User Permission Groups

User Permission Groups

There are three User Groups with different combination of permissions that determine what a User can view and do in CloudCockpit.

Administrator

The Users that are in this group have all the permissions in CloudCockpit. 
  1. Full control and visibility within the assigned context (CSP, Reseller or Customer)
  1. Manage and view all aspects of the portal

Viewer

The Users can view, but not manage.
  1. Can view subscriptions, users, customers, offers, orders, providers, resellers, invoices, invoice settings, customer users, and reports
  1. View Microsoft 365 users and their licenses but can't modify license assignments
  1. Download invoices 

Alert Manager

Azure/Risk Management Alert.
  1. An add-on so users can receive Azure consumption email alerts
  1. Can be granted together with Viewer or Administrator permissions
  2. Administrators don't possess these capabilities

Permission Groups are limited to the User context

This means a User is only able to access the information to which his Microsoft tenant is authorized to access.
See examples below:
CSP User
A CSP User in the Administrator group will only be able to see in CloudCockpit what is associated with its own CSP context.
  1. Every Reseller and Customer associated with his CSP tenant will be accessible.
  2. However, this CSP won't be able to obtain information about Resellers or Customers on another CSP.
Reseller User
A Reseller User in the Administrator group will only be able to see in CloudCockpit what is associated with its own Reseller context.
  1. Every Customer associated with his Reseller tenant will be accessible.
  2. But this Reseller cannot access the information from the other Resellers that are associated with the same CSP.


Customer User
A Customer User in the Administrator group will only be able to see in CloudCockpit what is associated with its own Customer context.
  1. Every Subscription associated with his Customer tenant will be accessible.
  2. But this Customer cannot access information from the other Customers that share the same Reseller or CSP.



How to configure User Permission Groups

CSP
1. Go to Administration>Users




2. Locate the User and click on Actions > Edit




3. Choose what group(s) this User should have access to and click Submit

Reseller
1. Go to Administration>Users
2. Locate the User and click on Actions > Edit




3. Choose what group(s) this User should have access to and click Submit

Customer
1. Go to Company > Users




2. Locate the User and click on Actions > Edit




3. Choose what group(s) this User should have access to and click Submit