1Z0-1072-25: Oracle Cloud Infrastructure 2025 Architect Associate

By Oracle · Question Mode

QuestionQ33

VerifiedIdentity and Access Management

Two groups, “AppDevTeamA” and “AppDevTeamB”, have the same members and need identical permissions to manage virtual networks in the “ProjectA” and “ProjectB” compartments, respectively. Choose the most optimized policy statement to accomplish this while considering security and efficiency. Refer to the diagram, in which “ParentCompartment” is the parent compartment of “ProjectA” and “ProjectB”.

Question Image

Explanation

OCI policies applied to a parent compartment are inherited by its child compartments. A policy can include multiple groups and restrict access with an any condition on target.compartment.name; granting both groups manage virtual-network-family only when the target compartment is ProjectA or ProjectB provides the required network-management access without granting unrelated resource permissions or access to other child compartments.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!