Allow group saner-cnapp-scanner-group to manage instance-family in tenancy
Allow group saner-cnapp-scanner-group to manage users in tenancy
Allow group saner-cnapp-scanner-group to manage domains in tenancy
Allow group saner-cnapp-scanner-group to manage policies in tenancy
Allow group saner-cnapp-scanner-group to {BACKUP_POLICY_ASSIGNMENT_CREATE, BACKUP_POLICY_ASSIGNMENT_READ, BACKUP_POLICY_ASSIGNMENT_DELETE} in tenancy
Allow group saner-cnapp-scanner-group to use keys in tenancy
Allow group saner-cnapp-scanner-group to use vaults in tenancy
Allow group saner-cnapp-scanner-group to inspect vaults in tenancy
Allow group saner-cnapp-scanner-group to {VOLUME_INSPECT, VOLUME_READ, VOLUME_UPDATE, VOLUME_WRITE, VOLUME_CREATE} in tenancy
Allow group saner-cnapp-scanner-group to manage file-systems in tenancy where any {request.permission = 'FILE_SYSTEM_INSPECT', request.permission = 'FILE_SYSTEM_READ', request.permission = 'FILE_SYSTEM_UPDATE', request.permission = 'FILE_SYSTEM_CREATE', request.permission = 'FILE_SYSTEM_CLONE', request.permission = 'FILE_SYSTEM_REPLICATION_SOURCE', request.permission = 'FILE_SYSTEM_REPLICATION_TARGET', request.permission = 'FILE_SYSTEM_UPDATE_FILESYSTEM_SNAPSHOT_POLICY', request.permission = 'RESOURCE_LOCK_ADD', request.permission = 'RESOURCE_LOCK_REMOVE'}
Allow group saner-cnapp-scanner-group to use filesystem-snapshot-policies in tenancy
Allow group saner-cnapp-scanner-group to manage replications in tenancy where any {request.permission = 'REPLICATION_INSPECT', request.permission = 'REPLICATION_READ', request.permission = 'REPLICATION_CREATE', request.permission = 'REPLICATION_UPDATE', request.permission = 'REPLICATION_DELETE', request.permission = 'RESOURCE_LOCK_ADD', request.permission = 'RESOURCE_LOCK_REMOVE'}
Allow group saner-cnapp-scanner-group to manage replication-targets in tenancy where any {request.permission = 'REPLICATION_INSPECT', request.permission = 'REPLICATION_READ', request.permission = 'REPLICATION_DELETE'}
Allow group saner-cnapp-scanner-group to read fss-work-requests in tenancy
Allow group saner-cnapp-scanner-group to manage all-resources in tenancy where any {request.permission = 'RESOURCE_LOCK_ADD', request.permission = 'RESOURCE_LOCK_REMOVE'}
Allow group saner-cnapp-scanner-group to manage file-systems in tenancy where request.permission = 'FILE_SYSTEM_DELETE'
Allow group saner-cnapp-scanner-group to {EVENTRULE_CREATE} in tenancy
Allow group saner-cnapp-scanner-group to use ons-topics in tenancy
Allow group saner-cnapp-scanner-group to {BUCKET_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to {OBJECT_READ, OBJECT_CREATE, OBJECT_OVERWRITE, OBJECT_INSPECT, OBJECT_DELETE, OBJECT_RESTORE} in tenancy
Allow group saner-cnapp-scanner-group to {LOG_GROUP_CREATE} in tenancy
Allow service objectstorage-{oci_home_region} to manage object-family in tenancy where any {request.permission = 'BUCKET_INSPECT', request.permission = 'BUCKET_READ', request.permission = 'BUCKET_UPDATE', request.permission = 'OBJECT_READ', request.permission = 'OBJECT_INSPECT', request.permission = 'OBJECT_CREATE', request.permission = 'OBJECT_OVERWRITE', request.permission = 'OBJECT_RESTORE', request.permission = 'OBJECT_DELETE', request.permission = 'OBJECT_UPDATE_TIER'}
