Variable reference: https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm#General

Policy Reference: https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm

Database policy referece : https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/databasepolicyreference.htm

Exadata policy : https://docs.oracle.com/en/engineered-systems/exadata-cloud-service/ecscm/ecs-policy-details.html#GUID-C36ADBB4-232B-4A53-8208-452E0EDE35EA

Database Service: https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/databasepolicyreference.htm

Policy Syntax:

#nested compartment:

Allow group InstanceAdmins to manage instance-family in compartment Project-A:Project-A2

restrict permission:

Allow group sys_adm to manage instances in compartment where request.permission != 'INSTANCE_DELETE' and 'INSTANCE_MOVE'