QuestionQ46

VerifiedIdentity and Access Management

You need to create a policy that permits the NetworkAdmins group to manage a Virtual Cloud Network (VCN) in compartment C, and attach the policy to the tenancy. The compartment hierarchy is shown below.

Question Image

Which policy statement can be used to complete this task?

Explanation

For a policy attached to the tenancy, OCI requires a colon-separated compartment path when the target is not a direct child of the tenancy. Because C is nested under A and then B, the target scope must be compartment A:B:C. The manage virtual-network-family permission allows management of VCN-related resources in that compartment.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!