OCI User I AM Settings for Extension

[jshumate]

I am working to get our OCI Extension working but receive an error that I believe is tied to the I AM rules for the OCI user.

I am mostly going with tenant level permissions rather than compartment level. Can someone let me know if this is the right approach?

[sujit_k_singh]

Hello @jshumate 

Tenant-level permissions will work but are broad. Best practice is compartment-level policies granting read access to resources and use access to metrics. Confirm the OCI user has an API key configured and the extension activation schema includes the correct tenancy OCID and region.