AI Docs

Resource Schedule Permissions

1 min read

image-20251112-142732.png

The CerteroX Resource Schedules feature provides the facility to remotely stop and start virtual machine instances according to a custom schedule. To perform these actions, CerteroX will use the security principal for the Data Source that each VM is in scope of; and therefore, the Data Source security principals will require the correct permissions configured in cloud provider portals to stop and start VMs.

The required permissions are:

Azure

  • Microsoft.Compute/virtualMachines/start/action

  • Microsoft.Compute/virtualMachines/deallocate/action

AWS

  • ec2:StartInstances

  • ec2:StopInstances

GCP

  • compute.instances.start

  • compute.instances.stop

The permissions will typically be bundled into a custom role in the cloud vendor portal, and the role assigned to the CerteroX security principal.