Required IAM Policies
To provision and manage Data Infrastructure resources, users must have the appropriate IAM permissions.
A policy is an IAM document that specifies who has what type of access to your resources. A policy can refer to:
- An individual statement written in the policy language
- A collection of statements in a single, named policy document, which has an Oracle Cloud Identifier (OCID) assigned to it
- The overall body of policies your organization uses to control access to resources
A compartment is a collection of related resources that can be accessed only by groups that have been given permission by an administrator in your organization.
To use OCI, you must be granted the required type of access in a policy written by an administrator. This requirement applies whether you use the Console, the REST API with a software development kit (SDK), a command-line interface (CLI), or another tool.
If you try to perform an action and receive a message that you do not have permission or are unauthorized, confirm with your administrator the type of access that you have been granted and the compartment in which you should work.
For administrators, the policy in Let database admins manage Oracle Cloud database systems lets the specified group manage databases and related database resources.
If you are new to policies, see Getting Started with Policies and Common Policies.
For details about policies specific to Data Infrastructure resources, see Policy Details for Data Infrastructure Resources.
Policy Statements
Create the required IAM policies in your tenancy before provisioning and managing Data Infrastructure resources. The following policies are required:
allow group <group> to use datacc-infrastructures in compartment <compartment>allow group <group> to manage datacc-family in compartment <compartment>allow group <group> to manage database-family in compartment <compartment>allow group <group> to manage basecc-vm-clusters in compartment <compartment>allow group <group> to read work-requests in compartment <compartment>