One common strategy that may be missed during set-up of the New Signature Cloud Management Portal (CMP) is to determine a governance strategy so that there is control over data access and usage from the start. Users can be configured for access to only specific Azure Accounts and Subscriptions. How do I determine the roles that should be assigned to users? These are the roles that can be assigned: EA Owner Overall administrator for the CMP After the initial CMP registration, the first user is assigned the EA Owner role Additional EA Owner roles can be created Company Owner Company Owner Administrator for the CMP Cannot create or delete users with an EA Owner role Cannot update the EA API Key Cannot add additional EAs Cannot do a data reset User with access only to specific Azure Accounts User can only create reports based on the data from the subscriptions within the specified Azure Accounts User Lowest privilege account A group needs to be created first Users are added to one or more group Access control can then be done based on the group User also need to be assigned to one or more Azure Accounts User can only create reports based on the data from the subscriptions within the specified Azure Accounts Assigning user rights is not the only way to maintain organized management within your CMP account. The portal allows for granular breakdown of projects, groups, departments, and billing categories, so that your usage can be tracked by user, purpose, or other definable fields. This ability to create a taxonomy brings with it the power to target and analyze your Azure data with ease. When you employ New Signature’s Managed Services our experts can help you determine a suitable taxonomy for your organization, along with recommendations for user set-up. To learn more about the Managed Services offering, contact New Signature today. Next week, we will delve into the financial side of the Cloud Management Portal, and begin a series about RightSizing set-up, chargeback and showback, and understanding your Microsoft Enterprise Agreement.