VMware Cloud Well-Architected Framework for Oracle Cloud VMware Solution: Shared Responsibility Model

VMware Cloud Shared Responsibility

A shared responsibility model is common among the different VMware Cloud Infrastructure Service providers, which defines distinct roles and responsibilities between the VMware Cloud Infrastructure Services provider and an organization consuming the service.

Disclaimer: The intent of this document is to provide guidance and best practices for VMware Cloud Infrastructure Service providers regarding the shared responsibilities of the service.

Oracle Cloud VMware Solution

Oracle VMware Cloud Solution gives the customer full administrative access to their environment after provisioning. Post provisioning, Oracle removes its access and provides the customer with FULL ACCESS to the SDDC environment. After the initial SDDC deployment, access is available only to the customer.

A screenshot of a computer</p>
<p>Description automatically generated with medium confidence


Customer Responsibility: Security in the Cloud

Customers are responsible for deployment and ongoing configuration of their SDDC, virtual machines, and data that resides therein. In addition to determining the network firewall and VPN configuration, customers are responsible for managing virtual machines (including in-guest security and encryption) and using Oracle's Shared Identity and Access Management with vCenter Roles and Permissions to apply the appropriate controls for users.

Customer Responsibility: Security of the Infrastructure

In the Oracle Cloud, customers are also responsible for the deployment and ongoing configuration of the bare metal servers that their SDDC consumes. An SSH key pair is required to deploy the compute instances, and after that, the customer can either disable, enable or delete the key pair. Oracle is responsible for the physical facilities, physical security, infrastructure, and hardware underlying the entire service.

Oracle Responsibility: Security of the Infrastructure

Details on the shared responsibility model employed by Oracle Cloud VMware Solution can be found in the table below. This table does not represent an exhaustive list of all responsibilities, but it covers common tasks. A great deal of low-level operational work is handled by the Oracle Cloud VMware Solution team, allowing the customer to focus on managing their workloads instead of physical infrastructure. Contact Oracle Cloud support if any further clarification is needed on which party is responsible for a particular task or component.

Shared Responsibility Matrix

The following is not an exhaustive list of responsibilities but encompasses the most frequent tasks and definitions. For further questions, please contact Oracle. For a detailed description of the roles and responsibilities for Oracle Cloud VMware Solution, please refer to the Service Description.




  • Deploying Software-Defined Data Centers (SDDCs)
  • Host Type
  • Host Count
  • Connected OCVS Account
  • Management Network Range
  • Configuring SDDC Network & Security (NSX)
  • Management Gateway Firewall
  • Management Gateway IPsec VPN
  • Compute Gateway Firewall
  • Compute Gateway IPsec VPN
  • Compute Gateway NAT
  • Public IP Addresses
  • Network Segments
  • Distributed Firewall
  • Deploying Virtual Machines
  • Installing Operating Systems
  • Patching Operating Systems
  • Installing Antivirus Software
  • Installing Backup Software
  • Installing Configuration Management Software
  • Migrating Virtual Machines
  • Live vMotion
  • Cold Migration
  • Content Library Sync
  • Managing Virtual Machines
  • Installing software
  • Implementing backup solution
  • Implementing Antivirus solution
  • SDDC Lifecycle
  • ESXi patch and upgrade
  • vCenter Server patch and upgrade
  • NSX patch and upgrade
  • vSAN patch and upgrade
  • SDDC Backup/Restore
  • Backup and Restore vCenter Server
  • Backup and Restore NSX Manager
  • SDDC Health
  • Replace failed hosts
  • Add hosts to maintain adequate "slack space"
  • SDDC Provisioning
  • Operate the Oracle Cloud Console


  • Physical Infrastructure
  • Oracle Regions
  • Oracle Availability Zones
  • Compute / Network / Storage
  • Rack and Power Bare Metal Hosts
  • Rack and Power Network Equipment


Oracle Infrastructure and Platform Cloud Services Security


In the next section, learn about the different considerations for managing infrastructure and application services.


Filter Tags

General Oracle Cloud VMware Solution Document Design