{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":29092,"path":"it-operations-management/cloud-configuration-governance/azure-assign-roles-cloud-mgt.md","title":"Assign roles to Azure users of Cloud Provisioning and Governance","bundle":null,"doc_type":null,"release":"australia","body":"\n# Assign roles to Azure users of Cloud Provisioning and Governance\n\nYou assign Cloud Provisioning and Governance roles to user groups and to individual users based on user activities and responsibilities.\n\n## Before you begin\n\nRole required: user\\_admin or admin\n\n## Procedure\n\n1.  Assign the following roles to groups and users as appropriate:\n\n<table id=\"table_bvg_1fw_vy\"><thead><tr><th>\n\nDescriptive name and role name\n\n</th><th>\n\nDescription and tasks\n\n</th><th>\n\nAccess rights in Cloud Provisioning and Governance\n\n</th></tr></thead><tbody><tr><td>\n\nRoot administrator `[sn_cmp.cmp_root_admin]`\n\n</td><td>\n\nHighest level of application access for Cloud Provisioning and Governance.\n\n</td><td>\n\nAll\n\n</td></tr><tr><td>\n\nCloud administrator `[sn_cmp.cloud_admin]`\n\n</td><td>\n\nConfigures the Cloud Provisioning and Governance application and sets up the cloud infrastructure.\n\n</td><td>\n\nCloud infrastructure:Service accounts and cloud account\n\n Networks and IPAM\n\n Settings for provider services that auto-update the CMDB:\n\n-   AWS Config\n-   Azure Alert\n-   Google Cloud Logging\n-   IBM Cloud Update\n-   VMware Events\n\n\n</td></tr><tr><td>\n\nGovernor`[sn_cmp.cloud_governor]`\n\n</td><td>\n\nMonitors overall cloud usage and enforces compliance of the organization's rules, quotas, and policies. Also manages tags and permissions to various objects.\n\n</td><td>\n\nGovernance:-   Policies\n-   Pools\n-   Quotas\n-   Permissions\n\n\n</td></tr><tr><td>\n\nService Designer `[sn.cmp.cloud_service_designer]`\n\n</td><td>\n\nCreates blueprints, ARM and CloudFormation templates, and catalog items.\n\n</td><td>\n\nCloud Service Design:-   Cloud templates\n-   Blueprints\n-   Blueprint catalog items\n-   Resource blocks\n\n\n</td></tr><tr><td>\n\nCloud user `[sn_cmp.cloud_service_user]`\n\n</td><td>\n\nRequests and manages stacks and resources.\n\n</td><td>\n\nCloud User Portal.When you assign the role to a group, all members of the group share quota limitations and ownership of certain resources.\n\nYou can access all the task records, assigned to you or otherwise, if you have the cloud service user role.\n\n</td></tr><tr><td>\n\nCloud operator`[sn_cmp.cloud_operator]`\n\n</td><td>\n\nMonitors and troubleshoots the Cloud Provisioning and Governance application.\n\n</td><td>\n\nDashboards and reports:-   Cloud Operations Dashboard\n-   Cloud Root Cause Analysis\n-   Cloud Orchestration Trail\n-   Cloud API Trail\n\n\n</td></tr><tr><td>\n\nCloud Event Integration`[sn_cmp.cloud_event_integration]`\n\n **Note:** Not supported by IBM Cloud Connector.\n\n</td><td>\n\nAuthorizes access to the instance for external services that auto-update the CMDB when cloud events occur. This role gives the access to the cloud event REST endpoint.\n\n</td><td>\n\nCloud infrastructure:\n\n-   Service accounts and cloud account\n-   Networks and IPAM\n Settings for provider services that auto-update the CMDB:\n\n-   AWS Config\n-   Azure Alert\n-   Google Cloud Logging\n-   VMware Events\n\n\n</td></tr><tr><td>\n\nCloud Group administrator`[sn_cmp.cloud_group_admin]`\n\n</td><td>\n\nGrants admin access to any group that you belong to.\n\n</td><td>\n\n \n\n</td></tr></tbody>\n</table>\n**Related topics**  \n\n\n[Assign a role to a group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/t_AssignRoleToGroup.md)\n\n[Assign a role to a user](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/t_AssignARoleToAUser.md)\n\n"}}