Policy Administrator

OCI IAM · Identity · Manage

Verb Tier

Manage

Categoria

Identity

Escopo

Tenancy

Privilegiado

Sim

Esta policy é privilegiada — concede acesso de alto impacto. Atribua apenas a grupos de administração confiáveis e monitore com Cloud Guard e Audit Logs.

Descrição

Create, update and delete IAM policies that govern resource access across the tenancy.

Verb: Manage

Full CRUD — create, read, update, delete and administer the resource.

Exemplo de Policy Statement

Allow group PolicyAdmins to manage policies in tenancy

Substitua o nome do grupo e compartimento conforme sua estrutura OCI.

Resource Types

policies

Permissões

  • Create/update/delete IAM policies
  • Read existing policies
  • Manage policy attachments to compartments

Verb Actions(6)

POLICY_CREATE
POLICY_UPDATE
POLICY_DELETE
POLICY_READ
POLICY_LIST
COMPARTMENT_READ

Policy Statement (JSON)

{
  "policyName": "Policy Administrator",
  "statements": [
    "Allow group PolicyAdmins to manage policies in tenancy"
  ],
  "compartment": "tenancy",
  "resourceTypes": [
    "policies"
  ],
  "verbLevel": "Manage"
}