How can we help you?

How can I resolve permission errors when connecting a cloud account to OpsNow?

Most cloud account connection issues in OpsNow FinOps Plus are caused by insufficient IAM permissions, missing API configurations, or incomplete setup steps.
Please check the following based on your cloud provider:

✅ For AWS:

  • Make sure the CloudFormation stack was executed successfully.
  • The user or role running the stack must have IAM role creation permissions.
  • Confirm that the OpsNowStackRole or similar IAM role was created in your AWS account.
  • Verify that the role includes at least ReadOnlyAccess or equivalent policies.

✅ For Azure:

  • The registered app in Azure must be assigned at least the Reader role.
  • Ensure API permissions such as user_impersonation are granted in the App Registration.
  • If the Client Secret is expired or invalid, generate a new one and update it in OpsNow.

✅ For GCP:

  • Check that Billing Export is linked to a BigQuery Dataset.
  • The service account must have Editor or higher permissions on the dataset.
  • Make sure the JSON key file is valid and current.
  • Required APIs like Cloud Billing and BigQuery API must be enabled in your GCP project.

📌 These issues are typically related to cloud security configurations.
If the problem persists, please reattempt the connection using an admin-level account or contact your cloud security administrator.