OCI IAM Policy
Allow service database to manage recovery-service-family in tenancy
Allow service database to manage tagnamespace in tenancy
Allow service rcs to manage recovery-service-family in tenancy
Allow service rcs to manage virtual-network-family in tenancy
Allow group admin to manage recovery-service-family in tenancy
Allow group 'Default'/'Administrators' to manage recovery-service-policy in compartment poc01
Allow group 'Default'/'Administrators' to manage recovery-service-subnet in compartment poc01
Allow group Administrators to manage objects in compartment poc01 where target.bucket.name = 'dbcs_recovery_bucket'
Allow group Administrators to read buckets in compartment poc01
https://blogs.oracle.com/infrastructure/post/autonomous-recovery-service-checklist
https://docs.oracle.com/en-us/iaas/recovery-service/doc/getting-started-recovery-service.html