You're almost there! Please answer a few more questions for access to the Applications content. Complete registration
Interested in joining? Complete your registration by providing Areas of Interest here. Register

can IAM Domain User capabilities disable by default?

in Identity and Access Management 4 comments

Summary:

Hi,

In OCI IAM domain when user created, except Local password all other user capabilities enabling by default.

Can these all capabilities (except Local password) disabled by default when user created. Our internal security team has concern on these to enable even if some of users does not need those. So otherway, required user capabilities should enable when need.

Current behavior:

Local password ======== > It enabling based on federation and non-federation.

All other User capabilities ======= > Enable by default.

Expected behavior:

Local password ======== > It enabling based on federation and non-federation. Good on it.

All other User capabilities ======= > Disable by default.


Content (please ensure you mask any confidential information):

Tagged:

Howdy, Stranger!

Log In

To view full details, sign in.

Register

Don't have an account? Click here to get started!