Onboard end customers

The end customer onboarding process consists of two groups of tasks:

• Add customer and Create contract are performed by the distributor or reseller.

• AWS onboarding and Enable features are performed by the end customer. Skip these tasks if the billing model of your operation is AWS Billing Transfer.

Required permission

• Distributor/reseller: Your DoiT account must have the Admin role.

• End customer:

  • Your DoiT account must have the Admin role.

  • You must have the following permissions on the AWS management accounts that you want to connect:

    iam:CreatePolicy
    iam:CreateRole
    iam:AttachRolePolicy
    iam:GetRole
    cloudformation:CreateStack
    cloudformation:GetTemplateSummary
    sns:Publish

    You can also attach to your user or role the AWS managed policy AdministratorAccess, which fully covers the permissions above but grants broader access.

Onboard a customer

The onboarding process of an end customer consists of multiple parts, conducted by users with the Admin role along the hierarchy.

Part 1: Add customer

This part is performed by the distributor or reseller:

1. Sign in to the DoiT console.

2. Add a customer. Make sure to select the correct reseller as parent when configuring the customer profile.

Part 2: Create contract

The distributor or reseller admin user needs to create a contract for the end customer before the end customer can start connecting cloud accounts.

The contract must be in active or scheduled status for AWS linking to be available.

Part 3: AWS onboarding

Note

Skip this task if your reseller uses AWS Billing Transfer.

This part is performed by the end customer.

Follow the instructions to connect your AWS account.

Part 4 (Optional): Enable features

Note

Skip this task if your reseller uses AWS Billing Transfer. You can link your AWS accounts via DoiT console later to grant permissions for advanced DoiT features.

The last step in the connection wizard is optional. It provides two options:

• Complete: To finish the onboarding process and enable other features later.

• Link new account: To start enabling advanced features on the linked AWS account. You can also edit a linked account later to add or change feature permissions.

  

  End customers see a curated Cloud Connect feature set:

  • Trusted Advisor insights. Selected by default.

  • Cost Optimization Hub insights. Selected by default.

  • Security Hub insights. Selected by default.

  • CloudFlow. Available for management accounts. Required to enable OU and account selection across an AWS organization and to create an AWS connection in CloudFlow.

  • DCI Composer: Available when your DoiT plan includes Composer.

Validation

Review the onboarding progress and take necessary actions.

See also

• Notifications: Subscribe to AWS Billing Data Import Alert

• Linked AWS accounts: Check the status of end customer accounts, restart the onboarding process, or offboard an account.