Skip to main content

CCM Roles and Permissions

Harness RBAC includes Roles and Permissions that enable you to control access to the CCM resources in your Harness account.

CCM Roles and Permissions are Account Level Only

Most Roles and Permissions can be set at the Project, Org, and Account levels. CCM Roles and Permissions can be set at the Account level only.

  1. In your Harness Account, click Account Settings > Access Control > Roles.
  2. Add or open a Role.
  3. In the Role, click Cloud Cost Management. The CCM Permissions are displayed.

Default Roles

You can configure CCM Permissions for any Role, but there are two default Roles related to CCM that you can assign without having to set anything up.

CCM Admin

The default CCM Admin Role has full permissions on all CCM resources.

CCM Viewer

The default CCM Viewer Role has read-only permissions on all CCM resources.

Permissions

The following table describes the Permissions enabled in the default Harness Roles, including the two CCM default Roles.

CCM ResourcePermissionAccount AdminAccount ViewerAccount BasicCCM AdminCCM ViewerWhat a User can do?
RecommendationsRecommendations: ViewYYNYYView the Recommendations irrespective of Perspective View Permission
AnomaliesAnomalies: ViewYYNYYView the Anomalies irrespective of Perspective View Permission
Currency PreferenceCurrency Preference: ViewYYNYYView the set currency perferences
Currency PreferenceCurrency Preference: EditYNNYNEdit the currency perferences
Overview PageOverviewYYNYYView the Overview page
Cost CategoriesCost Categories: ViewYYNYYView all the cost categories
Cost CategoriesCost Categories: EditYNNYNCreate a new cost category and edit existing cost categories
Cost CategoriesCost Categories: DeleteYNNYNDelete a cost category
FoldersFolders: ViewYYNYYView all the folders
FoldersFolders: EditYNNYNCreate a new folder, clone/edit existing folders
FoldersFolders: DeleteYNNYNDelete a folder
Cloud Asset Governance Rule SetsCloud Asset Governance Rule Sets: ViewYYNYYView the cloud asset governance rule sets
Cloud Asset Governance Rule SetsCloud Asset Governance Rule Sets: EditYNNYNCreate a new cloud asset governance rule set or edit existing
Cloud Asset Governance Rule SetsCloud Asset Governance Rule Sets: DeleteYNNYNDelete a cloud asset governance rule set
PerspectivesPerspectives: ViewYYNYYView all the perspectives
PerspectivesPerspectives: EditYNNYNCreate a new perspective, clone/edit an existing a perspective and move the perspective to a different folder
PerspectivesPerspectives: DeleteYNNYNDelete a perspective
Cloud Asset Governance RulesCloud Asset Governance Rules: ViewYYNYYView the cloud asset governance rules
Cloud Asset Governance RulesCloud Asset Governance Rules: EditYNNYNCreate a new cloud asset governance rule or edit existing
Cloud Asset Governance RulesCloud Asset Governance Rules: DeleteYNNYNDelete a cloud asset governance rule
Cloud Asset Governance RulesCloud Asset Governance Rules: ExecuteYNNYNExecute a cloud asset governance rule
Auto Stopping RulesAutoStopping Rules: ViewYYNYYView all the AutoStopping rules
Auto Stopping RulesAutoStopping Rules: EditYNNYNCreate a new AutoStopping rule and edit existing rules
Auto Stopping RulesAutoStopping Rules: DeleteYNNYNDelete an AutoStopping rule
BudgetsBudgets: ViewYYNYYView the budgets page
BudgetsBudgets: EditYNNYNCreate a perspective budget and edit existing
BudgetsBudgets: DeleteYNNYNDelete a budget
Load BalancerLoad Balancer: ViewYYNYYView all the load balancers
Load BalancerLoad Balancer: EditYNNYNCreate a new load balancer and edit configuration of existing load balancers
Load BalancerLoad Balancer: DeleteYNNYNDelete a load balancer
Cloud Asset Governance EnforcementsCloud Asset Governance Enforcements: ViewYYNYYView the cloud asset governance enforcements
Cloud Asset Governance EnforcementsCloud Asset Governance Enforcements: EditYNNYNCreate a new cloud asset governance enforcement or edit existing
Cloud Asset Governance EnforcementsCloud Asset Governance Enforcements: DeleteYNNYNDelete a cloud asset governance enforcement
CommitmentsCommitments: ViewYNNYYView Commitment dashboards and Summary
CommitmentsCommitments: EditYNNYNSetup Commitments