Cloud Identity Management
Multi-tenant identity and access, synced from your directory.
Tenant management
Model your organisation as a tree. Each department is a tenant, mapped to a cost centre, and holds one cloud account or many, across any provider.
Accounts, approvals and billing stay separate per tenant.
Your organisation3 departments · 6 cloud accounts
- Health Agencytenant · CC-1040
- AWSacct ··1040
- Finance Departmenttenant · CC-2210
- AWSacct ··2210
- Azuresub fin-prod
- Google Cloudproj fin-ops
- Transport Agencytenant · CC-3175
- AWSacct ··3175
- Azuresub transport
From directory to cloud identity
Your on-premise Active Directory controls who can log in. CloudPrimus replicates those accounts to your cloud identity service.
Local ADOn-premise
OktaCloud identity
Azure ADCloud identity
AWS CognitoCloud identity
User lifecycle
Manage users in CloudPrimus, or sync them from your identity source.
OnboardUpdateSuspendRemove
Role-based access
Users get only the access their role needs.
CMP administratorTenant administratorRequesterApproverOperatorBilling viewer
Audit
Administrators keep a full audit trail across every tenant.