Applying a Role Definition to a Cloud Rule


Applying a Role Definition to a Cloud Rule

You can apply Azure role definitions to cloud rules by selecting them when adding a new cloud rule or editing an existing cloud rule.

To create a cloud rule with a role definition:

  1. Select Cloud Management > Cloud Rules
  2. Click Add New.
  3. In the Cloud Rule Name field, enter a name to identify the cloud rule throughout the application. This field must be unique among cloud rules.
  4. In the Owners dropdown menu, select users and user groups that will have permission to edit this cloud rule.
  5. (Optional) Select pre- and post-rule webhooks to apply.
  6. Select Azure Role Definitions to apply.
  7. Select Azure Policy Definitions to apply.
  8. Select Azure ARM Templates to apply to subscriptions when this cloud rule is applied.
  9. Select Compliance Standards to apply to this cloud rule. Compliance standards are applied to cloud rules, which are applied to projects. All resources within that project will be subject to the compliance checks included in that compliance standard.
  10. Click Create Cloud Rule.

Once this cloud rule is created, it applies the cloud resources to the specified OUs, projects, and child projects below the OU in the OU structure.

To edit a cloud rule:

  1. In the left navigation menu, click Cloud Management > Cloud Rules.
  2. Click the ellipsis menu on the cloud rule you want to change and select Edit.
  3. Make any necessary changes to the cloud rule.
  4. Click Update Cloud Rule