E-CLOUD: Adding Policies in a Tenant Admin Policy Getting the Error - "Cannot update policy - Tenant Admin Policy. Only Service Principal can update this policy" (Doc ID 2918435.1)

Last updated on JANUARY 03, 2023

Applies to:

Symptoms

Trying to add below two more Policies in a Tenant Admin Policy and  that Tenant Admin Policy already have a policy - "ALLOW GROUP Administrators to manage all-resources IN TENANCY" and getting the error message.

ALLOW GROUP Administrators to manage App-catalog-listing in TENANCY
ALLOW GROUP Administrators to read all-resources in TENANCY

The issue can be reproduced at will with the following steps:

1) Navigate to Cloud Console > IAM > Policies > Tenant Admin Policy > Edit Policy  

2) Policy - "ALLOW GROUP Administrators to manage all-resources IN TENANCY" already exist

3) Try to add below two more policies.

   ALLOW GROUP Administrators to manage App-catalog-listing in TENANCY
   ALLOW GROUP Administrators to read all-resources in TENANCY

4) Click on save and getting the error.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.