Configuring Cloud Account Management
Configuring the Cloud Account Management application involves a set of required tasks, integrations, and setups to be completed before initiating service account creation and provisioning.
The steps involved are different for AWS and Azure. These configurations are listed in the following tables.
|
No. |
Task |
Task Owner |
Impacted Feature |
Input |
Output |
Purpose |
|---|---|---|---|---|---|---|
|
1 |
[Omitted image "bus-email-server.svg"] Alt text:Set up and verify root email in AWS |
Email Admin |
Create an account |
None |
Email Alias |
A single AD email across multiple AWS accounts streamlines management, enhances security, and boosts collaboration. |
|
2 |
[Omitted image "bus-person.svg"] Alt text:Set up an IAM account for a ServiceNow user in AWS |
AWS Admin |
All features |
None |
AWS Access Key AWS Secret Key |
A centralized IAM user in the management account efficiently manages multiple AWS accounts via a CloudFormation template. |
|
3 |
[Omitted image "bus-whitepaper.svg"] Alt text:Set up suspension of an AWS account using service control policy |
AWS Admin |
Account suspension |
None |
SCP Policy ID |
Adding an account number to the AWS organization's Service Control Policy blocks the creation of new resources and helps prevent overspending, while existing resources remain unaffected. |
|
4 |
[Omitted image "bus-actionable-analytics.svg"] Alt text:Setting up Terraform and GitHub Note: This step isn’t required if cloud native interface is used for provisioning the account. |
Terraform Admin DevOps Admin |
Create an account for AWS |
AWS Access Key AWS Secret Key |
Terraform API Key Token Terraform OAuth Token ID Terraform Org VCS Identifier Terraform URL |
GitHub templates deployed to Terraform Cloud or Enterprise streamline account creation and promote consistent configurations. |
|
5 |
[Omitted image "bus-actionable-analytics.svg"] Alt text:Create a cloud native interface account configuration Note: This step isn’t required if Terraform is used for provisioning the account. |
ServiceNow AI Platform Admin |
Create an account for Cloud Native Interface |
None |
None |
No additional procedure is needed for cloud native interface. You can proceed to Install Cloud Workspace. |
|
6 |
[Omitted image "bus-work-order.svg"] Alt text:Populate Cloud Account Management dependent tables |
ServiceNow AI Platform Admin |
All features |
Discovery Credentials |
Cloud Organization AWS Org Unit Cloud Service Account |
Cloud Discovery or Service Graph Connector for AWS to import cloud organization structures and create subscription accounts. |
|
7 |
[Omitted image "bus-integration-and-apis.svg"] Alt text:Provisioning modes for Cloud Account Management in Cloud Workspace |
ServiceNow AI Platform Admin |
Create an account |
Email Alias Terraform Cloud API Key Token Terraform Cloud OAuth Token ID Terraform Cloud Org VCS Identifier |
None |
Streamline provisioning with flexible modes like Terraform and cloud native interface, centralizes management, enhances security, optimizes costs, and improves governance. |
|
8 |
[Omitted image "bus-investor-relations-1.svg"] Alt text:Set up scan configuration for data visualization |
ServiceNow AI Platform Admin |
Visualization |
None |
None |
Data visualization requires scanning all account violations based on the policy set. |
|
9 |
[Omitted image "bus-3-person.svg"] Alt text:Add members to the group |
ServiceNow AI Platform Admin |
All features |
None |
None |
Confirm that members are assigned to the correct group for them to perform the account request, approval, provisioning, and certification process. Assign members to the correct groups for proper permissions, helping prevent unauthorized access and promoting security. |
|
10 |
[Omitted image "bus-sdlc.svg"] Alt text:Creating configurations |
Cloud Workspace Admin |
All features |
None |
None |
Configure before creating, suspending, or scanning accounts. |
|
11 |
[Omitted image "bus-compliance.svg"] Alt text:Review default Cloud Account Management certification policy |
Cloud Workspace Admin |
All features |
None |
None |
Certify all cloud service accounts either created or boarded after discovery can be certified. The admin can also customize the default policy or create a policy. The default policy helps to certify all the available cloud service accounts once every 90 days. |
|
12 |
[Omitted image "bus-compliance.svg"] Alt text:Review request policies |
Cloud Workspace Admin |
All features |
None |
None |
Request Policies are rules that govern the behavior of request workflows by applying data checks and conditions. Regularly reviewing and updating these policies confirms that your cloud account request process remains consistent with the procedure for creating cloud subscription accounts. |
|
No. |
Name |
Task Owner |
Impacted feature |
Input |
Output |
Purpose |
|---|---|---|---|---|---|---|
|
1 |
[Omitted image "bus-whitepaper.svg"] Alt text:Configure account suspension in Azure |
Azure Admin |
Account suspension |
None |
OAuth Client ID OAuth Client Secret Tenant ID |
Configure the permission and assign the permission to a user who suspends or reactivates the account. |
