QuestionQ50

VerifiedIdentity and Access Management

A large organization uses Oracle Cloud Infrastructure (OCI) and has implemented a complex compartment hierarchy. It has a root compartment with multiple nested compartments for different projects, teams, and environments. A new virtual machine is created for a particular project in a development sub-compartment.

Which statement regarding the virtual machine in this scenario is INCORRECT?

Explanation

OCI policies can be attached to the tenancy (root compartment), a parent compartment, or the specific compartment, and permissions can be inherited through the compartment hierarchy. Access to a virtual machine is therefore not controlled only by policies attached to the root compartment. OCI also supports instances in a different compartment from their network subnet, and an instance can be moved to another compartment within the same tenancy.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!