RBAC
Harness RBAC includes Roles and Permissions that enable you to control access to the CCM resources in your Harness account. CCM Roles and Permissions are Account Level Only. Most Roles and Permission…
Harness RBAC includes Roles and Permissions that enable you to control access to the CACM resources in your Harness account.
CACM Roles and Permissions are Account Level Only
Most Roles and Permissions can be set at the Project, Org, and Account levels. CACM Roles and Permissions can be set at the Account level only.
In your Harness Account, click Account Settings > Access Control > Roles.
Add or open a Role.
In the Role, click Cloud & AI Cost Management. The CACM Permissions are displayed.
Default Roles
You can configure CACM Permissions for any Role, but there are two default Roles related to CACM that you can assign without having to set anything up.
CACM Admin
The default CACM Admin Role has full permissions on all CACM resources.
CACM Viewer
The default CACM Viewer Role has read-only permissions on all CACM resources.
Permissions
The following table describes the Permissions enabled in the default Harness Roles, including the two CACM default Roles.
CACM Resource
Permission
Account Admin
Account Viewer
Account Basic
CACM Admin
CACM Viewer
What a User can do?
Recommendations
Recommendations: View
Y
Y
N
Y
Y
View the Recommendations irrespective of Perspective View Permission
Anomalies
Anomalies: View
Y
Y
N
Y
Y
View the Anomalies irrespective of Perspective View Permission
Currency Preference
Currency Preference: View
Y
Y
N
Y
Y
View the set currency preferences
Currency Preference
Currency Preference: Edit
Y
N
N
Y
N
Edit the currency preferences
Overview Page
Overview
Y
Y
N
Y
Y
View the Overview page
Cost Categories
Cost Categories: View
Y
Y
N
Y
Y
View all the cost categories
Cost Categories
Cost Categories: Edit
Y
N
N
Y
N
Create a new cost category and edit existing cost categories
Cost Categories
Cost Categories: Delete
Y
N
N
Y
N
Delete a cost category
Folders
Folders: View
Y
Y
N
Y
Y
View all the folders
Folders
Folders: Edit
Y
N
N
Y
N
Create a new folder, clone/edit existing folders
Folders
Folders: Delete
Y
N
N
Y
N
Delete a folder
Cloud Asset Governance Rule Sets
Cloud Asset Governance Rule Sets: View
Y
Y
N
Y
Y
View the cloud asset governance rule sets
Cloud Asset Governance Rule Sets
Cloud Asset Governance Rule Sets: Edit
Y
N
N
Y
N
Create a new cloud asset governance rule set or edit existing
Cloud Asset Governance Rule Sets
Cloud Asset Governance Rule Sets: Delete
Y
N
N
Y
N
Delete a cloud asset governance rule set
Perspectives
Perspectives: View
Y
Y
N
Y
Y
View all the perspectives
Perspectives
Perspectives: Edit
Y
N
N
Y
N
Create a new perspective, clone/edit an existing a perspective and move the perspective to a different folder
Perspectives
Perspectives: Delete
Y
N
N
Y
N
Delete a perspective
Cloud Asset Governance Rules
Cloud Asset Governance Rules: View
Y
Y
N
Y
Y
View the cloud asset governance rules
Cloud Asset Governance Rules
Cloud Asset Governance Rules: Edit
Y
N
N
Y
N
Create a new cloud asset governance rule or edit existing
Cloud Asset Governance Rules
Cloud Asset Governance Rules: Delete
Y
N
N
Y
N
Delete a cloud asset governance rule
Cloud Asset Governance Rules
Cloud Asset Governance Rules: Execute
Y
N
N
Y
N
Execute a cloud asset governance rule
Auto Stopping Rules
AutoStopping Rules: View
Y
Y
N
Y
Y
View all the AutoStopping rules
Auto Stopping Rules
AutoStopping Rules: Edit
Y
N
N
Y
N
Create a new AutoStopping rule and edit existing rules
Auto Stopping Rules
AutoStopping Rules: Delete
Y
N
N
Y
N
Delete an AutoStopping rule
Budgets
Budgets: View
Y
Y
N
Y
Y
View the budgets page
Budgets
Budgets: Edit
Y
N
N
Y
N
Create a perspective budget and edit existing
Budgets
Budgets: Delete
Y
N
N
Y
N
Delete a budget
Load Balancer
Load Balancer: View
Y
Y
N
Y
Y
View all the load balancers
Load Balancer
Load Balancer: Edit
Y
N
N
Y
N
Create a new load balancer and edit configuration of existing load balancers
Load Balancer
Load Balancer: Delete
Y
N
N
Y
N
Delete a load balancer
Cloud Asset Governance Enforcements
Cloud Asset Governance Enforcements: View
Y
Y
N
Y
Y
View the cloud asset governance enforcements
Cloud Asset Governance Enforcements
Cloud Asset Governance Enforcements: Edit
Y
N
N
Y
N
Create a new cloud asset governance enforcement or edit existing
Cloud Asset Governance Enforcements
Cloud Asset Governance Enforcements: Delete
Y
N
N
Y
N
Delete a cloud asset governance enforcement
Commitments
Commitments: View
Y
N
N
Y
Y
View Commitment dashboards and Summary
Commitments
Commitments: Edit
Y
N
N
Y
N
Setup Commitments
Last updated
Was this helpful?