---
title: "Creating an OCI IAM Policy (Console)"
slug: "creating-an-oci-iam-policy-console"
updated: 2026-06-29T12:45:47Z
published: 2026-06-29T12:45:47Z
canonical: "docs.britive.com/creating-an-oci-iam-policy-console"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.britive.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Creating an OCI IAM Policy (Console)

Perform the following steps to create an IAM policy in Oracle Cloud.

1. Log in to the Oracle cloud console with administrator privileges.
2. Click **Identity & Security** from the navigation menu.
3. Click **Policies**.
4. Click **Create Policy**.
5. Enter the following in the **Create Policy** window:
  1. Enter the **Name**.
  2. Enter **Description**.
  3. Select **root** from the compartment.
  4. Under **Policy Builder,** click **Show Manual Editor** and enter below:

```shell
Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to inspect domains in tenancy
Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to inspect compartments in tenancy
Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to inspect policies in tenancy
Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to inspect users in tenancy
Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to inspect groups in tenancy
Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to use users in tenancy where target.group.name != 'Administrators'
Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to use groups in tenancy where target.group.name != 'Administrators'
```

Replace *<GROUP_DISPLAY_NAME>* with what we had given in the cURL in the step ([Creating an OCI Group and Adding the Service User to it (REST)](/v1/docs/creating-an-oci-group-and-adding-the-service-user-to-it-rest))

e. Click **Create**.