Valid 1Z0-1067-20 Dumps shared by ExamDiscuss.com for Helping Passing 1Z0-1067-20 Exam! ExamDiscuss.com now offer the newest 1Z0-1067-20 exam dumps, the ExamDiscuss.com 1Z0-1067-20 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 1Z0-1067-20 dumps with Test Engine here:
You are tasked with creating a group called volumeBackcupAdmins to manage only block volume backups. Which of the following set of policy/policies would you need to write to meet this requirement? A) B) C) D)
Correct Answer: A
Let volume backup admins manage only backups Type of access: Ability to do all things with volume backups, but not create and manage volumes themselves. This makes sense if you want to have a single set of volume backup admins manage all the volume backups in all the compartments. The first statement gives the required access to the volume that is being backed up; the second statement enables creation of the backup (and the ability to delete backups). The third statement enables the creation and management of user defined backup policies; the fourth statement enables assignment and removal of assignment of backup policies. Where to create the policy: In the tenancy, so that the access is easily granted to all compartments by way of policy inheritance. To reduce the scope of access to just the volumes and backups in a particular compartment, specify that compartment instead of the tenancy. Allow group VolumeBackupAdmins to use volumes in tenancy Allow group VolumeBackupAdmins to manage volume-backups in tenancy If the group will be using the Console, the following policy gives a better user experience: Allow group VolumeBackupAdmins to use volumes in tenancy Allow group VolumeBackupAdmins to manage volume-backups in tenancy Allow group VolumeBackupAdmins to inspect volume-attachments in tenancy Allow group VolumeBackupAdmins to inspect instances in tenancy