As a user, you can use

Oracle Cloud Object Storage

Connector after the organization administrator creates a minimal Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy for

Oracle Cloud Object Storage

Connector.

The Oracle Cloud Infrastructure policy defines the resources that users and groups can access in an OCI account and how to access them. You can use policies to manage certain types of resources in a specific compartment in certain ways.

You need to perform the following tasks:

Define users, groups, and one or more compartments to hold the cloud resources for your organization.
Create the policies.
Place users into the appropriate groups depending on the compartments and resources they need to work with.
Provide the users with the one-time passwords that they need to access the console and work with the compartments.

For more information about adding users, groups, and policies, see Oracle Cloud Infrastructure documentation.

You can create a policy in the following format:

Allow group <group_name> to <verb> <resource-type> in compartment <compartment_name>

For example,

Allow group ObjectReaders to read buckets in compartment ABC

Allow group ObjectWriters to manage objects in compartment ABC where any {request.permission='OBJECT_CREATE', request.permission='OBJECT_INSPECT'}

You need to add the following policies to configure the

Oracle Cloud Object Storage

connection, access objects, and run mappings:

Policies for
Oracle Cloud Object Storage
test connection
Allow group <group_name> to inspect object-family in compartment <compartment_name>
Allow group <group_name> to inspect buckets in compartment <compartment_name>
Policies for
Oracle Cloud Object Storage
sources
Allow group <group_name> to inspect buckets in compartment <compartment_name>
Allow group <group_name> to read object-family in compartment <compartment_name>
Policies for
Oracle Cloud Object Storage
targets
Allow group <group_name> to manage inspect buckets in compartment <compartment_name>
Allow group <group_name> to manage object-family in compartment <compartment_name>