4.2.5 Create a User Group

You can create groups to manage user access to applications and resources.

A group has no permissions until you do one of the following:

  • Write at least one policy that gives that group permission to either the tenancy or a compartment. When writing the policy, you can specify the group by using either the unique name or the group's OCID.
  • Assign the group to an application.
To create a User Group in IAM Console, perform the following steps:
  1. In the IAM Console, click the Profile icon and select Identity domain to add a User Group.
  2. In the Identity Domain left pane, click Groups and select Create group.

    Figure 4-3 Identity Domain


    In this window, click Groups in the left pane to create and new group.

  3. Enter the following details:
    • The name of the group. This field is mandatory.
    • Description for the group.
  4. To allow users to request access to this group, select User can request access.
  5. To add users to the group, select the check box for each user that you want to add to the group.
  6. Click Create.