11.7.2 Creating Groups in an IAM Domain
OCI Identity and Access Management (IAM) uses the term "group" instead of role. Create groups on your domain's User management tab.
In addition to the two default groups named All Domain Users and Domain_Administrators, as shown below, you create the three groups named after the APEX Roles: Employee, HR Rep, and App Admin.
Figure 11-29 Domain Groups in Identity Cloud Service
Parent topic: Integrating an External Identity Provider