With Dynamic Resource Groups, you can define visibility or access control policies for teams and users. The context set for the Dynamic Resource Groups is matched against the context set for cost attribute visibility to determine if the user should see the cost attributes and what actions they can take in the
Cost & Asset Management
user interface (UI).
You can also find
Cost & Asset Management
resources and tag them for inclusion in a group. These resources are automatically added and removed from the group without manual intervention. The filter set that you specify and define which resources are covered by the Dynamic Resource Group.
There are two types of Dynamic Resource Groups:
visibility and budgetary
.
Users with the CAM Admin, Extended Admin, and Basic Admin roles create the Dynamic Resource Groups and can view them. Additionally, some roles can also view Dynamic Resource Groups:
Asset Analyst
Asset Manager
Cost Analyst
Cost Manager
Extended Viewer
Basic Viewer
These roles have access to the dashboards and can export reports.
Budget view and edit permissions are unavailable by default to any CAM roles.
The Budget Viewer and Budget Admin role from Core must be assigned to a team so that teams' users can create, update, and view budgetary Dynamic Resource Groups. Budget Viewer is required to display details in budgetary Dynamic Resource Groups.
Multiple roles can be associated with a team for their intended responsibilities. For example, the Budget Admin and Budget Viewer roles from Core and common services can be used along with the Cost Manager role for a team so that the team's users have the right permissions.
Provider tag creation permissions are also unavailable by default to any CAM roles.
For more information about User Management and setting up teams and users, visit our
User Onboarding Guide Section
Only users with the CAM_Admin role can create, edit, and delete Dynamic Resource Groups. Before you start working with Dynamic Resource Groups, you must set up your teams with roles and assign your users to teams.
A table displays a list of the Dynamic Resource Groups that have already been created. If they have not been created, the table will be empty.
The Customer Total Cost filter set is the sample data set that is not applied to the Pricing policy. Do not assign an organizational role or a team role to a team.
Context and User Roles are defined in User Management. For more information about user roles and context, Go to
.
To set up the context of User Management:
Log in as a user with CAM Admin and System Admin set.
Create a team following the steps in the
User Onboarding Guide Section
Create a user following the steps on the
.
After creating the user, associate the team with the context by clicking the main menu icon located at the right side of the screen next to the user name and click
View Details
. A new window opens, showing a list of Business Entities and a list of Values.
Select
Team
as a business entity and click the
check box
next to it to associate the team to a specific context.
Select the desired context from the drop down list under
Values
and click
Save
.
User Access in Application Dashboards
The user is given access to resource groups in the dashboards based on matching contexts between user management and dynamic resource group settings above:
While creating a DRG, associate the team as
Business Entity
to the same context and value, on the
Values
As set in User Management above, the drop-down list is for appropriate user access.
Creating Dynamic Resource Groups
To create Dynamic Resource Groups, complete the following steps:
As a CAM Admin, navigate to the Dynamic Resource Groups screen by clicking the
Main Menu
within your
Tenant
, and then select
Dynamic Resource Groups
from the
Cost & Asset Management
drop-down list.
Click
Create New
. The Dynamic Resource Group detail screen is displayed.
Select a
Type
to define the resource group being created.
Select
Visibility
to define the view on a specific set of data. You can add Dynamic Tags to the Dynamic Resource Group with this option.
Select
Budgetary
to define the set of data associated with a specific Budgetary unit. For more information on budget settings, go to Creating and Managing budgets
The option to create a Dynamic Resource Group of type "Extended" in the application is part of a feature that is in progress and will not work if selected for now.
Add a name for the new Dynamic Resource Group. A unique name must identify each Dynamic Resource Group. Click
Next
.
In the
Associate context
, choose the Context and Budgetary Unit to add to the Dynamic Resource Group.
To add a Team, select
Team
on the drop-down menu under business entities and select the team from the
Values
drop-down menu. Click on the
Associate
box to associate the team with the Dynamic Resource Group.
To add an Organization, select
Organization
on the drop-down menu under business entities and select the desired organization from the
Values
drop-down menu. Click on the
Associate
box to associate the organization with the Dynamic Resource Group. Click
Next
.
In the
Set Filter
section, select service providers, billing accounts, asset accounts, categories, services, provider tags, and any other filter type for the Dynamic Resource Group, and click
Apply
to apply changes. Then, click
Next
.
On the
Review
In the section, check the Dynamic Resource Group created and its properties.
To go back to edit one of the previous sections, click the
Previous
button, located next to the
Next
button.
Click
Save
. A message is displayed that states that the Dynamic Resource Group was created.
