Create a User Group

You can create groups to manage user access to applications and resources.

A group has no permissions until you do one of the following:

• Write at least one policy that gives that group permission to either the tenancy or a compartment. When writing the policy, you can specify the group by using either the unique name or the group's OCID.
• Assign the group to an application.

To create a User Group in IAM Console, perform the following steps:

1. In the IAM Console, click the Profile icon and select Identity domain to add a User Group.
2. In the Identity Domain left pane, click Groups and select Create group.

   Figure 4-3 Identity Domain

   
   

   

   
   
3. Enter the following details:
   • The name of the group. This field is mandatory.
   • The descriptive information about the group.

   Figure 4-4 Add Group Details

   
   

   

   
   
4. To allow users to request access to this group, select User can request access.
5. To add users to the group, select the check box for each user that you want to add to the group.
6. Click the Create.