for Agent Track.
      • **SG-OCIGenAIAgents-Usage ** for Usage metrics.
        1. Set the run frequency for the scheduled import jobs.

      Alternatively, select Execute now to execute the import schedule immediately.

    2. Select Continue.

  9. Select the Confirm connection setup activity to verify whether the connection was configured.

What to do next

Select View all connections to review the connection details. The created connection appears in the Installed connections list.

Note: The Discovery scheduled job must be executed before viewing discovered data in the CMDB.