Overview

The Organizations service helps you govern multiple accounts within your organization. It enables you to consolidate multiple Huawei Cloud accounts into an organization that you create and centrally manage these accounts. You can use Organizations to apply access policies to different accounts in your organization. This helps you better meet the security and compliance requirements of your business.

CTS supports multi-account management of Organizations.

Use an organization administrator account to set CTS as a trusted service on the Organizations console and specify a delegated administrator account.
You can use the delegated administrator account to configure an organization tracker in CTS. Then the delegated administrator account can implement cloud audit capabilities, such as security audit.

Constraints

Only one organization tracker can be enabled for an organization.
Currently, the organization function is supported only by management trackers and not supported by data trackers.
Before removing a delegated administrator, disable the organization tracker and then remove the delegated administrator on the Organization console.
Traces of a single account can be viewed on the Trace List page of the CTS console. For traces of multiple accounts, you can view only the traces of your own account on the CTS console. To view traces of all accounts in the organization, go to the OBS bucket or the CTS/system-trace log stream configured for the organization tracker.
Organization trackers rely on certain Organizations APIs to implement the multi-account management capability of Organizations. Users without the enterprise project management function enabled can use this capability as long as they have the CTS permissions. However, users with enterprise project management function enabled must also be granted certain IAM permissions to use this capability.