Control: 1.12 Ensure IAM users are members of access groups and IAM policies are assigned only to access groups

Description

Simplify and secure the access management process by using access groups when you assign access to groups of users with identical access needs.

Remediation

From Console

1. Log in to IBM Cloud.
2. From the Menubar, click Manage > Access (IAM).
3. Click Users and select a user by clicking on the username.
4. Click Access Policies. ***If the user has individual access policies and you wish to remove them, complete the following steps.
5. Locate the row containing the access policy you wish to remove. Click the actions icon corresponding to that row and click Remove.

Note: Assign an access policy to an Access Group