@@ -14,7 +14,7 @@ This section describe the policies you might need for running Data Science Jobs.
1414
1515 In the following example, ``group <your_data_science_users> `` is the subject of the policy
1616 when using OCI API keys for authentication. For resource principal authentication,
17- the subject should be a ``dynamic-group ``, for example, ``dynamic-group <your_resources > ``
17+ the subject should be a ``dynamic-group ``, for example, ``dynamic-group <your_dynamic_group > ``
1818
1919Here is an example defining a dynamic group for all job runs in a compartment:
2020
@@ -37,19 +37,19 @@ The following policies are for job runs to access other OCI resources:
3737
3838.. code-block ::
3939
40- Allow dynamic-group <your_resources > to read repos in compartment <your_compartment_name>
41- Allow dynamic-group <your_resources > to use data-science-family in compartment <your_compartment_name>
42- Allow dynamic-group <your_resources > to use virtual-network-family in compartment <your_compartment_name>
43- Allow dynamic-group <your_resources > to use log-groups in compartment <your_compartment_name>
44- Allow dynamic-group <your_resources > to use logging-family in compartment <your_compartment_name>
45- Allow dynamic-group <your_resources > to manage objects in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
46- Allow dynamic-group <your_resources > to use buckets in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
40+ Allow dynamic-group <your_dynamic_group > to read repos in compartment <your_compartment_name>
41+ Allow dynamic-group <your_dynamic_group > to use data-science-family in compartment <your_compartment_name>
42+ Allow dynamic-group <your_dynamic_group > to use virtual-network-family in compartment <your_compartment_name>
43+ Allow dynamic-group <your_dynamic_group > to use log-groups in compartment <your_compartment_name>
44+ Allow dynamic-group <your_dynamic_group > to use logging-family in compartment <your_compartment_name>
45+ Allow dynamic-group <your_dynamic_group > to manage objects in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
46+ Allow dynamic-group <your_dynamic_group > to use buckets in compartment <your_compartment_name> where all {target.bucket.name=<your_bucket_name>}
4747
4848 The following policy is needed for running a container job:
4949
5050.. code-block ::
5151
52- Allow dynamic-group <your_resources > to read repos in compartment <your_compartment_name>
52+ Allow dynamic-group <your_dynamic_group > to read repos in compartment <your_compartment_name>
5353
5454 See also:
5555
0 commit comments