@@ -14,7 +14,7 @@ This section describe the policies you might need for running Data Science Jobs.
14
14
15
15
In the following example, ``group <your_data_science_users> `` is the subject of the policy
16
16
when using OCI API keys for authentication. For resource principal authentication,
17
- the subject should be a ``dynamic-group ``, for example, ``dynamic-group <your_resources > ``
17
+ the subject should be a ``dynamic-group ``, for example, ``dynamic-group <your_dynamic_group > ``
18
18
19
19
Here is an example defining a dynamic group for all job runs in a compartment:
20
20
@@ -37,19 +37,19 @@ The following policies are for job runs to access other OCI resources:
37
37
38
38
.. code-block ::
39
39
40
- Allow dynamic-group <your_resources > to read repos in compartment <your_compartment_name>
41
- Allow dynamic-group <your_resources > to use data-science-family in compartment <your_compartment_name>
42
- Allow dynamic-group <your_resources > to use virtual-network-family in compartment <your_compartment_name>
43
- Allow dynamic-group <your_resources > to use log-groups in compartment <your_compartment_name>
44
- Allow dynamic-group <your_resources > to use logging-family in compartment <your_compartment_name>
45
- Allow dynamic-group <your_resources > to manage objects in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
46
- Allow dynamic-group <your_resources > to use buckets in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
40
+ Allow dynamic-group <your_dynamic_group > to read repos in compartment <your_compartment_name>
41
+ Allow dynamic-group <your_dynamic_group > to use data-science-family in compartment <your_compartment_name>
42
+ Allow dynamic-group <your_dynamic_group > to use virtual-network-family in compartment <your_compartment_name>
43
+ Allow dynamic-group <your_dynamic_group > to use log-groups in compartment <your_compartment_name>
44
+ Allow dynamic-group <your_dynamic_group > to use logging-family in compartment <your_compartment_name>
45
+ Allow dynamic-group <your_dynamic_group > to manage objects in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
46
+ Allow dynamic-group <your_dynamic_group > to use buckets in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
47
47
48
48
The following policy is needed for running a container job:
49
49
50
50
.. code-block ::
51
51
52
- Allow dynamic-group <your_resources > to read repos in compartment <your_compartment_name>
52
+ Allow dynamic-group <your_dynamic_group > to read repos in compartment <your_compartment_name>
53
53
54
54
See also:
55
55
0 commit comments