iam-identity-management

Troubleshoot OCI IAM policies, dynamic groups, and permission errors.

16|3|Updated Jan 26, 2026

Search Tags:#troubleshooting #access control #permissions #iam #policies #oci #dynamic groups

Ready to run

npx skills add https://github.com/acedergren/oci-agent-skills --skill iam-identity-management

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: iam-identity-management
Source: https://github.com/acedergren/oci-agent-skills/tree/main/skills/iam-identity-management
Command: npx skills add https://github.com/acedergren/oci-agent-skills --skill iam-identity-management

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you navigate the complexities of Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM), ensuring secure and efficient access control for your cloud resources.

Core Features & Use Cases

Policy Writing Assistance: Provides correct syntax and best practices for OCI IAM policies.
Permission Troubleshooting: Guides you through diagnosing and resolving "permission denied" errors.
Dynamic Group Configuration: Helps set up dynamic groups for instance principals and other dynamic resources.
Use Case: You're encountering "403 - NotAuthorized" errors when trying to launch a new compute instance. This Skill will help you identify the missing IAM policy verb or resource type needed.

Quick Start

Use the iam-identity-management skill to troubleshoot a '404 - NotAuthorizedOrNotFound' error.

Frequently Asked Questions about iam-identity-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I fix OCI IAM 403 NotAuthorized errors when launching compute instances?▼

To fix OCI IAM 403 NotAuthorized errors, you must identify the missing policy verb or resource type in your IAM configuration. This Skill helps diagnose permission failures by analyzing compartment inheritance and verb hierarchy to resolve the authorization block.

How do I write OCI IAM policies for dynamic groups and instance principals?▼

Writing OCI IAM policies for dynamic groups requires correct policy syntax to map instance principals to resource types. This Skill provides policy writing assistance and best practices for configuring dynamic groups to enable secure access control for dynamic cloud resources.

What is the verb hierarchy and compartment inheritance behavior in OCI IAM permissions?▼

The verb hierarchy in OCI IAM permissions dictates the level of access granted, while compartment inheritance allows policies to apply to child compartments. This Skill explains these mechanisms to ensure you apply the correct access control model across your OCI resources.

Why are my OCI IAM policies not working despite being attached to the correct compartment?▼

OCI IAM policies may fail due to incorrect syntax, verb hierarchy mismatches, or dynamic group misconfigurations. This Skill troubleshoots authorization failures by validating your policy syntax and evaluating instance principal setups against the required resource type permissions.

Can I integrate OCI IAM policies with IDCS for access control?▼

Integrating OCI IAM with IDCS involves configuring identity provider mappings and federation policies. This Skill provides guidance on setting up IDCS integration alongside dynamic groups and instance principals to manage secure authentication across your cloud environment.