can IAM Domain User capabilities disable by default?
Summary:
Hi,
In OCI IAM domain when user created, except Local password all other user capabilities enabling by default.
Can these all capabilities (except Local password) disabled by default when user created. Our internal security team has concern on these to enable even if some of users does not need those. So otherway, required user capabilities should enable when need.
Current behavior:
Local password ======== > It enabling based on federation and non-federation.
All other User capabilities ======= > Enable by default.
Expected behavior:
Local password ======== > It enabling based on federation and non-federation. Good on it.
All other User capabilities ======= > Disable by default.
Content (please ensure you mask any confidential information):