Cloud Account Management ACL groups, roles, and responsibilities

  • Rversion finale: Australia
  • Mis à jour 12 mars 2026
  • 2 minutes de lecture
  • Access control lists (ACLs), groups, and roles in Cloud Account Management control how access permissions are organized and managed within a cloud environment.

    Groups and roles in Cloud Account Management

    Tableau 1. Cloud Account Management groups and responsibilities
    Group Role Responsibilities
    ITOM Cloud Account Management requester group sn_itom_cam.cw_requester
    • Initiates cloud account requests: Triggers the process for creating cloud accounts.
    • Justifies account creation: Provides clear and compelling reasons for why each cloud account is needed.
    • Gathers and submits account information: Collects and submits all the necessary details required for successful cloud account creation.
    • Manages account status: Request suspension or reactivation of cloud accounts as needed.
    ITOM Cloud Account Management approver group sn_itom_cam.cw_approver
    • Evaluates and approves account requests: Review account creation requests, carefully assessing their validity and alignment with budget constraints. Following this evaluation, the administrator grants approval or denial of the request.
    • Verifies budgetary compliance: Confirms that the requested cloud account aligns with available budgetary resources before granting approval.
    • Communicates decisions with clear rationale: Communicates clearly the approval or denial decision to the requester by adding a comment to the request itself. This comment should provide a concise and informative explanation for the decision.
    ITOM Cloud Account Management admin group sn_itom_cam.cw_admin
    • Verifies configuration alignment: Verifies that Cloud Account Management configurations are consistent and aligned with both cloud provider configurations and Terraform configurations. This process promotes secure access management practices across all environments.
    • Provisions cloud accounts: Configures the cloud context to provision new cloud accounts, streamlining the account creation process.
    • Troubleshoots provisioning issues: Diagnoses and resolves any problems encountered during cloud account provisioning, promoting successful account creation.
    • Customizes data certification policy: Tailors the Cloud Account Management default data certification policy to meet specific organizational requirements, promoting appropriate data handling procedures.
    • Manages all accounts: Oversees all cloud accounts, including CW-managed accounts and on-boarded accounts, guaranteeing centralized control and visibility.
    ITOM Cloud Account Management certifier group sn_itom_cam.cw_certifier
    • Certifies discovered accounts: Reviews discovered accounts listed in the Subscription Accounts tab and designates them as certified if they meet compliance standards or failed if they don't. This process verifies proper vetting and ongoing monitoring of cloud accounts.
    • Manages verification tasks: Accesses and reviews verification tasks associated with cloud accounts. Following review, the administrator can certify tasks to indicate their successful completion.

    How they work together

    Tableau 2. Cloud Account Management groups and responsibilities
    Group Role Responsibilities
    ITOM Cloud Account Management requester group sn_itom_cam.cw_requester
    • Initiates cloud account requests: Triggers the process for creating cloud accounts and provides the information for creating the account.
    • Manages account status: Requests suspension or reactivation of cloud accounts.
    ITOM Cloud Account Management approver group sn_itom_cam.cw_approver
    • Evaluates and approves account requests.
    • Verifies budgetary compliance of requested cloud accounts and alignment with available budgetary resources.
    ITOM Cloud Account Management certifier group sn_itom_cam.cw_certifier
    • Certifies discovered accounts.
    • Accesses and reviews verification tasks associated with cloud accounts.
    ITOM Cloud Account Management admin group sn_itom_cam.cw_admin
    • Verifies that Cloud Account Management configurations are consistent and aligned with both cloud provider configurations and Terraform configurations.
    • Provisions cloud accounts.
    • Troubleshoots provisioning issues: Diagnoses and resolves any problems encountered during cloud account provisioning.
    • Customizes data certification policies to meet specific organizational requirements.
    • Oversees all cloud accounts, including CW-managed and on-boarded accounts, guaranteeing centralized control and visibility.

    To return to the main topic, see Exploring Cloud Account Management.