Creating an OCI IAM Policy (Console)

Perform the following steps to create an IAM policy in Oracle Cloud.

1. Log in to the Oracle cloud console with administrator privileges.

2. Click Identity & Security from the navigation menu.

3. Click Policies.

4. Click Create Policy.

5. Enter the following in the Create Policy window:

   1. Enter the Name.

   2. Enter Description.

   3. Select root from the compartment.

   4. Under Policy Builder, click Show Manual Editor and enter below:

      Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to inspect domains in tenancy
      Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to inspect compartments in tenancy
      Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to inspect policies in tenancy
      Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to inspect users in tenancy
      Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to inspect groups in tenancy
      Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to use users in tenancy where target.group.name != 'Administrators'
      Allow group 'Default'/'<GROUP_DISPLAY_NAME>' to use groups in tenancy where target.group.name != 'Administrators'

      Replace <GROUP_DISPLAY_NAME> with what we had given in the cURL in the step (Creating an OCI Group and Adding the Service User to it (REST))

e. Click Create.