Updating Dynamic Resource Groups
To update a Dynamic Resource Group, complete the following steps:
As a CAM Admin, navigate to the Dynamic Resource Groups screen by clicking the
Main Menu
icon within your
Tenant
, and then select
Dynamic Resource Groups
from the
Cost & Asset Management
drop-down list.
Select the group you want to update in the Dynamic Resource Group list table. The Dynamic Resource Group detail screen is displayed.
Update the values for the service providers, billing accounts, asset accounts, categories, services, provider tags, and any other filter that has been set.
When you have finished making updates to the Dynamic Resource Group, click
Save
. A message is displayed that states that the Dynamic Resource Group was updated.
When you update a Dynamic Resource Group, the Line Items table shows all the data included in it.
The line items table indicates no data is found when changing the filtering to include data not included in the Dynamic Resource Group.
Only filter from data already included in the Dynamic Resource Group and shown in the line items table.
Deleting Dynamic Resource Groups
To delete a Dynamic Resource Group, complete the following steps:
As CAM_Admin, navigate to the Dynamic Resource Groups screen by clicking the
Main Menu
within your
Tenant
, and then selecting
Dynamic Resource Groups
from the
Cost & Asset Management
drop-down list.
In the Dynamic Resource Group list table, select the Dynamic Resource Group you want to delete.
The Dynamic Resource Group Detail screen is displayed. Click
Delete
.
Confirm that you want to delete the Dynamic Resource Group. A message is displayed that states that the Dynamic Resource Group was deleted.
To add a user defined tag to a Dynamic Resource Group, follow the steps:
Navigate to the Dynamic Resource Groups by clicking the
Main Menu
icon within your
Tenant
, and then selecting
Dynamic Resource Groups
from the
Cost & Asset Management Platform
drop-down list.
In the Dynamic Resource Group list, select the name of the Dynamic Resource Group that you would like to add a user defined tag by clicking on it.
Click the
Edit
button on the right side of the
Name and Type
header.
Type the name of the tag on the Dynamic Tags bar.
If the dynamic tag you would like to add does not exist, click
Add Dynamic Tags
to include a new one.
On the next screen, check the context and budgetary unit and click
Next
.
On the next screen, set the filters desired and click
Next
.
To save the tag, click
Save
.
Dynamic tags could be associated with more than one Dynamic Resource Group (DRG) during the creation or edition of the Resource Group.
Selecting an existing dynamic tag while creating a DRG does not restrict you from choosing any filter criteria not associated with the dynamic tag. Editing does not reset the user's filter criteria.
The dynamic tag will inherit all the filter criteria defined in the associated dynamic resource groups. Searching and selecting the dynamic tag in the dashboard will apply all the filter criteria defined in the associated dynamic resource groups.
Data Visibility using Dynamic Resource Groups
All users except those with the CAM Admin Role on CAM must be granted access to view data via a Dynamic Resource Group. This can be automatically created by the system when a feature flag is enabled (ephemeral dynamic resource group) or by a visibility DRG created by the CAM Admin. To access the data, the context of the DRG must match exactly the context of at least one role that belongs to the user.
As an example, an ephemeral DRG uses Provider Account > Credential > Context to grant visibility to the account's data. At the same time, the context must match exactly the context of at least one Team > Role > Context of the user to see the data.
Ephemeral Dynamic Resource Group
To set up the ephemeral DRG feature flag, follow the steps below:
Navigate to the
Developer Console
page from the
User Menu
, on your
Tenant
landing page. A new window will display.
On the Application drop-down menu, select
core
and on the
Service
drop-down, select cb-core-configuration-service.
/core/featureflagmanagement/v1/featureflag under the Feature Flag Management section to Add the Feature Flag.
Use the following payload to the feature flag:
{ "flag_key": "ActivateEphemeralDRGs", "flag_value": "true" }
Enable or disable cost attribute visibility
CAM Admins can enable or disable the display of provider cost and invoicing data to a group of users using user contexts.
To turn off/on specific data visibility to a group of users, follow the steps:
Navigate to
Cost & Asset Management
by clicking the
Main Menu
within
Tenant
select
Provider Cost
and
Invoice Details Visibility
from the
Settings
drop-down list.
You are provided with one tab:
Visibility by Context
: where you enable visibility of provider cost and invoice data details for users. This tab displays a table containing:
Context type
Context name
Context value
Provider cost and invoice data visibility.
Under the provide cost and invoice data visibility column, click on the arrow. This will turn green, which means visibility has been granted.
To switch off visibility, click the green arrow on the column Provider cost and invoice data visibility.
You get a message when visibility is switched off or on.