Managing Access to Console AI

By default, Console AI can perform supported actions on behalf of users within their existing IAM permissions. Tenancy administrators can use OCI IAM deny policies to control how Console AI accesses OCI resources on behalf of users. Deny policies add administrative control without changing existing permissions for the Console, CLI, SDK, or API.

Important

Only members of the default Administrators group in the default identity domain can enable deny policies. Enabling the feature is permanent, and members of the default Administrators group in the default identity domain are exempt from deny policies.

For more information about enabling and using OCI IAM deny policies, see the Oracle Cloud Infrastructure documentation for deny policies.

Configuring IAM Policies for Console AI Access

Use IAM policies to control how Console AI acts on behalf of users.

Restricting OCI resource actions through Console AI for a group

To prevent members of the AIDev group from accessing OCI resources through Console AI, add the following policy:

Deny group AIDev to inspect all-resources in tenancy
                                where request.obo-service.name = 'oci-mcp-server'

Restricting OCI resource actions through Console AI in a compartment

To prevent members of the Contractors group from accessing OCI resources through Console AI in the Finance compartment, add the following policy:

Deny group Contractors to inspect all-resources in compartment Finance
                                where request.obo-service.name = 'oci-mcp-server'

Restricting OCI resource actions through Console AI for specific resource types

To prevent members of the Developers group from managing Networking resources through Console AI, add the following policy:

Deny group Developers to manage virtual-network-family in tenancy
                                where request.obo-service.name = 'oci-mcp-server'

Making OCI resources read-only through Console AI for all users

To allow users of any group to view OCI resources but prevent them from creating, updating, or deleting resources through Console AI, add the following policy:

Deny any-user to use all-resources in tenancy
                                where request.obo-service.name = 'oci-mcp-server'

Users can still perform Console AI operations that require only inspect or read permissions.

Preventing a group from deleting Autonomous Databases through Console AI

To prevent members of the DatabaseDevelopers group from deleting Autonomous Databases through Console AI, add the following policy:

Deny group DatabaseDevelopers to manage all-resources in tenancy
                                where ALL {
                                request.obo-service.name = 'oci-mcp-server',
                                request.permission = 'AUTONOMOUS_DATABASE_DELETE'
                                }

The request.permission condition limits the deny policy to Autonomous Database delete operations. Members of the group can continue to perform other Console AI operations according to their existing IAM permissions.

Note

Replace the group and compartment names with values from your environment. The request.obo-service.name = 'oci-mcp-server' condition ensures that the policy applies only to requests made through Console AI on behalf of users. This condition doesn't affect access from the Console, CLI, SDK, or API.

Tip

Denying inspect blocks inspect, read, use, and manage. Denying use blocks use and manage, but allows inspect and read.

Considerations for Chained Tasks

Console AI deny policies are evaluated against the service that makes the OCI API request. As a result, they apply only to requests made directly by the Console AI service principal.

Some Console AI tasks invoke additional OCI services to complete a workflow. For these chained tasks, the deny policy does not apply to downstream requests made by another OCI service.

For example, suppose you create a deny policy that prevents members of the Developers group from managing Networking resources through Console AI:

Deny group Developers to manage virtual-network-family in tenancy
                        where request.obo-service.name = 'oci-mcp-server'

If a user asks Console AI to create a Compute instance, Console AI starts the request, but the Compute service subsequently performs the required Networking operations. Because those downstream requests are made by the Compute service rather than the Console AI service principal, the Console AI deny policy does not apply, and the Networking operations are not blocked. If you need to restrict downstream operations, create additional deny policies that target the appropriate OCI service or resource.

Oracle Cloud Infrastructure Documentation