Managing Access to Artifact Registry

To use Artifact Registry, an administrator must grant you access to Artifact Registry resources through Identity and Access Management (IAM) policies , whether you're using the Console or the REST API with an SDK, CLI, or other tool.

To get started with OCI resources, an administrator must set you up with a user ID and add that ID to a user group . The administrator then assigns group access to resources through IAM policies . You get access to all the resources available to your group.

If you perform an action and get a message that you don’t have permission or are unauthorized, confirm with an administrator the type of access you were granted and which compartment  you’re supposed to work in.

For example, the following policy gives permission to users in the group artifact-admins to create, update, and delete all repositories and artifacts in the compartment sales-apps:

Allow group artifact-admins to manage all-artifacts in compartment sales-apps