|
2 |
[Omitted image "bus-person.svg"] Alt text:Set up Azure Service Principal credential |
ServiceNow AI Platform Admin |
All features |
OAuth Client ID OAuth Client Secret Tenant ID |
None |
Provide the Azure credentials obtained from your Azure administrator. These credentials are used to create a suspension profile and enables you to suspend temporarily or terminate Azure accounts as needed. |
|
3 |
[Omitted image "bus-actionable-analytics.svg"] Alt text:Create a cloud native interface account configuration Note: This step isn’t required if Terraform is used for provisioning the account. |
ServiceNow AI Platform Admin |
Create an account for Cloud Native Interface |
None |
None |
No additional procedure is needed for cloud native interface. You can proceed to Install Cloud Workspace. |
|
4 |
[Omitted image "bus-work-order.svg"] Alt text:Populate Cloud Account Management dependent tables |
ServiceNow AI Platform Admin |
All features |
Discovery Credentials |
Cloud Organization Azure Management Group Cloud Service Account |
Cloud Discovery import cloud organization structures and create subscription accounts. |
|
5 |
[Omitted image "bus-investor-relations-1.svg"] Alt text:Set up scan configuration for data visualization |
ServiceNow AI Platform Admin |
Visualization |
None |
None |
Data visualization requires scanning all account violations based on the policy set. |
|
6 |
[Omitted image "bus-3-person.svg"] Alt text:Add members to the group |
ServiceNow AI Platform Admin |
All features |
None |
None |
Confirm that members are assigned to the correct group for them to perform the account request, approval, provisioning, and certification process. Assign members to the correct groups for proper permissions, helping prevent unauthorized access and promoting security. |
|
7 |
[Omitted image "bus-sdlc.svg"] Alt text:Creating configurations |
Cloud Workspace Admin |
All features |
None |
None |
Configure before creating, suspending, or scanning accounts. |
|
8 |
[Omitted image "bus-compliance.svg"] Alt text:Review default Cloud Account Management certification policy |
Cloud Workspace Admin |
All features |
None |
None |
Certify all cloud service accounts either created or boarded after discovery can be certified. The admin can also customize the default policy or create a policy. The default policy helps to certify all the available cloud service accounts once every 90 days. |
--- title: Configuring Cloud Account Management description: Configuring the Cloud Account Management application involves a set of required tasks, integrations, and setups to be completed before initiating service account creation and provisioning. locale: en-US canonical_url: https://www.servicenow.com/docs/r/it-operations-management/cloud-account-management/configuring-cam.html release: brazil product: Cloud Account Management classification: cloud-account-management topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 9 keywords: [Configure Cloud Account Management, Configure Cloud Workspace, Configure CAM, setup Cloud Account Management] breadcrumb: [Cloud Account Management, ITOM Cloud Accelerate, IT Operations Management] --- # Configuring Cloud Account Management Configuring the Cloud Account Management application involves a set of required tasks, integrations, and setups to be completed before initiating service account creation and provisioning. The steps involved are different for AWS and Azure. These configurations are listed in the following tables. <table id="AWS_table"><thead><tr><th> No. </th><th> Task </th><th> Task Owner </th><th> Impacted Feature </th><th> Input </th><th> Output </th><th> Purpose </th></tr></thead><tbody><tr><td> 1 </td><td> \[Omitted image "bus-email-server.svg"\] Alt text:[Set up and verify root email in AWS](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/aws-setup.md) </td><td> Email Admin </td><td> Create an account </td><td> None </td><td> Email Alias </td><td> A single AD email across multiple AWS accounts streamlines management, enhances security, and boosts collaboration. </td></tr><tr><td> 2 </td><td> \[Omitted image "bus-person.svg"\] Alt text:[Set up an IAM account for a ServiceNow user in AWS](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/set-up-iam-account-in-aws.md) </td><td> AWS Admin </td><td> All features </td><td> None </td><td> AWS Access Key AWS Secret Key </td><td> A centralized IAM user in the management account efficiently manages multiple AWS accounts via a CloudFormation template. </td></tr><tr><td> 3 </td><td> \[Omitted image "bus-whitepaper.svg"\] Alt text:[Set up suspension of an AWS account using service control policy](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/configure-suspension-policy.md) </td><td> AWS Admin </td><td> Account suspension </td><td> None </td><td> SCP Policy ID </td><td> Adding an account number to the AWS organization's Service Control Policy blocks the creation of new resources and helps prevent overspending, while existing resources remain unaffected. </td></tr><tr><td> 4 </td><td> \[Omitted image "bus-actionable-analytics.svg"\] Alt text:[Setting up Terraform and