Oracle Cloud Onboarding

  • Create a User in Domain
  • Create a Group and Assign to User
  • Create the policy with below Policy

Oracle CSPM Policy

Allow group to read all-resources in tenancy Allow group to inspect all-resources in tenancy

Allow group ‘Default’/’’ to inspect all-resources in tenancy Allow group ‘’/’’ to inspect all-resources in tenancy

Oracle CIEM Policy

Allow group ‘Default’/’ciem-accuknox’ to read all-resources in tenancy Allow group ‘Default’/’ciem-accuknox’ to inspect all-resources in tenancy

Allow group ‘Default’/’ciem-accuknox’ to read audit-events in tenancy Allow group ‘Default’/’ciem-accuknox’ to read users in tenancy

Allow group ‘Default’/’ciem-accuknox’ to inspect groups in tenancy Allow group ‘Default’/’ciem-accuknox’ to inspect dynamic-groups in tenancy

Allow group ‘Default’/’ciem-accuknox’ to inspect policies in tenancy Allow group ‘Default’/’ciem-accuknox’ to inspect compartments in tenancy


Back to top

© 2026 Ayush Aggarwal. Notes are living documents — they change as I learn, update, and reorganize them.