You are tasked with creating a group called volumeBackcupAdmins to manage only block volume backups. Which of the following set of policy/policies would you need to write to meet this requirement?…

Question

Options

• AOption A
• BOption B
• COption C
• DOption D

• A
  73% (19)
• B
  15% (4)
• C
  8% (2)
• D
  4% (1)

Explanation

Let volume backup admins manage only backups Type of access: Ability to do all things with volume backups, but not create and manage volumes themselves. This makes sense if you want to have a single set of volume backup admins manage all the volume backups in all the compartments. The first statement gives the required access to the volume that is being backed up; the second statement enables creation of the backup (and the ability to delete backups). The third statement enables the creation and management of user defined backup policies; the fourth statement enables assignment and removal of assignment of backup policies. Where to create the policy: In the tenancy, so that the access is easily granted to all compartments by way of policy inheritance. To reduce the scope of access to just the volumes and backups in a particular compartment, specify that compartment instead of the tenancy. Allow group VolumeBackupAdmins to use volumes in tenancy Allow group VolumeBackupAdmins to manage volume-backups in tenancy If the group will be using the Console, the following policy gives a better user experience: Allow group VolumeBackupAdmins to use volumes in tenancy Allow group VolumeBackupAdmins to manage volume-backups in tenancy Allow group VolumeBackupAdmins to inspect volume-attachments in tenancy Allow group VolumeBackupAdmins to inspect instances in tenancy

No community discussion yet for this question.