1Z0-1067 · Question #62
You are using Oracle Cloud Infrastructure (0C1) services across several regions: us-phoenlx-1, us- ashburn-1, uk-london-1 and ap-tokyo-1. You have created a separate administrator group for each…
The correct answer is B. Option B. Restrict admin access to a specific region Type of access: Ability to manage resources in a specific region. Remember that IAM resources must be managed in the home region. If the specified region is not the home region, then the Admin will not be able to manage IAM resources…
Question
You are using Oracle Cloud Infrastructure (0C1) services across several regions: us-phoenlx-1, us- ashburn-1, uk-london-1 and ap-tokyo-1. You have created a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively. u want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenlx-1 region only and riot any other OCI regions. What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? A) B) C) D)
Options
- AOption A
- BOption B
- COption C
- DOption D
How the community answered
(24 responses)- A4% (1)
- B83% (20)
- C4% (1)
- D8% (2)
Explanation
Restrict admin access to a specific region Type of access: Ability to manage resources in a specific region. Remember that IAM resources must be managed in the home region. If the specified region is not the home region, then the Admin will not be able to manage IAM resources. For more information about the home region, see Managing Regions. Where to create the policy: In the tenancy. Allow group PHX-Admins to manage all-resources in tenancy where request.region='phx' The preceding policy allows PHX-Admins to manage all aspects of all resources in US West (Phoenix). Members of the PHX-Admins group can only manage IAM resources if the tenancy's home region is US
Topics
Community Discussion
No community discussion yet for this question.