@@ -15,7 +15,7 @@ This section describe the policies you might need for running Data Science Jobs.
1515
1616 In the following example, ``group <your_data_science_users> `` is the subject of the policy
1717 when using OCI API keys for authentication. For resource principal authentication,
18- the subject should be a ``dynamic-group ``, for example, ``dynamic-group <your_resources > ``
18+ the subject should be a ``dynamic-group ``, for example, ``dynamic-group <your_dynamic_group > ``
1919
2020Here is an example defining a dynamic group for all job runs in a compartment:
2121
@@ -38,19 +38,19 @@ The following policies are for job runs to access other OCI resources:
3838
3939.. code-block ::
4040
41- Allow dynamic-group <your_resources > to read repos in compartment <your_compartment_name>
42- Allow dynamic-group <your_resources > to use data-science-family in compartment <your_compartment_name>
43- Allow dynamic-group <your_resources > to use virtual-network-family in compartment <your_compartment_name>
44- Allow dynamic-group <your_resources > to use log-groups in compartment <your_compartment_name>
45- Allow dynamic-group <your_resources > to use logging-family in compartment <your_compartment_name>
46- Allow dynamic-group <your_resources > to manage objects in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
47- Allow dynamic-group <your_resources > to use buckets in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
41+ Allow dynamic-group <your_dynamic_group > to read repos in compartment <your_compartment_name>
42+ Allow dynamic-group <your_dynamic_group > to use data-science-family in compartment <your_compartment_name>
43+ Allow dynamic-group <your_dynamic_group > to use virtual-network-family in compartment <your_compartment_name>
44+ Allow dynamic-group <your_dynamic_group > to use log-groups in compartment <your_compartment_name>
45+ Allow dynamic-group <your_dynamic_group > to use logging-family in compartment <your_compartment_name>
46+ Allow dynamic-group <your_dynamic_group > to manage objects in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
47+ Allow dynamic-group <your_dynamic_group > to use buckets in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
4848
4949 The following policy is needed for running a container job:
5050
5151.. code-block ::
5252
53- Allow dynamic-group <your_resources > to read repos in compartment <your_compartment_name>
53+ Allow dynamic-group <your_dynamic_group > to read repos in compartment <your_compartment_name>
5454
5555 See also:
5656
0 commit comments