Applying a Role Definition to a Cloud Access Role at the OU Level

Last updated: October 23, 2026

The process for applying an Azure role definition to a cloud access role at the OU level is similar to applying it at the project level, but you do it from an OU rather than a project.

To apply a role definition at the OU level:

  1. In the left navigation menu, click OUs > All OUs.

  2. Click the name of the OU where you will apply the role definition.

  3. Click the Identity tab.

  4. Click the Cloud Access Roles subtab.

  5. Click the Add button on the right side of the interface if you are creating a new cloud access role, or click the ellipsis menu on an existing cloud access role and select Edit to add it there.

  6. Select the User Cloud Access Role type, fill out the cloud access role name and any other necessary fields, then click Continue. In the Azure Settings section, select Azure Role Definitions from the dropdown.

  7. Click either the Update button or the Create Cloud Access Role button depending on whether you are editing or creating a cloud access role.

Done! Your Azure role definitions will apply to any Azure subscriptions on child projects when they are accessed via those roles.