OCI Prerequisites: Set Up Groups, Users and Policies

In OCI, you grant access to tasks and resources in an identity domain by assigning users to administrator roles. You also write policies to control access to a service, such as Ops Insights. Family resource-types (aggregate resource types) are predefined in OCI and they give access to components that are typically used together. For Ops Insights, this predefined resource type is called opsi-family.

Table 2-3 Summary of tasks

Task Type Details
Create an administrator group Optional Create an Administrator Group and User
Create an administrator user Optional Create an Administrator Group and User
Create a non-administrator user group Optional Create a Non-administrator Group and User
Create non-administrator users Optional Create a Non-administrator Group and User
Create administrator policies Mandatory Create and Manage Policies With Policy Advisor
Create non-administrator user policies Mandatory Create and Manage Policies With Policy Advisor

Before you can start enabling and using Ops Insights, your tenancy administrator has to create at least one group of administrators (to configure OCI and enable Ops Insights) and non-administrators (to use Ops Insights). There is no requirement to create a separate group exclusively for Ops Insights, you may use groups you already have.