Using the Console

You're prompted to change your initial one-time password the first time you sign in to the Console. The following procedure is for changing your password again later.

1. Sign in to the Console by using your Oracle Cloud Infrastructure username and password.

2. Select the Profile menu (), which is on the upper-right side of the navigation bar at the top of the page, and then click My Profile, and then click Change password.

3. Click Current password, and then enter the current password.
4. Click New password, and then enter a new password.
5. Click Confirm new password, and then enter the new password again.
6. When you are finished and the password satisfies all password criteria, click Save.

If you're an administrator, you can use the following procedure to reset a user's password. The procedure generates and sends a reset password email to the user. The email includes a link to the page where the user must change their password before they can sign in to the Console again.

1. Open the navigation menu and click Identity & Security. Under Identity, click Domains.
2. Click the name of the identity domain that you want to work in. You might need to change the compartment to find the domain that you want. Then, click Users.
3. Click the user with the password that you want to reset.

4. Click Reset password.

5. To confirm, click Reset password.

   The user will receive an email prompting them to reset their password. If they don't change it within the period specified in the email, the link will expire and you'll need to reset the password for the user again.

If you have an email address in your user profile, you can use the Forgot Password link on the sign-in page to have a temporary password sent to you. If you don't have an email address in your user profile, you must ask an administrator to reset your password for you.

If you're an administrator, you can unblock a user who has tried 10 times in a row to sign in to the Console unsuccessfully. See Unlocking a User.

1. View the user's details:
   • If you're creating an auth token for yourself:

     Open the Profile menu, and then click My Profile.

   • If you're an administrator creating an auth token for another user: Open the navigation menu and click Identity & Security. Under Identity, click Domains. Click the name of the identity domain that you want to work in. You might need to change the compartment to find the domain that you want. Then, click Users. Locate the user in the list, and then click the user's name to view the details.
2. Under Resources, click Auth tokens.
3. Click Generate token.
4. Enter a description that indicates what this token is for, for example, "Swift password token".

5. Click Generate token.

   The new token string is displayed.

6. Click Copy to copy the token string immediately, because you can't retrieve it again after closing the dialog box.
7. When you are finished, click Close.

If you're an administrator creating an auth token for another user, you need to securely deliver it to the user by providing it verbally, printing it out, or sending it through a secure email service.

The following procedure works for a regular user or an administrator. Administrators can delete an auth token for either another user or themselves.

1. View the user's details:
   • If you're deleting an auth token for yourself:

     Open the Profile menu, and then click My Profile.

   • If you're an administrator deleting an auth token for another user: Open the navigation menu and click Identity & Security. Under Identity, click Domains. Click the name of the identity domain that you want to work in. You might need to change the compartment to find the domain that you want. Then, click Users. Locate the user in the list, and then click the user's name to view the details.
2. Under Resources, click Auth tokens.
3. Select the checkbox for the auth token you want to delete, and then click Delete.
4. Confirm when prompted.

The auth token is no longer valid for accessing third-party APIs.

1. View the user's details:
   • If you're creating a customer secret key for yourself:

     Open the Profile menu, and then click My Profile.

   • If you're an administrator creating a customer secret key for another user: Open the navigation menu and click Identity & Security. Under Identity, click Domains. Click the name of the identity domain that you want to work in. You might need to change the compartment to find the domain that you want. Then, click Users. Locate the user in the list, and then click the user's name to view the details.

2. Under Resources, click Customer secret keys.

   A customer secret key consists of an access key/secret key pair. Oracle automatically generates the access key when you or your administrator generates the secret key to create the customer secret key.

3. Click Generate secret key.

4. Click Name to enter a friendly name for the key, and then click Generate secret key.

   The generated secret key is displayed in the Generate secret key dialog box. At the same time, Oracle generates the access key that is paired with the secret key. The newly generated customer secret key is added to the list of Customer secret keys.

5. Click Copy to copy the secret key immediately, because you can't retrieve the secret key again after closing the dialog box, for security reasons.

   If you're an administrator creating a secret key for another user, you need to securely deliver it to the user by providing it verbally, printing it out, or sending it through a secure email service.

