Manage Cloud

Manage Cloud wizard allows to set up user permissions on the project, project quotas, and project subscriptions. The wizard is available only for users with Project Coordinator, Project Manager, Account Manager and Delivery Manager role and provides access to respective projects.

In this section, you can find the detailed descriptions and explanations for the wizard facilities.

For more detailed information on project management in EPAM Cloud, please, see the Account Activity page and our Project Management Guide.

  • Select a management action

    Manage Cloud wizard allows you to perform Cloud project management in several clicks only. Here, you can check and manipulate the following settings:

    1. Manage permissions for a particular user - Here, you can fine tune a user's permissions, that are by default based on their project role.

    2. Manage permissions for a project role - By selecting this option, you can change the set of default permissions that are granted to the users with one or other role on the project.

    3. Quota notification plan - Here, you can view the existing project quota notification plan by regions.

    4. Edit quota notifications - This option allows you to set up monthly project costs limits by regions, quota depletion notifications, and specify the actions that should be taken after the quota is 100% used.

    5. Manage project notifications - By selecting this option, you can setup Orchestration notifications policy for your project.

    6. Manage resource quota - This option allows you to setup project quota for checkpoints, instances and volumes.

    7. Activate region - This option allows you to enable a new region for a project that is already activated in Cloud.

    8. Delegate - This option allows to delegate receiving project notification to a trusted user.

  • Manage permissions for a project role

    Here, you can modify the default permissions for a group of users, who have the same role on the project. To customize a user's permissions, use the following tools on the page:

    1. Select project: Select the project where the project role permissions should be changed.

    2. Select role: Select the project role for which you want to manage permissions.

    3. Deny operations: Deny one or several of the operations allowed for the role by default. To deny an operation, press "Add new row" button and select the operation to deny from the dropdown list (it will include all the operations, available for the selected role by default).

    4. Add allowed operations: Allow an operation that is not allowed by default. To do it, press "Add new row" button and select the operation to allow from the dropdown list (it will include all the operations that are not available for the selected role by default).

    5. Default allowed operations: When unfolded, the table lists all the operations allowed to a role by default.

  • Manage permissions for a user

    The page allows to set up the role, according to which the permissions will be assigned to the specific users:

    1. Select Project: Select the project to which the user is assigned.

    2. Select group: Select the group of the users you want to manage:

          - Active users contains the users, who performed at least one login to or run the or2access command.

          - UPSA users contains the users, who are assigned to the project, but never interacted with EPAM Orchestrator after their assignment.

    3. Select User: Select the user (by EPAM e-mail) whose permissions you want to manage.

    4. Chose role: Select the role to be assigned to the user.

         - Project role-based: The user will get the set of permissions, guaranteed to them according to their project role.

         - Grant Admin access: The user will get the max project permissions level in private regions and AdminUser access to Public Clouds in which the project is activated.
    Please note, that this will affect your permissions in other clouds as well.

         - AWS Managed Policy: The user's permissions in AWS (when they login to the AWS Management Console) will be expanded by the specified AWS Managed Policy.

         - Deny access: The user will have no access to perform project manipulations in Cloud. The user also will hot have an access to all public providers for the selected project.

  • Edit quota notifications

    Here, you can set up monthly project quotas limits and actions fot different regions, by taking the following steps:

    1. Select Project: Select the project for which quotas are to be set up.

    2. Select Region: Region selection field. Select "ALL" to specify quota for the entire project, "EACH" to specify quota for each region of the selected type or choose a particular region to specify quota for that region only.

    3. Amount: specify the montlhy quota (in USD) for the project in the selected regions. When several quota levels overlap in the same region, the strictest quota applies.

    4. Action Plan: the list of the actions, related to quota usage and depletion. These can be:

    - "Stop VMs when 100% quota depleted" (stop all resources in the region)
    - "Request approval for new VMs after quota is 100% depleted" (restrict new VMs creation without the Project Coordinator's approval)
    - "Deny requesting new VMs when 100% quota depleted" (restrict running new VMs)
    - "Disable quota" (allow all actions)

    Click "Add new row" to add a new action to the plan, or, to remove one, click the red cross next to the action in the table

    5. Notification plan: Specify the quota usage level (in % of the quota sum), at which you will get email notifications.

  • Quota Notification Plan

    On this page, you can check the current state if your project's monthly quotasm by regions:

    1. Select Project: Select the project where the quota should be changed

    2. Show Quotas: Quota type to display. There are three options here:
    - Actual quota - show the quotas that are not depleted yet
    - Depleted quota - show the quotas that were depleted an/or exceeded
    - Disabled quota - show the quotas that were disabled for the project
    - All - show both types of quotas

    3. Quota Details: - Region - the name of the region for which the quota is specified - Amount - the monthly quota sum, in USD - Action Plan - the list of the actions related to the quota. These can be:

    - "Notify" (send a notification to project members when quota usage reaches the specified amount, in % of the quota sum)
    - "Stop" (stop all resources in the region)
    - "Deny Run VM" (restrict running new VMs).

  • Manage Project Notifications

    On this page, you can manage the notifications that will be sent to different groups of project members, and allow them select whether they want to receive these notifications or not.

    Subscription Management page allows you to select among pre-defined subscriptions policies or set up a custom one:

    1. Select Project for which notifications settings should be checked or changed

    2-3. Primary and Secondary Contacts info. This is taken from UPSA and cannot be changed.

    4. Select one of the available subscription policies.

    5. View the current subscription settings. If you selected the policy as "Set up custom notification rules", this is the space where you set the new rules.
    Checking boxes enables notifications for the respective role/notification template combinations. You can use the boxes from the Allow customization column to manage user customization rights (see screenshot below).

  • Manage Resource Quota

    On this page, you can request the change of resource quotas (the amount of resources that can be created by your project during 24 hours):

    1. Select Project for which resource quotas should be updated

    2. Select Region where the quota should be updated

    3. Select the Type of the Quota to be changed. This can be:

    - Instance Quota - The number of instanes that can be run
    - Volume Quota - The number of volumes that can be created and their size
    - Checkpoint Quota - The number of checkpoints that can be created

    4. Specify the quota values and add any description if needed.

    If you want to change quotas of several types, click "Apply" after specifying each quota value and before switching to another quota type.

  • Activate Region

    The Activate Region option in the Manage Cloud wizards allows to activate a project in new regions or in a new cloud provider. The project should already be activated in Cloud.

  • Delegate

    The Delegate option allows you to delegate the project-related emails to another person.