LOW
Source
CloudSploit
ID
empty-groups

Empty Groups

Ensures all groups have at least one member.

While having empty groups does not present a direct security risk, it does broaden the management landscape which could potentially introduce risks in the future.

Follow the appropriate remediation steps below to resolve the issue.

  1. Log in to the Oracle Cloud Platform Console.

  2. Scroll down the left navigation panel and choose the “Identity” under the “Governance and Administration.” Step

  3. On the Identity menu, select the “Groups” option.Step

  4. On the “Groups” page, select the “User group” by clicking on the “Name” as a link to access the group.Step

  5. On the selected group check that the group have at leat one member. If not then it’s not as best practices recommended by Oracle.Step

  6. Repeat steps number 2 - 5 to check other groups in the account.

  7. Navigate to “Identity” under the “Governance and Administration” and select the “Groups” to delete the group one no users.Step

  8. Select the group with no users by clicking on the checkbox and click on the “Delete” option at the top to remove the selected group.Step

  9. On the “Delete group” tab, click on the “Delete” button to make the changes.Step

  10. Repeat steps number 7 - 9 to remove identity groups with no members.