Full portal access to Azure: 

Read https://www.nuvepro.com/aws-portal-access/ to get some background for this blog.

We’ll look at how an Enterprise can provide Azure portal access to their employees while also maintaining control over spend as well as resources that can be provisioned.

The first method is by defining policies that restrict the user to accessing only certain services on Azure, this could be based on job functions. More information is available at https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-built-in-roles.

A second method is by putting a limitation on the types of resources, the sizes that can be created by a user, the region etc. The CIO can restrict the user to only a certain type of instances, though not the number of these that can be launched. This along with the budget feature can help a CIO be in better control on what to expect from the next monthly bill. These policies are available as part of the Azure Resource Manager policies at https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-policy.

Azure doesn’t provide a spending limit feature in Azure EA and CSP agreements, but there is a default limit on the each of the subscriptions as given in this link https://docs.microsoft.com/en-us/azure/azure-subscription-service-limits#limits-and-the-azure-resource-manager, and this can be increased by raising a support ticket.

In all these methods, the user still gets access to the full portal, but with some limitations.

Defining these and maintaining it in the Azure portal for all users in an Enterprise can be a cumbersome task, and it typically requires deep knowledge of Azure’s capabilities.

We make it easier to achieve these by creating a catalog item that can be offered via our Nuvelink platform https://www.nuvepro.com/nuvelink. These catalog items are custom created and managed by Nuvepro. Via these catalog items, the CIO can give the required level of access to his users / engineers. An additional advantage is that Nuvelink can be integrated easily with an Enterprise ITSM tool such as ServiceNow, making it easy and seamless to users. 

You can reach us at info@nuvepro.com, to learn about Nuvepro can help a CIO provide users with a full portal access while also maintaining adequate control.