How can we customize "Customer Self-Service" role to avoid giving application access to customer?

Content

Hi Team,

When a customer signs up from the DCS portal, a self-service user is created automatically in OEC application after registration requests is approved. That user can have access to login to OEC application.Ideally the end customer shouldn't have access to our cloud enterprise application.

We raised SR and the support confirmed that this is the actual behavior and they have suggested to change the Primary identity provider as IDCS to avoid this access to self-service user which is not standard.

Actually, at the beginning Primary identity provider is IDCS only. But unable to create self-service users. So that we have changed the IDP as OEC and we can create self-service users with fusion application access.