Explanation: The correct IAM policy to use to allow a group called DatabaseAdmins to create Exadata Database Services is to allow the group to manage the database-family resource type in the tenancy. The database-family resource type includes all the resources related to Oracle Database services, such as DB systems, databases, backups, patches, and Exadata infrastructure1. The syntax for the policy statement is as follows2:
Allow group DatabaseAdmins to manage database-family in tenancy
This policy statement grants the DatabaseAdmins group the permission to perform any action on any resource in the database-family resource type within the tenancy. This includes creating, updating, deleting, and viewing Exadata Database Services and other database resources12.
The other options are not correct IAM policies to use for this purpose. Option A is not a valid syntax, as the tenancy cannot be used as a target for a policy statement. Option B is not a valid syntax, as the databases cannot be used as a principal for a policy statement. Option D is not sufficient, as it only grants the permission to create database-family resources, but not to manage them. Option E is not comprehensive, as it only grants the permission to manage databases, but not other database-family resources, such as Exadata infrastructure12. References:
- Resource Types - Oracle Help Center
- Policy Syntax - Oracle Help Center