Authorization
You can define what privileges you need in policies and associate them with principals. OCI authorization works on the least privilege-first approach, so you are not allowed to perform any actions.
You can specify one or more policy statements in a human-readable format. These policy statements allow you to gain access to OCI resources and outline what you can do with them.
Let's take a look at a few human-readable policy statements:
Allow group <group_name> to <verb> <resource-type> in tenancy Allow group <group_name> to <verb> <resource-type> in compartment <compartment_name> [where <conditions>]
You can either attach these policies to a compartment or at the tenancy level.
