Exam 1z0-1072-22 topic 1 question 10 discussion

I think it is D. (although there seems to be typo) Syntax:{{ group <group_name> | group id <group_ocid> | dynamic-group <dynamic-group_name> | dynamic-group id <dynamic-group_ocid>| any-group | any-user}} https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policysyntax.htm

C. Allow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin' Explanation: The "C. Allow group any-group" part of the policy grants permissions to the group named "any-group." "to manage all-resources in compartment Test" specifies that this group has management permissions in the "Test" compartment. "where request.principal.group.tag.EmployeeGroup.Role='Admin'" ensures that only members of groups tagged with 'Admin' in the "EmployeeGroup.Role" namespace will have this access. This policy allows any user who is a member of a group with the 'Admin' tag in the specified namespace to manage resources in the "Test" compartment.

The right answer is D with correct typos any-user otherwise none of the answers will be correct. Because all-group and any-group are not a reserve word on policies and allow dynamic-group without the name of the dynamyc group is not a correct synthax

* all-group is NOT a key word. B is wrong. * D looks correct if we fix typo of "any user" to "any-user". Link : https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policysyntax.htm

Correct

No, D is wrong, There isn't all groups subject without - in the middle.

Should be D, any-user