Exam 1z0-1072-20 topic 1 question 58 discussion

Answer is C, as a user should be granted use privilege to access tag

To allow a group to read the tag definitions contained in tag namespaces requires read access: Allow group GroupA to read tag-namespaces in tenancy

answer C seems correct, but could clarify acces to « USE tag_namespace » example from doc: https://docs.oracle.com/en-us/iaas/Content/Tagging/Tasks/managingtagsandtagnamespaces.htm « Allow group GroupA to use tag-namespaces in tenancy where target.tag-namespace.name='Operations' »

I vote for C. while both A & C seem correct as when you try to tag a resource you have to choose between free-form tagging and defined tags, but at the end the 2nd after creating tags should be granting access so i vote for C

I tend to agree with the rest. I think it's C. The following was take from Oracle docs : "Required Permissions for Working with Defined Tags To apply, update, or remove defined tags for a resource, a user must be granted permissions on the resource and permissions to use the tag namespace. Users must be granted use access on the tag namespace to apply, update, or remove a defined tag for a resource. Some example policies for tag namespaces: To allow a group to simply view the tag namespaces in the tenancy (or in a compartment) requires inspect access: Allow group GroupA to inspect tag-namespaces in tenancy" Source : https://docs.oracle.com/en-us/iaas/Content/Tagging/Tasks/usingpredefinedvalues.htm

C seems to be the right answer https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/usingpredefinedvalues.htm