How to stop\prevent users from able to sign in to OCI Console?

Summary

Prevent\Revoke ability to sign-in to OCI Console

Content

Working on building a simple VBCS application on OCI and getting used to the new system.  Need some help with very basic concern. Every OCI tenancy comes with default IDCS where we can create new user accounts etc and we are using the same. 

Now, when you create a new user account for a regular user so he\she can access a specific App - it also gives them the ability to sign-in into the OCI Console. We really want only admins to be able to sign in to the OCI console and not general users. (They can not really do anything after sign in but its a security concern really).