Requesting to Disallow Service Administrators to Assign Predefined Roles in OCI (Gen 2) Environments

By default, the Service Administrator of an Oracle Enterprise Performance Management Cloud environment can assign predefined roles to the users of that environment.

If you want to allow only Identity Domain Administrators to be able to assign predefined roles in the OCI (Gen 2) environments belonging to a cloud account, you can request Oracle to prevent Service Administrators from assigning and unassigning predefined roles. After Oracle implements this request, only Identity Domain Administrators will be able to assign and unassign predefined roles to users on any environment in that cloud account.

To request Oracle to prevent Service Administrators from assigning predefined roles: