A teammate can pull from a private OCIR repository used by the 311 mobile API but cannot push new tags. What best explains that at developer depth?
Select an answer to reveal the explanation.
Short Explanation
Belonging to Administrators works but is not required. Policies can let you pull without letting you push—teammates still need explicit grants on the compartment’s repositories.
Full Explanation
OCIR access is gated by IAM. Policies can separately allow create, push, pull, and manage on repositories in a compartment. A principal that can pull may lack push; creating a private repository does not automatically grant teammates push. Administrators is sufficient but not the only model, and Compute instance placement does not confer registry push rights.