This image shows the following:

• Two users assigned to separate groups, X and Y.
• Two instances that are configured as a dynamic group.
• Two compartments, A and B.
• The following policies:
  • Policy A allows group X to manage all the resources in compartment A.
  • Policy B1 allows group Y to manage all the resources in compartment B.
  • Policy B2 allows the dynamic group to use buckets in compartment B.