From abe6b58442de4a61a24357d35fdfd4471910222e Mon Sep 17 00:00:00 2001
From: bhlohumi <bhanu.prakash.lohumi@oracle.com>
Date: Thu, 30 Oct 2025 13:20:48 +0530
Subject: [PATCH] updated RREADME

---
 iam-credential-expiry-notification/README.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/iam-credential-expiry-notification/README.md b/iam-credential-expiry-notification/README.md
index d1693b6..e6b1761 100644
--- a/iam-credential-expiry-notification/README.md
+++ b/iam-credential-expiry-notification/README.md
@@ -26,7 +26,9 @@ This is a automation solution to receive early email notification for expiry IAM
 
   Allow dynamic-group <dynamic-group-name> to read secret-family in compartment <function-compartment> where target.secret.id='<ocid of smtp password vaultsecret>'
   Allow dynamic-group <dynamic-group-name> to inspect compartments in tenancy
-  ```
+  Allow dynamic-group <dynamic-group-name> to read domain in tenancy
+  Allow dynamic-group <dynamic-group-name> to read users in tenancy
+ ```
 
 ### Configure approved sender in email delivery
 An approved sender must be set up for all “From:” addresses sending mail through OCI.