Learn about the required Oracle Cloud Infrastructure(OCI) Identity and Access Management(IAM) policy and how to create the policy in the OCI console. In this video, you will learn how to create an administrator group and add users, write matching rules for a dynamic group of instance resources that will be managed by OS management hub, find compartment and sub compartment OCIDs, and write the policy that defines permissions for users and instance resources to use OS management hub. Examples of dynamic group rules and policies are provided covering broad sets of permissions, limiting administrator groups, and narrowing permission to specific compartments or sub compartments.
00:03 Title screen
00:17 Brief OCI policy description
00:33 OS Management Hub policy overview
01:00 Navigating to identity resources
01:24 Creating an administrator group
01:41 Creating a dynamic group
02:17 Adding OCI-located instances to a dynamic group
02:43 Using the rule builder to create matching rules
03:18 Adding management agent resources to dynamic group
04:31 Multi-compartment dynamic group example
05:18 Additional dynamic group considerations
05:42 Finding compartment and sub compartment OCIDs
06:12 Creating policy in the OCI web console
06:42 Adding required policy lines
07:25 Adding policy lines for management agent resources
07:51 Compartment policy example
08:10 Multi-compartment policy example with administrator limitations
Resources:
- Learn more about IAM policies for OS Management Hub: docs.oracle.com/en-us/iaas/os...
- Find the policy and dynamic group examples/templates in the video on the policy example documentation page: docs.oracle.com/en-us/iaas/os...
- Getting started with OCI Policies; docs.oracle.com/en-us/iaas/Co...
- How Policies work: docs.oracle.com/en-us/iaas/Co...
- Policy syntax: docs.oracle.com/en-us/iaas/Co...
- Managing dynamic groups: docs.oracle.com/en-us/iaas/Co...
----------------------------------------------
Copyright © 2024, Oracle and/or its affiliates.
16 июн 2024
