Principals
Like any other IAM, OCI IAM also has principals. OCI IAM Principal is a method that allows you to interact with OCI resources. There are three types of principals, and we will define each of them next.
The root user
This is the very first user on the OCI account. A root user is persistent in nature and has full administrator access to all of the OCI resources on the account.
IAM users/groups
Users are persistent and can be individual people or applications, whereas a group is a collection of users. You can put the same users into multiple groups. These users enforce the policy of least privilege. Users have no permissions until they are placed in one, or more, groups.
Instance principals
Instance Principals are used when you want to call the OCI API from an instance deployed on top of OCI itself. The main benefit of using an instance principal is that you don't have to store any credentials within the instance to make these API calls. Oracle uses...