QuestionQ5

Identity and Access Management

Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy statement is invalid?

  • A Allow dynamic-group FrontEnd to manage instance-family in compartment Project-A
  • B Allow any-user to inspect users in tenancy
  • C Allow group A-Admins to manage all-resources in compartment Project-A
  • D Allow group A-Developers to create volumes in compartment Project-A
Explanation

OCI IAM policies support the predefined verbs inspect, read, use, and manage; create is not a valid policy verb. Creating a block volume is granted through manage volumes, which includes the VOLUME_CREATE permission.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!