Lab - 01 2 Ingles

Unauthorized reproduction or distribution prohibited. Copyright© 2023, Oracle University and/or its affiliates.
(je
fe
rs
on
m
at
to jefe
ss rs
all on
es m
@ at
gm tos
ail de
us .co s
e m all
th ) h es
is a je
Gu s a fe
ide n rso
. on- n s
Lab 1-2 Practices
tra al
ns les
fe
ra
bl e
Identity and Access
lic
en
se
to
Identity Domains Enabled
Management (IAM): Create
IAM Components - Without
Get Started
Overview
Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) lets you control who
has access to your cloud resources.
to
In this lab, we will help you create a compartment, group, user, and policy. We will also provide
se
the steps to create a dynamic group.
en
Note: Below instructions are for accounts without Identity Domains enabled.
lic
bl e
In this lab, you’ll:
ns les
ra
Create a compartment
tra al
fe
a.
. on- n s
b. Create a user
ide n rso
c. Gu s a fe
Create a group, and add a user to the group
is a je
Create a policy
th ) h es
d.
e m all
e. Create a dynamic group

us .co s
ail de
gm tos
@ at
es m
all on
ss rs
to jefe
at
m
on
rs
fe
(je
Copyright © 2023, Oracle and/or its affiliates.
14 Identity and Access Management: Create IAM Components - Without Identity Domains Enabled
(je
fe
rs
on
m
at
to jefe
ss rs
all on
es m
@ at
gm tos
ail de
us .co s
e m all
th ) h es
is a je
Gu s a fe
ide n rso

. on- n s
tra al
ns les
Identity and Access Management: Create IAM Components - Without Identity Domains Enabled
fe
ra
bl e
lic
en
se
to
15
Create a Compartment (Without Identity Domains
Enabled)
A compartment is a collection of related resources. Compartments are fundamental
components of OCI and are used for organizing and isolating your cloud resources.
In this practice, you will learn how to create a compartment.
to
Tasks
se
en
Sign in to the OCI Console.
lic
1.
bl e
2. Open the Main Menu and select Identity & Security. Under Identity,
ns les
ra
click Compartments. A list of the compartments to which you have access appears.
tra al
fe
. on- n s
3. Under Child Compartment, click Create Compartment.
ide n rso
4. Do the following:
a.
Gu s a fe
Name: Enter a unique name for the compartment. The name must be unique across
is a je
all the compartments in your tenancy.
th ) h es
e m all
b. Description: Enter a compartment-related description.

us .co s
ail de
c. Parent Compartment: The compartment you are in appears by default. To choose

gm tos
another compartment in which to create this compartment, select from the drop-
down list.
@ at
es m
5. Click Create Compartment. The Child Compartment now appears in the list of
all on
compartments.
ss rs
to jefe
at
m
on
rs
fe
(je
Create a User (Without Identity Domains Enabled)
A user is an individual employee or system that needs to manage or use your

company’s OCI resources.
In this practice, you’ll learn how to create a user.
Tasks
to
se
1. Open the Main Menu and select Identity & Security. Under Identity, click Users. A list of
en
users in your tenancy appears.
lic
bl e
2. Click Create User.
ns les
ra
Enter the following:
tra al
3.
fe
. on- n s
a. Name: Enter a unique name or email address for the user.
ide n rso
b. Description: This value could be the user’s full name, a nickname, or any other
Gu s a fe
is a je
descriptive information.
th ) h es
c. Email: Enter an email address for the user. This email address is used for
e m all
password recovery.
us .co s
ail de
4. Click Create. The user now appears in the list of users.

gm tos
@ at
es m
all on
ss rs
to jefe
at
m
on
rs
fe
(je
Identity and Access Management: Create IAM Components - Without Identity Domains Enabled 17
Create a Group, and Add a User to the Group (Without
Identity Domains Enabled)

A group is a collection of users who need the same type of access to a particular compartment
or set of resources.
In this practice, you’ll learn how to create a group, and add a user to a group.
to
Tasks
se
en
Open the Main Menu and select Identity & Security. Under Identity, click Groups. A list
lic
1.
of the groups in your tenancy appears.
bl e
ns les
ra
2. Click on the Administrators group.
tra al
fe
. on- n s
3. Click Add User to Group.
ide n rso
4. Select the user created earlier from the Users drop-down list, and then click Add. The user
now appears in the group.
Gu s a fe
is a je
th ) h es
5. Use the breadcrumb trail to go back to the Groups page and click Create Group.
e m all
us .co s
6. Enter the following:

ail de
a. Name: Enter a unique name for the group.

gm tos
@ at
b. Description: Enter a group-related description.

es m
all on
7. Click Create. The group now appears in the list of groups.

