# Policy Variables Reference

Variable reference: [https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm#General](https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm#General)

Policy Reference: [https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm](https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm)

Database policy referece : [https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/databasepolicyreference.htm](https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/databasepolicyreference.htm)

Exadata policy : [https://docs.oracle.com/en/engineered-systems/exadata-cloud-service/ecscm/ecs-policy-details.html#GUID-C36ADBB4-232B-4A53-8208-452E0EDE35EA](https://docs.oracle.com/en/engineered-systems/exadata-cloud-service/ecscm/ecs-policy-details.html#GUID-C36ADBB4-232B-4A53-8208-452E0EDE35EA)

Database Service: [https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/databasepolicyreference.htm](https://docs.oracle.com/en-us/iaas/Content/Identity/Reference/databasepolicyreference.htm)

Policy Syntax:

#nested compartment:

Allow group InstanceAdmins to manage instance-family in compartment Project-A:Project-A2

restrict permission:

Allow group sys\_adm to manage instances in compartment where request.permission != 'INSTANCE\_DELETE' and 'INSTANCE\_MOVE'