GitHub](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/about-terraform-git-and-servicenow_0.md) **Note:** This step isn’t required if cloud native interface is used for provisioning the account. </td><td> Terraform Admin DevOps Admin </td><td> Create an account for AWS </td><td> AWS Access Key AWS Secret Key </td><td> Terraform API Key Token Terraform OAuth Token ID Terraform Org VCS Identifier Terraform URL </td><td> GitHub templates deployed to Terraform Cloud or Enterprise streamline account creation and promote consistent configurations. </td></tr><tr><td> 5 </td><td> \[Omitted image "bus-actionable-analytics.svg"\] Alt text:[Create a cloud native interface account configuration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/create-cloud-native-interface-config.md) **Note:** This step isn’t required if Terraform is used for provisioning the account. </td><td> ServiceNow AI Platform Admin </td><td> Create an account for Cloud Native Interface </td><td> None </td><td> None </td><td> No additional procedure is needed for cloud native interface. You can proceed to [Install Cloud Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/activate-cloud-account-management.md). </td></tr><tr><td> 6 </td><td> \[Omitted image "bus-work-order.svg"\] Alt text:[Populate Cloud Account Management dependent tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/add-account-details.md) 1. [Create a service account](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/create-service-account.md) 2. [Define and run discovery schedule](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/define-run-discovery-schedule.md) </td><td> ServiceNow AI Platform Admin </td><td> All features </td><td> Discovery Credentials </td><td> Cloud Organization AWS Org Unit Cloud Service Account </td><td> Cloud Discovery or Service Graph Connector for AWS to import cloud organization structures and create subscription accounts. </td></tr><tr><td> 7 </td><td> \[Omitted image "bus-integration-and-apis.svg"\] Alt text:[Provisioning modes for Cloud Account Management in Cloud Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/supported-provision-modes.md) - [Set up Terraform API key in ServiceNow](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown) - [Set up AWS API configuration information in ServiceNow](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/configure-aws-api-key-in-servicenow.md) </td><td> ServiceNow AI Platform Admin </td><td> Create an account </td><td> Email Alias Terraform Cloud API Key Token Terraform Cloud OAuth Token ID Terraform Cloud Org VCS Identifier </td><td> None </td><td> Streamline provisioning with flexible modes like Terraform and cloud native interface, centralizes management, enhances security, optimizes costs, and improves governance. </td></tr><tr><td> 8 </td><td> \[Omitted image "bus-investor-relations-1.svg"\] Alt text:[Set up scan configuration for data visualization](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/set-up-data-visualization.md) </td><td> ServiceNow AI Platform Admin </td><td> Visualization </td><td> None </td><td> None </td><td> Data visualization requires scanning all account violations based on the policy set. </td></tr><tr><td> 9 </td><td> \[Omitted image "bus-3-person.svg"\] Alt text:[Add members to the group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/add-member-group.md) </td><td> ServiceNow AI Platform Admin </td><td> All features </td><td> None </td><td> None </td><td> Confirm that members are assigned to the correct group for them to perform the account request, approval, provisioning, and certification process. Assign members to the correct groups for proper permissions, helping prevent unauthorized access and promoting security. </td></tr><tr><td> 10 </td><td> \[Omitted image "bus-sdlc.svg"\] Alt text:[Creating configurations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/cam-config.md) </td><td> Cloud Workspace Admin </td><td> All features </td><td> None </td><td> None </td><td> Configure before creating, suspending, or scanning accounts. </td></tr><tr><td> 11 </td><td> \[Omitted image "bus-compliance.svg"\] Alt text:[Review default Cloud Account Management certification policy](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/policy-setup.md) </td><td> Cloud Workspace Admin </td><td> All features </td><td> None </td><td> None </td><td> Certify all cloud service accounts either created or boarded after discovery can be certified. The admin can also customize the default policy or create a policy. The default policy helps to certify all the available cloud service accounts once every 90 days. </td></tr><tr><td> 12 </td><td> \[Omitted image "bus-compliance.svg"\] Alt text:[Review request policies](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/viewing-pace-policy.md) </td><td> Cloud Workspace Admin </td><td> All features </td><td> None </td><td> None </td><td> Request Policies are rules that govern the behavior of request workflows by applying data checks and conditions. Regularly reviewing and updating these policies confirms that your cloud account request process remains consistent with the procedure for creating cloud subscription accounts. </td></tr></tbody> </table><table