Moving Compute Resources to a Different Compartment
You can move Compute resources such as instances, instance pools, and custom images from one compartment to another.
When you move a Compute resource to a new compartment, associated resources such as boot volumes and VNICs are not moved.
After you move the resource to the new compartment, inherent policies apply immediately and affect access to the resource through the Console. For more information, see Managing Compartments.
Required IAM Policy
To use Oracle Cloud Infrastructure, an administrator must be a member of a group granted security access in a policy by a tenancy administrator. This access is required whether you're using the Console or the REST API with an SDK, CLI, or other tool. If you get a message that you don't have permission or are unauthorized, verify with the tenancy administrator what type of access you have and which compartment your access works in.
For administrators: The following policies allow users to move Compute resources to a different compartment:
Allow group ComputeCompartmentMovers to manage instance-family in tenancy
Allow group ComputeCompartmentMovers to manage compute-management-family in tenancy
Allow group ComputeCompartmentMovers to manage auto-scaling-configurations in tenancy
Allow group ComputeCompartmentMovers to manage dedicated-vm-hosts in tenancyIf you're new to policies, see Managing Identity Domains and Common Policies.
Security Zones
Security Zones ensure that your cloud resources comply with Oracle security principles. If any operation on a resource in a security zone compartment violates a policy for that security zone, then the operation is denied.
The following security zone policies affect your ability to move Compute resources from one compartment to another:
- You can't move a compute instance from a security zone to a compartment that is not in the same security zone.
- You can't move a compute instance to a security zone from a compartment that is not in the same security zone.
Using the Console
- Open the navigation menu and select Compute. Under Compute, select Instances.
- In the List Scope section, select a compartment.
- Click the instance that you're interested in.
- Click More Actions, and then click Move Resource.
- Choose the destination compartment from the list.
-
Click Move Resource.
To track the progress of the operation and troubleshoot errors that occur during instance creation, use the associated work request. - If there are alarms monitoring the instance, update the alarms to reference the new compartment. See Updating an Alarm After Moving a Resource for more information.
- Optionally, move the resources that are attached to the instance to the new compartment.
Most of the properties for an existing instance configuration, including the compartment, cannot be modified after you create the instance configuration. Although you can move an instance configuration to a different compartment, you will not be able to use the instance configuration to manage instance pools in the new compartment. If you want to update an instance configuration to point to a different compartment, you should instead create a new instance configuration in the target compartment. For steps, see Creating an Instance Configuration.
- Open the navigation menu and click Compute. Under Compute, click Instance Configurations.
- In the List Scope section, select a compartment.
- Click the instance configuration that you're interested in.
- Click Move resource.
- Choose the destination compartment from the list.
- Click Move Resource.
- Open the navigation menu and select Compute. Under Compute, select Instance Pools.
- In the List Scope section, select a compartment.
- Click the instance pool that you're interested in.
- Click More Actions, and then click Move resource.
- Choose the destination compartment from the list.
- Click Move Resource.
-
Optionally, update the instance pool with an instance configuration that points to the new compartment. Do the following:
- Create a new instance configuration in the new compartment. You can do this using the Console or the API. For steps, see Creating an Instance Configuration.
- Update the instance pool with the new instance configuration. You can do this using the API. For steps, see Updating Instance Pools.
- Optionally, move the instances and other resources that are associated with the instance pool to the new compartment.
- Open the navigation menu and select Compute. Under Compute, select Autoscaling Configurations.
- In the List Scope section, select a compartment.
- Click the autoscaling configuration that you're interested in.
- Click Move resource.
- Choose the destination compartment from the list.
- Click Move Resource.
- Open the navigation menu and select Compute. Under Compute, select Custom Images.
- In the List Scope section, select a compartment.
- Click the custom image that you're interested in.
- Click Move Resource.
- Choose the destination compartment from the list.
- Click Move Resource.
-
Open the navigation menu and click Compute. Under Compute, click Cluster Networks.
- In the List Scope section, select a compartment.
- Click the cluster network that you're interested in.
- Click Move Resource.
- Choose the destination compartment from the list.
- Click Move Resource.
- Optionally, move the instances and other resources that are associated with the cluster network to the new compartment.
- Open the navigation menu and select Compute. Under Compute, select Dedicated Virtual Machine Hosts.
- In the List Scope section, select a compartment.
- Click the dedicated virtual machine host that you're interested in.
- Click Move Resource.
- Choose the destination compartment from the list.
- Click Move Resource.
- Optionally, move the instances that are placed on the dedicated virtual machine host to the new compartment.
Using the API
For information about using the API and signing requests, see REST API documentation and Security Credentials. For information about SDKs, see SDKs and the CLI.
Use these API operations to move Compute resources to different compartments: