Authorizing an Aggregator Account

Scenarios

To aggregate data from a source account, an aggregator account must obtain authorization from this source account. After the authorization, all aggregators created before or after the authorization with this aggregator account can aggregate data from this source account.

An organization specific aggregator can collect resource data of all member accounts in an organization without source account authorization.

This section describes the following topics:

• Adding Authorization
• Accepting Authorization
• Deleting an Authorization

Adding Authorization

You can use the Add Authorization function to authorize an aggregator account.

1. Log in to the management console.
2. Click in the upper left corner. Under Management & Governance, click Config.
3. In the navigation pane on the left, choose Resource Aggregation > Authorizations.
4. Click Add Authorization in the upper right corner of the page.
5. In the Add Authorization dialog box, enter the ID of the aggregator account which you want to authorize.
   Figure 1 Adding authorization
   

6. Click OK.

   After the authorization is complete, an authorization record will be displayed in the Authorized list.

Accepting Authorization

You can approve a pending authorization request to authorize an aggregator account.

1. Log in to the management console.
2. Click in the upper left corner. Under Management & Governance, click Config.
3. In the navigation pane on the left, choose Resource Aggregation > Authorizations.
4. Click the Pending Authorization tab, locate the account ID that sends an authorization request to be processed in the list, and click Authorize in the Operation column.
5. In the displayed dialog box, click OK.

   After the authorization request is accepted, the authorization record is displayed in the Authorized list.

   Figure 2 Accepting authorization
   

Deleting an Authorization

You can revoke authorization from an aggregator account.

1. Log in to the management console.
2. Click in the upper left corner. Under Management & Governance, click Config.
3. In the navigation pane on the left, choose Resource Aggregation > Authorizations.
4. Locate the authorization to be deleted in the list, and click Delete in the Operation column.
5. In the displayed dialog box, click OK.

   The authorization record will be moved to the Pending Authorization tab, and the authorization status will change to Pending authorization.

   To authorize the aggregator account again, you can click Authorize in the Operation column in the Pending Authorization list.

   Figure 3 Delete Authorization
   

6. In the Pending Authorization list, locate the authorization, and click Delete in the Operation column. In the displayed dialog box, click OK to delete the authorization record completely.
   NOTE:

   You can authorize an aggregator account again after revoking the authorization from this account.