Overview
Control access to your cloud resources by creating and managing resource policies for different teams.
Resource Policies: Managing Access and Usage
Resource policies focus on managing resource access, including deployment locations and usage limits. They control:
Which regions a team can deploy instances within.
How much of each resource type can be deployed globally, regionally, and by resource group within a region.
Access to individual GPU pools.
Each team must have exactly one resource policy. While policies cannot be unassigned, they can be edited or replaced.
Resource Policy Access Levels and Restrictions
Resource policies offer granular control through access levels and types:
Access Level | Description |
|---|---|
Global | Restrictions apply to all resources for assigned teams. |
Regional | Restrictions apply to specific regions. |
Resource Groups | Restrictions apply to a subset of resources within a region. |
Access Type | Description |
|---|---|
No Access | Usage of the resource, region, resource group, or GPU pool is restricted. |
Restricted | A maximum value limits the amount of the resource a team can use. |
Unlimited | No restriction is in place at the given level. |
Global restrictions are total restrictions across all regions and resource groups. Regional and resource group restrictions cannot exceed global restrictions for any resource type.
Creating a Resource Policy
Click the Create policy button in the Resource policies table.
Enter a name for your policy and click Next step.
Setting Resource Restrictions
Select a region using the Select region dropdown and choose an access level.
You may add global resource restrictions by clicking Add global restriction.
In the modal, specify the resource Type, Value, and Unit for the global restriction.
Click Preview to review your settings.
The preview screen shows resource group level restrictions. You can also modify values directly within these tables.
Click Next step twice to proceed to assigning teams.
If you need to make changes to the resource settings, you can use the Previous step button to go back.
Assigning Teams (Optional)
You may assign the policy to specific teams.
Search for a team by name and select the desired teams by clicking the checkbox next to each one.
Click Assign to assign the teams and create the policy.
You can also Skip & Finish to create the policy without assigning it to a team now. You cannot unassign teams. To modify team assignments, you must update the policy after creating it. Create a new policy to assign teams if needed.
Managing Existing Policies
View existing resource policies in the Resource policies table.
The table displays the Policy Name, Teams Assigned To, No. of Regions, Created On date, and Updated On date.
Updating Teams
Right-click a policy in the Resource policies table or open the three-dot menu to open a context menu.
Select Assign teams to add teams to the policy or Update teams to change existing team assignments.
Select or deselect teams for the policy.
Click Update to confirm your changes or Assign to assign the selected teams.
Cloning a Policy
Open the context menu for an existing policy and click Clone.
Deleting a Policy
Open the context menu for the policy you want to delete and click Delete.
Policy Constraints
Resource policies contain constraints that determine which resources a team can use (e.g., regions, amount of resources).
Global Resource Restrictions
Global resource restrictions apply across all regions and resource groups.
Region-Level Restrictions
Region-level restrictions do not override global restrictions.