Create Dynamic Groups

You create dynamic groups of Oracle Cloud Infrastructure compute instances, and associate them with policies. You must provide a unique, unchangeable name for the dynamic group. Oracle assigns a unique Oracle Cloud ID (OCID).

The following steps are for OCI tenancies that use Oracle Identity Cloud Service (IDCS) for identity management.

If you are starting a new cloud deployment on an OCI tenancy with IAM instead of IDCS, Oracle recommends creating a unique identity domain for Essbase instead of using the default identity domain. Create the dynamic group within this domain. In this dynamic group, set up the same rules as described below for IDCS.

If you are not sure which identity management is used on your tenancy, refer to Documentation to Use for Cloud Identity.

  1. On the Oracle Cloud Infrastructure console, navigate to Identity & Security, and click Domains under Identity.
  2. Select the identity domain where you want to create the dynamic group, and navigate to Dynamic groups.
  3. Click Create dynamic group.
  4. Provide a Name and Description (optional) for the dynamic group, and record the name for future use.
  5. In the Matching rules section, click Rule builder to define the resources for the dynamic group.
  6. From the Include instances that match dropdown menu:
    • Select Any of the following to allow the dynamic group to have more relaxed/broad access. A compute instance that matches any of the statements you add to the rule will be included in the group's resources.
    • Select All of the following to limit the dynamic group's resources more strictly. Only those compute instances that match all of the statements in the rule will be included.
  7. From the Match instances with dropdown menu, select Compartment OCID. For the corresponding Value field, paste the OCID of the compartment in which you're creating the Essbase stack. With this option, any compute instances in the named compartment will work using this dynamic group. The other option, Instance OCID, specifies matching just one compute instance ID.
  8. Click Add rule.
  9. You can enter tags (optional) to organize and track resources in your tenancy.
  10. Click Create to complete the dynamic group creation.

For more information on dynamic groups, see Managing Dynamic Groups.