Identity Policy

Identity Policy Presets

Ready-to-deploy configuration presets for Identity Policy. Each preset is a complete manifest you can copy, customize, and deploy.

3 presets
01

Compartment Admin Policy

This preset creates an IAM policy granting a group full administrative access to all resources within a compartment. This is the most common OCI policy pattern -- the first thing every team creates...

02

Dynamic Group Service Access Policy

This preset creates an IAM policy granting a dynamic group access to specific OCI services. Dynamic groups are OCI's workload identity mechanism -- they let compute instances, OKE pods, and Functions...

03

Read-Only Auditor Policy

This preset creates a tenancy-level IAM policy granting a group read-only visibility across all compartments. The `inspect` verb allows listing and viewing resource metadata without accessing data...