Allow group saner-cnapp-scanner-group to use private-ips in tenancy
Allow group saner-cnapp-scanner-group to manage public-ips in tenancy
Allow group saner-cnapp-scanner-group to {PRIVATE_IP_READ, PRIVATE_IP_UNASSIGN_PUBLIC_IP, PUBLIC_IP_READ, PUBLIC_IP_UPDATE, PRIVATE_IP_ASSIGN_PUBLIC_IP, PUBLIC_IP_ASSIGN_PRIVATE_IP, PUBLIC_IP_UNASSIGN_PRIVATE_IP} in tenancy
Allow group saner-cnapp-scanner-group to {SUBNET_READ, NETWORK_SECURITY_GROUP_CREATE, VCN_ATTACH, VNIC_UPDATE, NETWORK_SECURITY_GROUP_UPDATE_MEMBERS, VNIC_ASSOCIATE_NETWORK_SECURITY_GROUP} in tenancy
Allow group saner-cnapp-scanner-group to {BACKUP_POLICY_ASSIGNMENT_CREATE} in tenancy
Allow group saner-cnapp-scanner-group to {EXPORT_SET_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to {PAR_MANAGE} in tenancy
Allow group saner-cnapp-scanner-group to {INSTANCE_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to {REPLICATION_CREATE} in tenancy
Allow group saner-cnapp-scanner-group to {FILE_SYSTEM_REPLICATION_SOURCE, FILE_SYSTEM_REPLICATION_TARGET} in tenancy
Allow group saner-cnapp-scanner-group to use tag-namespaces in tenancy where target.tag-namespace.name = 'Oracle-Tags'
Allow group saner-cnapp-scanner-group to inspect alarms in tenancy
Allow group saner-cnapp-scanner-group to manage alarms in tenancy
Allow group saner-cnapp-scanner-group to read metrics in tenancy
Allow group saner-cnapp-scanner-group to manage log-groups in tenancy
Allow group saner-cnapp-scanner-group to {CAPTURE_FILTER_CREATE, VCN_ATTACH} in tenancy
Allow group saner-cnapp-scanner-group to {COMPARTMENT_CREATE} in tenancy
Allow group saner-cnapp-scanner-group to manage tag-defaults in tenancy
Allow group saner-cnapp-scanner-group to manage tag-namespaces in tenancy
Allow group saner-cnapp-scanner-group to {POLICY_READ, POLICY_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to {VCN_READ, SECURITY_LIST_READ, NETWORK_SECURITY_GROUP_READ, NETWORK_SECURITY_GROUP_LIST_SECURITY_RULES} in tenancy
Allow group saner-cnapp-scanner-group to {SECURITY_LIST_UPDATE, NETWORK_SECURITY_GROUP_UPDATE_SECURITY_RULES, NETWORK_SECURITY_GROUP_INSPECT} in tenancy
Allow group saner-cnapp-scanner-group to {SUBNET_READ, VNIC_READ, NETWORK_SECURITY_GROUP_CREATE, VCN_ATTACH, VNIC_UPDATE, NETWORK_SECURITY_GROUP_UPDATE_MEMBERS, VNIC_ASSOCIATE_NETWORK_SECURITY_GROUP} in tenancy
Allow group saner-cnapp-scanner-group to {PRIVATE_IP_READ, PUBLIC_IP_READ, PRIVATE_IP_UNASSIGN_PUBLIC_IP} in tenancy
Allow group saner-cnapp-scanner-group to {PUBLIC_IP_UPDATE, PRIVATE_IP_ASSIGN_PUBLIC_IP, PUBLIC_IP_ASSIGN_PRIVATE_IP, PUBLIC_IP_UNASSIGN_PRIVATE_IP} in tenancy
Allow group saner-cnapp-scanner-group to {AUTONOMOUS_DATABASE_INSPECT} in tenancy
Allow group saner-cnapp-scanner-group to {RETENTION_RULE_PREVENT_DELETION} in tenancy
Allow group saner-cnapp-scanner-group to {EVENTRULE_MODIFY} in tenancy
Allow group saner-cnapp-scanner-group to {AUTONOMOUS_DATABASE_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to manage subnets in tenancy