6. When you are finished, click Close.
7. To show the access key, locate the secret key in the list of customer secret keys, and then click the access key in the Access key column. To copy the access key, while the access key is displayed, click Copy.

The following procedure works for a regular user or an administrator. Administrators can delete a customer secret key for either another user or themselves.

1. View the user's details:
   • If you're deleting a customer secret key for yourself:

     Open the Profile menu, and then click My Profile.

   • If you're an administrator deleting a customer secret key for another user: Open the navigation menu and click Identity & Security. Under Identity, click Domains. Click the name of the identity domain that you want to work in. You might need to change the compartment to find the domain that you want. Then, click Users. Locate the user in the list, and then click the user's name to view the details.
2. Under Resources, click Customer secret keys.
3. Select the checkbox for the customer secret key you want to delete, and then click Delete.
4. Confirm when prompted.

The customer secret key is no longer available to use with the Amazon S3 Compatibility API.

1. View the user's details:
   • If you're creating an OAuth 2.0 client credential for yourself:

     Open the Profile menu, and then click My Profile.

   • If you're an administrator creating an OAuth 2.0 client credential for another user:

     Open the navigation menu and click Identity & Security. Under Identity, click Domains. Click the name of the identity domain that you want to work in. You might need to change the compartment to find the domain that you want. Then, click Users. Locate the user in the list, and then click the user's name to view the details.

2. Under Resources, click OAuth 2.0 client credentials.

3. Click Generate OAuth 2.0 client credential.

4. Click Name, and then enter a name for this credential.

5. Click Title, and then enter a description for this credential.

6. Add the URI for the OAuth 2.0 services that this credential will provide access to.

   To Select an audience-scope pair:

   1. In Audience, enter the URI for the OAuth 2.0 services.
   2. Next, select the Scope for this credential. Always select the minimum required privileges.
7. To add more permissions to this credential, click + Another scope and follow the instructions in the previous step.
8. Click Generate. The new secret string is generated.

   Click Copy to copy the token string immediately, because you can't retrieve it again after closing the dialog box.

   If you're an administrator creating OAuth 2.0 client credentials for another user, you need to securely deliver them to the user by providing them verbally, printing them out, or sending them through a secure email service.

9. Click Close.

You will need the following information from the credential for the token request:

• The generated secret
• The OCID of the OAuth 2.0 client credential
• The scope and audience (fully-qualified scope)

1. View the user's details:
   • If you're creating an OAuth 2.0 client credential for yourself:

     Open the Profile menu, and then click My Profile.

   • If you're an administrator creating an OAuth 2.0 client credential for another user: Open the navigation menu and click Identity & Security. Under Identity, click Domains. Click the name of the identity domain that you want to work in. You might need to change the compartment to find the domain that you want. Then, click Users. Locate the user in the list, and then click the user's name to view the details.

2. Under Resources, click OAuth 2.0 client credentials.

3. Click the name of the credential that you want to add scopes to.
4. Click Add scopes.

5. Add the URI for the OAuth 2.0 services that you want to add access to.

   To Select a resource-scope pair:

   1. Select the Select a resource-scope pair option.
   2. The Resource list displays the resources you have permission to view. Select the resource you want to add credentials for. After you select the resource, the Audience field is automatically populated.
   3. Next, select the Scope for this credential. Always select the minimum required privileges.
   To Enter fully qualified Scope:

   1. Select the Enter fully qualified scope option.
   2. Enter the Audience and Scope for this credential.
6. To add more permissions to this credential, click + Another scope and follow the instructions in the previous step.
7. Click Save.

IMPORTANT: When you regenerate the secret for a credential, requests made with the previous secret will be denied access to target scopes.

1. View the user's details:
   • If you're creating an OAuth 2.0 client credential for yourself:

     Open the Profile menu, and then click My Profile.

   • If you're an administrator creating an OAuth 2.0 client credential for another user: Open the navigation menu and click Identity & Security. Under Identity, click Domains. Click the name of the identity domain that you want to work in. You might need to change the compartment to find the domain that you want. Then, click Users. Locate the user in the list, and then click the user's name to view the details.

2. On the left side of the page, click OAuth 2.0 client credentials.

3. Click the name of the credential that you want to regenerate the secret for.
4. Click Regenerate secret.
5. Acknowledge the warning dialog and click Regenerate secret.

