Object Storage Permissions
Grant access to Object Storage model artifacts and training datasets used with imported and fine-tuned custom models in OCI Generative AI.
By default, only users in the Administrators group have access to all OCI resources, including Generative AI and Object Storage resources. If you're a member of another group, ask an administrator to grant the least privileges required for your responsibilities.
Access to Imported Model Artifacts and Fine-Tuning Datasets
Generative AI uses Object Storage buckets for imported model artifacts from Object Storage and for datasets used to fine-tune custom models. Users need permission to access the compartment that contains the bucket. The required access depends on the workflow.
- To import a model from an Object Storage bucket, or to allow users to add and manage model artifacts or fine-tuning datasets in a bucket:
allow group <your-group-name> to manage object-family in compartment <compartment-with-bucket> - To allow users to list and select an existing fine-tuning dataset when creating a custom model:
allow group <your-group-name> to use object-family in compartment <compartment-with-bucket>
If the bucket and the imported or fine-tuned custom model are in different compartments, grant the Object Storage permission in the compartment that contains the bucket.
For workflow-specific requirements, see Object Storage prerequisites for imported models and Fine-Tuning the Base Models.
Ask your administrator to review the examples in Securing Object Storage and add policies that apply to your organization, including policies that help prevent accidental deletion of buckets containing model artifacts or training data.