Allow group saner-cnapp-scanner-group to {KEY_INSPECT, KEY_READ, KEY_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to manage keys in tenancy
Allow group saner-cnapp-scanner-group to {KEY_UPDATE, KEY_DELETE} in tenancy
Allow group saner-cnapp-scanner-group to {BUCKET_INSPECT, BUCKET_READ, BUCKET_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to {FN_APP_UPDATE, FN_APP_CREATE, FN_APP_DELETE, FN_FUNCTION_UPDATE, FN_FUNCTION_CREATE, FN_FUNCTION_DELETE} in tenancy
Allow group saner-cnapp-scanner-group to {NETWORK_SECURITY_GROUP_READ, NETWORK_SECURITY_GROUP_UPDATE_MEMBERS} in tenancy
Allow group saner-cnapp-scanner-group to {VCN_READ, VCN_ATTACH, SUBNET_READ, SUBNET_CREATE, SUBNET_UPDATE, ROUTE_TABLE_READ, ROUTE_TABLE_UPDATE, ROUTE_TABLE_ATTACH, ROUTE_TABLE_DETACH, SECURITY_LIST_READ, SECURITY_LIST_ATTACH, SECURITY_LIST_DETACH, DHCP_READ, DHCP_ATTACH, DHCP_DETACH, NETWORK_SECURITY_GROUP_READ, NETWORK_SECURITY_GROUP_UPDATE_MEMBERS} in tenancy
Allow group saner-cnapp-scanner-group to {SERVICE_GATEWAY_CREATE, SERVICE_GATEWAY_READ, SERVICE_GATEWAY_ATTACH, VCN_READ, VCN_ATTACH, ROUTE_TABLE_READ, ROUTE_TABLE_UPDATE, ROUTE_TABLE_ATTACH} in tenancy
Allow group saner-cnapp-scanner-group to {NETWORK_SECURITY_GROUP_READ, NETWORK_SECURITY_GROUP_UPDATE_SECURITY_RULES} in tenancy
Allow group saner-cnapp-scanner-group to {LOG_GROUP_CREATE, SUBNET_READ, SUBNET_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to {LOG_GROUP_CREATE, FN_APP_LIST} in tenancy
Allow group saner-cnapp-scanner-group to {FN_APP_UPDATE, FN_FUNCTION_UPDATE} in tenancy
Allow service faas to {APM_DOMAIN_READ, APM_DOMAIN_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to {POLICY_CREATE, POLICY_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to manage fn-app in tenancy
Allow group saner-cnapp-scanner-group to use virtual-network-family in tenancy
Allow group saner-cnapp-scanner-group to {SUBNET_READ, SUBNET_UPDATE} in tenancy
Allow any-user to {ONS_TOPIC_PUBLISH} in tenancy where request.principal.type = 'fnapp'
Allow group saner-cnapp-scanner-group to {DYNAMIC_GROUP_CREATE} in tenancy
Allow group saner-cnapp-scanner-group to {POLICY_CREATE} in tenancy
Allow group saner-cnapp-scanner-group to {SERVICE_CONNECTOR_INSPECT, SERVICE_CONNECTOR_READ, SERVICE_CONNECTOR_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to {BUCKET_READ, BUCKET_UPDATE, RETENTION_RULE_MANAGE, RETENTION_RULE_LOCK} in tenancy
Allow group saner-cnapp-scanner-group to {USER_INSPECT, USER_UPDATE, GROUP_INSPECT, GROUP_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to {API_DEPLOYMENT_LIST, API_DEPLOYMENT_READ, API_DEPLOYMENT_UPDATE, API_GATEWAY_LIST, API_GATEWAY_READ, API_GATEWAY_ADD_DEPLOYMENT, API_WORK_REQUEST_READ} in tenancy
Allow group saner-cnapp-scanner-group to {BASTION_INSPECT, BASTION_READ, BASTION_UPDATE} in tenancy
Allow group saner-cnapp-scanner-group to manage vss-family in tenancy
Allow service vulnerability-scanning-service to read repos in tenancy
Allow service vulnerability-scanning-service to read compartments in tenancy
Allow group saner-cnapp-scanner-group to use waf-policy in tenancy
Allow group saner-cnapp-scanner-group to inspect waf-family in tenancy