6. Copy the token string immediately, because you can't retrieve it again after closing the dialog box.

   If you're an administrator creating OAuth 2.0 client credentials for another user, you need to securely deliver them to the user by providing them verbally, printing them out, or sending them through a secure email service.

7. Click Close.

Ensure to update existing token requests with the new secret string.

The following procedure works for a regular user or an administrator. Administrators can delete an auth token for either another user or themselves.

1. View the user's details:
   • If you're deleting an OAuth 2.0 Client Credential for yourself: Select the Profile menu (), which is on the upper-right side of the navigation bar at the top of the page, and then click User Settings, or your account name.
   • If you're an administrator deleting an auth token for another user: Open the navigation menu and click Identity & Security. Under Identity, click Domains. Click the name of the identity domain that you want to work in. You might need to change the compartment to find the domain that you want. Then, click Users. Locate the user in the list, and then click the user's name to view the details.
2. On the left side of the page, click OAuth 2.0 Client Credentials.
3. For the OAuth 2.0 Client Credential you want to delete, click Delete.
4. Confirm when prompted.

The OAuth 2.0 Client Credential is no longer available to use.

The following procedure works for a regular user or an administrator. Administrators can delete SMTP credentials for either another user or themselves.

1. View the user's details:
   • If you're deleting SMTP credentials for yourself:

     Open the Profile menu, and then click My Profile.

   • If you're an administrator deleting SMTP credentials for another user: Open the navigation menu and click Identity & Security. Under Identity, click Domains. Click the name of the identity domain that you want to work in. You might need to change the compartment to find the domain that you want. Then, click Users. Locate the user in the list, and then click the user's name to view the details.
2. Under Resources, click SMTP credentials.
3. Select the checkbox for the SMTP credentials you want to delete, and then click Delete.
4. Confirm when prompted.

The SMTP credentials are no longer available to use with the Email Delivery service.

You can create an IAM database password to meet the Oracle Database password-creation guidelines. See Creating an IAM Database Password for the IAM database password specifications.

1. Log in to the OCI IAM console.
2. In the upper right corner of the window, click the profile icon to display your user profile page.
3. In your user profile page, click your user name.
4. Under Resources, click Database Passwords.
5. In the Database Passwords section, click Create Database Password.

   The Create Database Password dialog box is displayed.

6. Enter a description of the password.
7. Note the password guidelines and restrictions listed on the page. See Creating an IAM database password for more information about password rules.
8. Click Create Database Password.

   The dialog box closes and the description for which you have created a password is displayed in the Database Passwords section.

To change your IAM database password, delete your current password and then create a new one. See To Delete an IAM Database Password and To create an IAM Database Password.

You can delete your own IAM database password.

1. Log in to the OCI IAM console.
2. In the upper right corner of the window, click the profile icon. This takes you directly to your user profile page.
3. In your user profile page, click your user name.
4. Under Resources, click Database Passwords.
5. Your user name is displayed in the Database Passwords section.
6. At the right end of the row with your user name in it, click the three-dot menu, and then click Delete.

To change your IAM database username:

1. Log in to the OCI IAM console.
2. Click Identity& Security.
3. Under Identity, click Users.
4. In the table of database users, click Create User.
5. In the Name field, enter your database user name. Enter only letters, numerals, hyphens, periods, underscores, +, and @. You cannot use spaces in the name.
6. In the Description field, optionally enter the name of the database that this user name is for or any other relevant information.
7. Optionally click Advanced Options to show the Tags dialog box.
8. In the Tag Namespace, Tag Key, and Value fields, enter a tag name
9. Click Save Changes.

To change your IAM database username:

1. Log in to the OCI IAM console.
2. Click Identity& Security.
3. Under Identity, click Users.
4. In the table of database users, locate your database user name and left click it.

   The page for your user name is displayed.

5. Click Edit User.
6. In the Description field, edit your database user name and click Save Changes.

To change your IAM database username:

1. Log in to the OCI IAM console.
2. Click Identity& Security.
3. Under Identity, click Users.
4. In the table of database users, locate your database user name and left click it.

   The page for your user name is displayed.

5. At the right end of the row that contains your user name click the three-dot menu and then click Delete.