You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: docs/src/gs/iam/iam-oke.md
+4-2
Original file line number
Diff line number
Diff line change
@@ -4,10 +4,10 @@ These steps are applicable if you intend to run your management cluster using [O
4
4
5
5
1.[Create a user in OCI](https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/managingusers.htm) e.g. `iaas_oke_usr`
6
6
1.[Create a group in OCI](https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/managinggroups.htm) e.g. `iaas_oke_grp` and add the user `iaas_oke_usr` to this group
7
-
1. Create a policy in OCI and add the following policies:
7
+
1. Create a policy in OCI and add the following policies(Please read [OKE Policy Configuration Doc][oke-policy] for more fine grained policies):
8
8
-`Allow group iaas_oke_grp to manage dynamic groups`
9
9
-`Allow group iaas_oke_grp to manage virtual-network-family in <compartment>`
10
-
-`Allow group iaas_oke_grp to manage clusterfamily in <compartment>`
10
+
-`Allow group iaas_oke_grp to manage cluster-family in <compartment>`
11
11
-`Allow group iaas_oke_grp to manage instance-family in <compartment>`
12
12
13
13
where `<compartment>` is the name of the OCI compartment of the management cluster. Refer to the [OCI documentation](https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/managingcompartments.htm) if you have not created a compartment yet.
@@ -16,5 +16,7 @@ where `<compartment>` is the name of the OCI compartment of the management clust
16
16
You should not create your management cluster in the root compartment.
0 commit comments