# Ensure IAM user has a valid email address

- Source: https://support.icompaas.com/support/solutions/articles/a_1790698515128718-ensure-iam-user-has-a-valid-email-address
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Oracle Cloud](https://support.icompaas.com/support/solutions/c_1790697859097233) › [Checks](https://support.icompaas.com/support/solutions/folders/f_1790697878907807)
- Last updated: 2026-09-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure every IAM user in the identity domain has a valid, monitored email address. The email address is used for password resets, account activation, and security notifications, so it should belong to the person or team that owns the account.

**Rationale**

Without a valid email address, users cannot receive password reset links or important security notifications, and administrators cannot easily contact the account owner. Accounts without a clear owner are also harder to review and more likely to be forgotten. A valid email address makes every account traceable to a responsible person.

**Impact**

-   Users can receive password resets and security notifications
    
-   Every account is linked to a known owner
    
-   Helps access reviews and offboarding
    

**Default Value**

An email address is requested when a user is created, but it is not always verified, and some service or federated users may not have one.

**Pre-Requisites**

-   Identity domain administrator or user administrator role
    

**Test Plan**

1.  Sign in to the OCI Console at [https://cloud.oracle.com](https://cloud.oracle.com/).
    
2.  Open the navigation menu, select Identity & Security, and under Identity select Domains. Select the identity domain (for example, Default).
    
3.  Select the User management tab and review the email address of each user.
    
4.  If any user has no email address or an invalid one, follow the implementation steps.
    

**Implementation Steps**

1.  Sign in to the OCI Console at [https://cloud.oracle.com](https://cloud.oracle.com/).
    
2.  Open the navigation menu, select Identity & Security, and under Identity select Domains. Select the identity domain (for example, Default).
    
3.  Select the User management tab, and select the user you want to review.
    
4.  Select Edit user.
    
5.  Enter a valid email address owned by the user or the responsible team.
    
6.  Select Save changes.
    

**Backout Plan**

1.  Sign in to the OCI Console at [https://cloud.oracle.com](https://cloud.oracle.com/).
    
2.  Open the navigation menu, select Identity & Security, and under Identity select Domains. Select the identity domain (for example, Default).
    
3.  Select the User management tab, and select the user you want to review.
    
4.  Select Edit user, restore the previous email address, and select Save changes.
    

**Reference**

-   [https://docs.oracle.com/en-us/iaas/Content/Identity/users/about-managing-users.htm](https://docs.oracle.com/en-us/iaas/Content/Identity/users/about-managing-users.htm)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.