Applying a Role Definition to a Cloud Access Role at the OU Level

The process for applying an Azure role definition to a cloud access role at the OU level is similar to applying it at the project level, but you do it from an OU rather than a project.

To apply a role definition at the OU level:

1. In the left navigation menu, click OUs > All OUs.
2. Click the name of the OU where you will apply the role definition.
3. Click the Cloud Management tab.
4. Click the Cloud Access Roles subtab.
5. Click the Add button on the right side of the interface if you are creating a new cloud access role, or click the ellipsis menu on an existing cloud access role and select Edit to add it there.
6. In the dialog box, fill out any other necessary fields, then click the select Azure Role Definitions from the dropdown in the Azure Settings section.
7. Click either the Update Cloud Access Role button or the Create Cloud Access Role button depending on whether you are editing or creating a cloud access role.

Done! Your Azure role definitions will apply to any Azure subscriptions on child projects when they are accessed via those roles.