OCI IAM: EPM (Gen 2) Cloud Environments Can Only Exist in One Domain (Default)
Summary:
Finding a solution to the issue of having only one domain, i.e. the Default domain, for all EPM Cloud (Gen2) environments
Content (required):
For OCI IAM, EPM Cloud (Gen2) environments can only exist in one domain, i.e., the Default domain. (Tried raising an SR and Oracle Support confirmed that this is not something even they can do at this time). This implies:
- We cannot segregate domain administration and EPM Security management to different groups for different environments (i.e., DEV, TEST, PROD). For our organization, this is a big risk from roles and responsibility and segregation of duty perspective.
Tagged:
1