QuestionQ48

VerifiedIdentity and Access Management

A company inadvertently moved a critical database instance to another compartment in its OCI tenancy. Existing IAM policies had been mapped to the database’s original compartment and provided authorized users with access.

How does this affect user access to the database?

Explanation

After a resource is moved to a new OCI compartment, the IAM policies governing the destination compartment apply immediately and control access. IAM permissions scoped only to the original compartment no longer grant access to the moved database, so users authorized solely through those policies lose access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!