Allow group 'Default'/'All Tenant Users' to use cloud-shell in compartment <Child Compartment Name>
Allow group 'Default'/'All Tenant Users' to manage repos in compartment <Child Compartment Name>
Allow group 'Default'/'All Tenant Users' to read objectstorage-namespaces in compartment <Child Compartment Name>
Allow group 'Default'/'All Tenant Users' to manage logging-family in compartment <Child Compartment Name>
Allow group 'Default'/'All Tenant Users' to read metrics in compartment <Child Compartment Name>
Allow group 'Default'/'All Tenant Users' to manage functions-family in compartment <Child Compartment Name>
Allow group 'Default'/'All Tenant Users' to use virtual-network-family in compartment <Child Compartment Name>
Allow group 'Default'/'All Tenant Users' to use apm-domains in compartment <Child Compartment Name>
Allow group 'Default'/'All Tenant Users' to read vaults in compartment <Child Compartment Name>
Allow group 'Default'/'All Tenant Users' to use keys in compartment <Child Compartment Name>
Allow service faas to use apm-domains in compartment <Child Compartment Name>
Allow service faas to read repos in compartment <Child Compartment Name> where request.operation='ListContainerImageSignatures'
Allow service faas to {KEY_READ} in compartment <Child Compartment Name> where request.operation='GetKeyVersion'
Allow service faas to {KEY_VERIFY} in compartment <Child Compartment Name> where request.operation='Verify'
Allow dynamic-group FAW_DG to manage object-family in compartment <Child Compartment Name>