Update or reassign insights_owner privileges

Assign ownership of one or more service accounts and, optionally, the related CIs to users that have the insights_owner role. An insights_owner can define jobs and policies and can view data for owned service accounts.

始める前に

Before you assign service accounts, you might want to view the list of current insights_owner and their owned accounts. See View the service accounts owned by an insights_owner for details.

Role required: insights_admin [sn_clin_core.insights_admin]

手順

1. Navigate to Cloud Cost Management Workspace > Operations > Administration > Account to owner mappings.
2. Select Change the owner for one or more accounts.
3. On the form, fill in the fields.

   表 : 1. Set up or update ownership of service accounts

   Field	Description
   Original Insights Owner	Owner to transfer the ownership of service accounts from.
   New Insights Owner	User to transfer the ownership of service accounts to.
   Service accounts	Service accounts to be assigned to the insights_owner.
   Change template	Change template to use to create the change request for this task. The system uses a Standard Change to alert the insights_owner of the change for the task to be auto-approved. If no change request template appears in the list, navigate to Service Catalog > Standard Changes to create a template.

4. Specify how to populate the Owner field for CIs in service accounts.

   オプション	説明
   Assign insights_owners only to CIs with no owner	For newly created CIs and for CIs in the service accounts that have no value for the Owner property, assign the new insights_owner. 注: A daily scheduled job sets the Owner field of each newly discovered CI to the Owner setting for the associated service account.
   Assign insights_owners to all CIs	For the Owner property of every CI in the specified service accounts, assign the new insights_owner. 注: A daily scheduled job sets the Owner field of each newly discovered CI to the Owner setting for the associated service account.
   Do not update any CIs	Make no changes to CIs in the specified service accounts.

   • The affected service accounts are removed from policies that were created with the insights_owner role. The affected service accounts aren’t removed from policies that were created with the insights_admin role.
   • The new insights_owner must create and manage new policies for the affected service accounts.
   • The new account owner takes ownership of Rightsizing and Unused Machines jobs that include resources from all transferred service accounts.
5. オプション: Specify whether to transfer policies to the new owner.
   This setting applies when the selected service accounts are currently owned by a different insights_owner. Transferring the policies enables the new insights_owner to own (view, update, or delete) policies that are associated with the specified service accounts.

   重要:

   Policies owned by users with the insights_admin role aren’t changed in any way.

   オプション	説明
   Yes	The following process runs: The instance clones all affected policies that are owned by Insights Owners. The instance removes appropriate service accounts from each affected policy and moves the accounts to the new clone policy. Each clone policy contains only the affected service accounts. If service accounts remain in the original policy, then the original owner retains ownership of the original policy. If an original policy has no service accounts after all affected accounts are removed, then the clone isn’t used. Instead, the new insights_owner becomes the owner of the original policy. The instance assigns ownership of the new policies to the new insights_owner. The instance sends email notifications to both the original and new owners.
   No	The instance removes the affected service accounts from all policies owned by Insights Owners. If no service accounts remain in a policy, then the policy is set to the Invalid state. The new insights_owner must create and manage the new policies for the affected service accounts.

6. Select Submit.