If a policy exists but is missing one of these statements, update it to include
all these statements; if a policy does not exist, create one to include
all these statements in this format:
Allow any-user to inspect all-resources in tenancy where request.principal.id in ('<VBS_instance_OCID>')
Allow any-user to read visualbuilder-instance in tenancy where request.principal.id in ('<VBS_instance_OCID>')
Allow any-user to read integration-instance in tenancy where request.principal.id in ('<VBS_instance_OCID>')
If you have multiple VB Studio instances (say, because each TEST and DEV instance in your Oracle Cloud Application environment family got its own instance of VB Studio), enter all their OCIDs as a comma-separated list within single quotation marks ('), for example:
Allow any-user to inspect all-resources in tenancy where request.principal.id in ('ocid1.vbsinstance..abc', 'ocid1.vbsinstance..xyz')
Allow any-user to read visualbuilder-instance in tenancy where request.principal.id in ('ocid1.vbsinstance...abc', 'ocid1.vbsinstance...xyz')
Allow any-user to read integration-instance in tenancy where request.principal.id in ('ocid1.vbsinstance...abc', 'ocid1.vbsinstance...xyz')
Here's how you can retrieve your VB Studio instance's OCID:
- In the navigation menu, select Developer Services and Visual Builder Studio.
- Select the root compartment and access your VB Studio instance's details.
- Copy the instance's OCID shown under Instance Info.
Note
It's important to use the same format as your existing policy. This format depends on when and how your OCI account was configured. So if CI/CD authorization for your OCI account was enabled some time ago, you may see an older format with statements like (for example)
Allow service vbstudio
. In this case, update your policy to include the missing statements in the same format:
Allow service vbstudio to inspect all-resources in tenancy
Allow service vbstudio to read visualbuilder-instance in tenancy
Allow service vbstudio to read integration-instance in tenancy