Automate management of service accounts and their roles in the cloud
S
Shamil Radzhabov
The current process for creating a new service account with a designated role in Azure or GCP involves users submitting a ticket for the operations team to manually provision. This workflow needs to be streamlined and enhanced.
Given that meshStack is the optimal solution for managing cloud resources, we should offer this service (via the marketplace?). Users need to be able to:
- Provision new service accounts in Azure and GCP with designated permissions/roles.
- Modify permissions for existing service accounts.
To facilitate this, the user interface must dynamically retrieve and display the roles and permissions a user is authorized to assign. This requires a live lookup of roles and Service Principal Names (SPNs) from the cloud, a capability that is not supported by static data sources like meshStack building blocks or ServiceNow requests.