If a non-administrative OCI user must create the FDI instance, what steps should you follow?

• A. Create a group, assign the identified non-administrative user to it, and grant the group with the necessary policies to manage the FDI resources within the planned compartment.
• B. Directly grant the user administrator rights.
• C. Share credentials.
• D. Use a service account.

Answer: (A)

To enable a non-administrative user to create and manage an FDI instance, use group-based access control in OCI. Create a dedicated group in the target compartment (where the FDI resources will live), add the non-admin user to that group, and assign policies that allow the group to manage FDI resources in that compartment. This follows the principle of least privilege and keeps access auditable by tying actions to group membership.

Why this works best: it grants only the necessary permissions to the user and confines those permissions to the specific compartment and FDI resources, without elevating the user to administrator level. Sharing credentials is insecure, and granting administrator rights unnecessarily broadens access. A service account is suitable for automated tasks, not for a human user performing manual setup.