id="Azure_table"><thead><tr><th> No. </th><th> Name </th><th> Task Owner </th><th> Impacted feature </th><th> Input </th><th> Output </th><th> Purpose </th></tr></thead><tbody><tr><td> 1 </td><td> \[Omitted image "bus-whitepaper.svg"\] Alt text:[Configure account suspension in Azure](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/configuring-azure-suspension-permission.md) </td><td> Azure Admin </td><td> Account suspension </td><td> None </td><td> OAuth Client ID OAuth Client Secret Tenant ID </td><td> Configure the permission and assign the permission to a user who suspends or reactivates the account. </td></tr><tr><td> 2 </td><td> \[Omitted image "bus-person.svg"\] Alt text:[Set up Azure Service Principal credential](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/set-up-azure-service-principal-credential.md) </td><td> ServiceNow AI Platform Admin </td><td> All features </td><td> OAuth Client ID OAuth Client Secret Tenant ID </td><td> None </td><td> Provide the Azure credentials obtained from your Azure administrator. These credentials are used to create a suspension profile and enables you to suspend temporarily or terminate Azure accounts as needed. </td></tr><tr><td> 3 </td><td> \[Omitted image "bus-actionable-analytics.svg"\] Alt text:[Create a cloud native interface account configuration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/create-cloud-native-interface-config.md) **Note:** This step isn’t required if Terraform is used for provisioning the account. </td><td> ServiceNow AI Platform Admin </td><td> Create an account for Cloud Native Interface </td><td> None </td><td> None </td><td> No additional procedure is needed for cloud native interface. You can proceed to [Install Cloud Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/activate-cloud-account-management.md). </td></tr><tr><td> 4 </td><td> \[Omitted image "bus-work-order.svg"\] Alt text:[Populate Cloud Account Management dependent tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/add-account-details.md) 1. [Create a service account](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/create-service-account.md) 2. [Define and run discovery schedule](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/define-run-discovery-schedule.md) </td><td> ServiceNow AI Platform Admin </td><td> All features </td><td> Discovery Credentials </td><td> Cloud Organization Azure Management Group Cloud Service Account </td><td> Cloud Discovery import cloud organization structures and create subscription accounts. </td></tr><tr><td> 5 </td><td> \[Omitted image "bus-investor-relations-1.svg"\] Alt text:[Set up scan configuration for data visualization](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/set-up-data-visualization.md) </td><td> ServiceNow AI Platform Admin </td><td> Visualization </td><td> None </td><td> None </td><td> Data visualization requires scanning all account violations based on the policy set. </td></tr><tr><td> 6 </td><td> \[Omitted image "bus-3-person.svg"\] Alt text:[Add members to the group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/add-member-group.md) </td><td> ServiceNow AI Platform Admin </td><td> All features </td><td> None </td><td> None </td><td> Confirm that members are assigned to the correct group for them to perform the account request, approval, provisioning, and certification process. Assign members to the correct groups for proper permissions, helping prevent unauthorized access and promoting security. </td></tr><tr><td> 7 </td><td> \[Omitted image "bus-sdlc.svg"\] Alt text:[Creating configurations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/cam-config.md) </td><td> Cloud Workspace Admin </td><td> All features </td><td> None </td><td> None </td><td> Configure before creating, suspending, or scanning accounts. </td></tr><tr><td> 8 </td><td> \[Omitted image "bus-compliance.svg"\] Alt text:[Review default Cloud Account Management certification policy](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/cloud-account-management/policy-setup.md) </td><td> Cloud Workspace Admin </td><td> All features </td><td> None </td><td> None </td><td> Certify all cloud service accounts either created or boarded after discovery can be certified. The admin can also customize the default policy or create a policy. The default policy helps to certify all the available cloud service accounts once every 90 days. </td></tr></tbody> </table>
| title | Configuring Cloud Account Management |
| description | Configuring the Cloud Account Management application involves a set of required tasks, integrations, and setups to be completed before initiating service account creation and provisioning. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/it-operations-management/cloud-account-management/configuring-cam.html |
| release | brazil |
| product | Cloud Account Management |
| classification | cloud-account-management |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 9 |
| keywords | Configure Cloud Account ManagementConfigure Cloud WorkspaceConfigure CAMsetup Cloud Account Management |
| breadcrumb | Cloud Account ManagementITOM Cloud AccelerateIT Operations Management |