1Z0-1072-25: Oracle Cloud Infrastructure 2025 Architect Associate

By Oracle · Question Mode

QuestionQ39

VerifiedIdentity and Access Management

You have three compartments: ProjectA, ProjectB, and ProjectC. An admin group exists for each compartment: A-Admins, B-Admins, and C-Admins.

Each admin group has full access to its corresponding compartment, as shown below.

Your organization has created the tag namespace EmployeeGroup.Role, and all admin groups are tagged with the value Admin.

Question Image

You want to create a Test compartment that members of the three projects can share. You also need to grant admin access to all three existing admin groups.

Which policy would you write to accomplish this?

Explanation

OCI evaluates request.principal.group.tag.EmployeeGroup.Role against tags on the groups to which the requesting user belongs. A policy with any-user and the condition EmployeeGroup.Role='Admin' grants management access in the Test compartment to members of every group carrying that tag, including the three existing admin groups. Oracle documents this exact policy pattern.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!