Oracle Cloud Infrastructure Billing Sources

Last updated: October 23, 2026

For Oracle Cloud Infrastructure, the billing source is a service user account that has been granted specific permissions.

Note: Oracle Cloud Infrastructure must be enabled as a cloud provider in System Settings > Application Settings > Provider Settings before beginning this process. For more information, see Cloud Provider Settings.

In the Oracle Console

  1. Create a Group named ServiceUsersFinancial. For information on creating groups, see Oracle's documentation: Creating a Group.

  2. Create a policy to grant the ServiceUsersFinancial group the following permissions. For information on creating policies, see Oracle's documentation: Creating a Policy.

    DEFINE tenancy cost-report-tenancy AS ocid1.tenancy.oc1..aaaaaaaaned4fkpkisbwjlr56u7cj63lf3wffbilvqknstgtvzub7vhqkggq
ENDORSE group ServiceUsersFinancial TO READ objects IN tenancy cost-report-tenancy
ALLOW group ServiceUsersFinancial TO INSPECT tenant IN tenancy
ALLOW group ServiceUsersFinancial TO INSPECT compartments IN tenancy
ALLOW group ServiceUsersFinancial TO INSPECT organizations-family IN tenancy

    The OCID in the DEFINE statement is the location of the Oracle-owned storage bucket where your cost reports are stored. For more information on how Oracle stores financial data, see Oracle's documentation: Cost and Usage Reports.

    • Commercial. ocid1.tenancy.oc1..aaaaaaaaned4fkpkisbwjlr56u7cj63lf3wffbilvqknstgtvzub7vhqkggq

    • Government. ocid1.tenancy.oc2..aaaaaaaaned4fkpkisbwjlr56u7cj63lf3wffbilvqknstgtvzub7vhqkggq

    • Federal. ocid1.tenancy.oc3..aaaaaaaaned4fkpkisbwjlr56u7cj63lf3wffbilvqknstgtvzub7vhqkggq

  3. Create a service user that belongs to that group. For information on creating users, see Oracle's documentation: Creating a User.

  4. Create an API key for the service user. For more information, see Oracle's documentation: Generating an API Signing Key (Console).

In Kion

  1. Navigate to Accounts & Scopes > Billing Sources.

  2. Click Add New.

  3. For Account Type, select Oracle Cloud Infrastructure.

  4. File Type selection

    • Selecting FOCUS will generate data from the FOCUS data export

      1. Click here for more information on the FOCUS spec and how to get setup

    • Selecting FOCUS and OCI Cost Report will prioritize generating data from the FOCUS export, and the OCI Cost Report will be an alternative option if Kion is unable to find the FOCUS export.

    • Selecting OCI Cost Report will generate data from the default Oracle billing file.

  5. Enter a Billing Source Name.

  6. Enter the Tenancy OCID and User OCID for the API key you created above. For information on finding these IDs, see Oracle's documentation: Where to Get the Tenancy's OCID and User's OCID.

  7. Upload the .pem file for your API Private Key.

  8. Enter the Fingerprint for the API key you created above. For information on finding this, see Oracle's documentation: How to Get the Key's Fingerprint.

  9. Enter your Billing Region.

  10. Choose a Billing Start Date. This is the earliest month Kion will try to fetch financial data for.

  11. Click Test Billing Connection. If you receive an error message, verify your credentials and permissions.

  12. Leave Skip Billing Source Validation (Not Recommended) unchecked.

  13. Click Create Billing Source.