Create an AI connection for AI Service Graph Connector for OCI

  • Release version: Zurich
  • Updated July 6, 2026
  • 2 minutes to read

    • Create an AI connection for OCI in AI Control Tower using the  AI Service Graph Connector for OCI.

    Before you begin

    Role required: sn_ai_disc.discovery_admin and sn_cmdb_int_util.sgc_admin

    Procedure

    1. Navigate to SGC Central > Create Connection.
    2. Select OCI GenAI from the list of connectors, and then select Create connection.
    3. On the Grant attachment update permissions page, enable edit permissions for the Attachment [sys_attachment] table, and then select Continue.
    4. On the  Review setup instructions  page, select I have read the setup instructions, and then select Continue.
    5. Create an X.509 certificate.
      1. Select New.
      2. Enter the Name for the certificate.
      3. Enter the Key store password.
      4. Select Add file to attach the Java KeyStore (JKS) file.
      5. Select Upload to upload the JKS file, and note the generated fingerprint.
      6. Select Save, and then select Continue.
    6. Select the source system.
      1. Select the services that you want to discover.
        •  Generative AI: Discovers base models, custom (fine-tuned) models, and imported models.
        • Generative AI Agents: Discovers AI agents, agent-referenced models, AI tools, AI prompts, and agent usage metrics.
        Note:
        You can select both services, if required.
      2. Select Continue.
    7. Configure and test the connection.
      1. Enter the following details for the connection.
        Field Description
        Connection name Name to identify the OCI connection.
        Tenancy ID The OCID of your OCI tenancy. For example, ocid1.tenancy.oc1..aaaaaa....
        User ID The OCID of the OCI user whose API key is configured.
        Key Fingerprint The fingerprint generated when uploading the public key in step 5.
        Region The OCI region identifier. For example, us-chicago-1.
        Certificate The keystore.jks file generated in step 5.
        Certificate Alias The alias used during JKS creation in step 5.
        Certificate Alias Password The password used during JKS creation in step 5.
        Compartment ID (optional) The OCID of a specific compartment to scope discovery to that compartment and its sub-tree. If no value is specified, the entire tenancy is discovered.
      2. Optional: Select a MID Server.
      3. Select Create and test connection, and then select Continue.
    8. Configure the import schedule.
      1. Verify that the parent scheduled jobs are active.

        These jobs are shipped as inactive and must be activated manually.

        • SG-OCIGenAI-Discovery for Model Track .
        • SG-OCIGenAIAgents-Discovery  for Agent Track.
        • SG-OCIGenAIAgents-Usage  for Usage metrics.
      2. Set the run frequency for the scheduled import jobs.

        Alternatively, select Execute now to execute the import schedule immediately.

      3. Select Continue.
    9. Select the Confirm connection setup activity to verify whether the connection was configured.

    What to do next

    Select View all connections to review the connection details. The created connection appears in the Installed connections list.
    Note:
    The Discovery scheduled job must be executed before viewing discovered data in the CMDB.