Policy Variables Reference
Variable reference: https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm#General
Policy Reference: https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm
Database policy referece : https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/databasepolicyreference.htm
Exadata policy : https://docs.oracle.com/en/engineered-systems/exadata-cloud-service/ecscm/ecs-policy-details.html#GUID-C36ADBB4-232B-4A53-8208-452E0EDE35EA
Database Service: https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/databasepolicyreference.htm
Policy Syntax:
#nested compartment:
Allow group InstanceAdmins to manage instance-family in compartment Project-A:Project-A2
restrict permission:
Allow group sys_adm to manage instances in compartment where request.permission != 'INSTANCE_DELETE' and 'INSTANCE_MOVE'