Oracle Cloud Infrastructure Documentation

Prerequisites

Learn about the policies you need to view Multicloud subscriptions, resources, resource anchors, network anchors, and cross-cloud region and zone mapping in Oracle Multicloud Hub.

To use Multicloud Hub, you must be given the required type of access in a policy written by an administrator, whether you're using the Console or the REST API with an SDK, CLI, or other tool. If you're new to policies, see IAM Policies Overview. For compartment, you can specify either tenancy (root compartment) or a child compartment.

Task Example policy
List Multicloud subscriptions (ListMulticloudSubscriptions), including listing their Multicloud compartments and getting details about those compartments 
Allow group <group_name> to {MULTICLOUD_SUBSCRIPTION_INSPECT} in compartment <compartment_ocid>
Allow group <group_name> to read organizations-assigned-subscription in compartment <compartment_ocid>
Allow group <group_name> to read subscription in compartment <compartment_ocid>

This policy includes required permissions for other services.

List metadata for a Multicloud subscription (ListMultiCloudMetadata)

Get details for Multicloud subscription metadata (GetMultiCloudMetadata)

 
Allow group <group_name> to inspect multicloud-configurations in compartment <compartment_ocid>
List Multicloud resources (ListMulticloudResources) 
Allow group <group_name> to {MULTICLOUD_RESOURCE_INSPECT} in compartment <compartment_ocid>
Allow group <group_name> to inspect compartments in compartment <compartment_ocid>

This policy assumes that the group already has access to the resources themselves. The example policy includes required permissions for other services.

List resource anchors (ListResourceAnchors)

Get resource anchors (GetResourceAnchor)

 
Allow group <group_name> to read multicloud-resource-anchors in compartment <compartment_ocid>

List network anchors (ListNetworkAnchors)

Get network anchors (GetNetworkAnchor)

 
Allow group <group_name> to read multicloud-network-anchors in compartment <compartment_ocid>
View mapped partner cloud regions and zones (ListExternalLocationMappingMetadata) 
Allow group <group_name> to inspect multicloud-configurations in compartment <compartment_ocid>