ss rs
to jefe
at
m
on
rs
fe
(je
Create a Policy (Without Identity Domains Enabled)
A policy is a document that specifies who can access which resources, and how.
In this practice, you’ll learn how to create a policy.
Tasks
to
1. Open the Main Menu and select Identity & Security. Under Identity, click Policies.
se
en
2. Choose a compartment.
lic
A list of the policies in the compartment you’re currently viewing appears.
bl e
3.
ns les
ra
4. Click Create Policy.
tra al
fe
. on- n s
5. Enter the following:
ide n rso
a. Name: Enter a unique name for the policy.
Gu s a fe
is a je
b. Description: Enter a policy-related description.
th ) h es
e m all
c. Compartment: If you want to attach the policy to a compartment other than the one
us .co s
you’re viewing, select it from the drop-down list. Remember, where the policy is
ail de
attached controls who can later modify or delete it.

gm tos
6. In the Policy Builder section, click Show manual editor and enter the policy statement.
@ at
es m
Note: A sample statement would look like the following:

all on
allow group <group_name> to manage virtual-network-family in

ss rs
compartment <compartment_name>
to jefe
7. Click Create. The policy now appears in the list of policies.

at
m
on
rs
fe
(je
Identity and Access Management: Create IAM Components - Without Identity Domains Enabled 19
Create a Dynamic Group (Without Identity Domains
Enabled)
A dynamic group is a special type of group that contains resources, such as compute
instances, which match rules that you define. This means that group membership can change
dynamically as matching resources are created or deleted. These instances serve as “principal”
actors and can make API calls to services according to policies that you write for the dynamic
to
group.
se
en
In this practice, you’ll learn how to create a dynamic group.
lic
Tasks
bl e
ns les
ra
1. Open the Main Menu and select Identity & Security. Under Identity, click Dynamic
tra al
fe
Groups.
. on- n s
ide n rso
2. Click Create Dynamic Group.
Gu s a fe
Enter the following:
is a je
3.
th ) h es
a. Name: Enter a unique name for the group. The name must be unique across all groups
e m all
in your tenancy, including dynamic groups and user groups.

us .co s
b. Description: Enter a friendly description.

ail de
gm tos
4. Enter the Matching Rules. Resources that meet the rule criteria are members of the
dynamic group.
@ at
es m
a. Rule 1: Enter a rule by following the guidelines in https://docs.oracle.com/en-

all on
us/iaas/Content/Identity/Tasks/managingdynamicgroups.htm#Writing
ss rs
https://docs.oracle.com/en-
to jefe
us/iaas/Content/Identity/Tasks/managingdynamicgroups.htm.
Note: You can manually enter the rule in the text box or launch the rule builder.
− For example, to include all instances that are in a specific compartment, add a rule
at
m
with the following syntax:

on
instance.compartment.id = '<compartment_ocid>'
rs
b. Enter additional rules as needed. To add a rule, click +Additional Rule.

fe
(je
5. Click Create. The dynamic group now appears in the list of dynamic groups.

Lab - 01 2 Ingles

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Lab - 01 2 Ingles

Uploaded by

Copyright:

Available Formats

Unauthorized reproduction or distribution prohibited. Copyright© 2023, Oracle University and/or its affiliates.

e. Create a dynamic group

Copyright © 2023, Oracle and/or its affiliates.

Copyright © 2023, Oracle and/or its affiliates.

In this practice, you will learn how to create a compartment.

b. Description: Enter a compartment-related description.

c. Parent Compartment: The compartment you are in appears by default. To choose

Copyright © 2023, Oracle and/or its affiliates.

A user is an individual employee or system that needs to manage or use your

In this practice, you’ll learn how to create a user.

4. Click Create. The user now appears in the list of users.

Copyright © 2023, Oracle and/or its affiliates.

Identity Domains Enabled)

6. Enter the following:

a. Name: Enter a unique name for the group.

b. Description: Enter a group-related description.

7. Click Create. The group now appears in the list of groups.

Copyright © 2023, Oracle and/or its affiliates.

In this practice, you’ll learn how to create a policy.

attached controls who can later modify or delete it.

Note: A sample statement would look like the following:

allow group <group_name> to manage virtual-network-family in

7. Click Create. The policy now appears in the list of policies.

Copyright © 2023, Oracle and/or its affiliates.

in your tenancy, including dynamic groups and user groups.

b. Description: Enter a friendly description.

a. Rule 1: Enter a rule by following the guidelines in https://docs.oracle.com/en-

with the following syntax:

b. Enter additional rules as needed. To add a rule, click +Additional Rule.

Copyright © 2023, Oracle and/or its affiliates.

You might also like