1Z0-1072 · Question #115
You have successfully configured identity federation between Oracle Cloud Infrastructure (OCI) and Oracle Identity Cloud Services (IDCS). A new project manager wants access to OCI for her team and…
The correct answer is D. Create a new IAM group in OCI and map it to the existing IDCS group. Create a new IAM policy. When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access…
Question
You have successfully configured identity federation between Oracle Cloud Infrastructure (OCI) and Oracle Identity Cloud Services (IDCS). A new project manager wants access to OCI for her team and provides the name of an existing group within IDCS to use when granting access. How do you configure federation to allow the project team access to OCI resources?
Exhibit
Options
- ACreate a new IAM group in OCI and map it to the existing IDCS group. Create a new policy in
- BCreate a new Identity and Access Management (IAM) policy in OCI and reference the name of the
- CCreate a new compartment in OCI with the same name as the existing IDCS group. Create an IAM
- DCreate a new IAM group in OCI and map it to the existing IDCS group. Create a new IAM policy
How the community answered
(54 responses)- A2% (1)
- B6% (3)
- C13% (7)
- D80% (43)
Explanation
When working with your IdP, your administrator defines groups and assigns each user to one or more groups according to the type of access the user needs. Oracle Cloud Infrastructure also uses the concept of groups (in conjunction with IAM policies) to define the type of access a user has. As part of setting up the relationship with the IdP, your administrator can map each IdP group to a similarly defined IAM group, so that your company can re-use the IdP group definitions when authorizing user access to Oracle Cloud Infrastructure resources. Here's a screenshot from the mapping process:
Topics
Community Discussion
No community discussion yet for this question.
