Description

Ensure every IAM user in the identity domain has a valid, monitored email address. The email address is used for password resets, account activation, and security notifications, so it should belong to the person or team that owns the account.

Rationale

Without a valid email address, users cannot receive password reset links or important security notifications, and administrators cannot easily contact the account owner. Accounts without a clear owner are also harder to review and more likely to be forgotten. A valid email address makes every account traceable to a responsible person.

Impact

  • Users can receive password resets and security notifications

  • Every account is linked to a known owner

  • Helps access reviews and offboarding

Default Value

An email address is requested when a user is created, but it is not always verified, and some service or federated users may not have one.

Pre-Requisites

  • Identity domain administrator or user administrator role

Test Plan

  1. Sign in to the OCI Console at https://cloud.oracle.com.

  2. Open the navigation menu, select Identity & Security, and under Identity select Domains. Select the identity domain (for example, Default).

  3. Select the User management tab and review the email address of each user.

  4. If any user has no email address or an invalid one, follow the implementation steps.

Implementation Steps

  1. Sign in to the OCI Console at https://cloud.oracle.com.

  2. Open the navigation menu, select Identity & Security, and under Identity select Domains. Select the identity domain (for example, Default).

  3. Select the User management tab, and select the user you want to review.

  4. Select Edit user.

  5. Enter a valid email address owned by the user or the responsible team.

  6. Select Save changes.

Backout Plan

  1. Sign in to the OCI Console at https://cloud.oracle.com.

  2. Open the navigation menu, select Identity & Security, and under Identity select Domains. Select the identity domain (for example, Default).

  3. Select the User management tab, and select the user you want to review.

  4. Select Edit user, restore the previous email address, and select Save changes.

Reference