User Permissions System

StratoLens access control built on Azure Entra ID. Grant access to users or Entra groups, pick from six built-in roles or define your own, and restrict any grant to specific Azure subscriptions or management groups.

StratoLens is a self-hosted Azure visibility platform. It runs in your own tenant; your infrastructure data never leaves it.

The Problem

Giving teammates the right level of access to a cloud-management tool usually means a tradeoff:

All-or-nothing roles force you to over-provision people who only need read access to one area
Separate user lists drift out of sync with the identity directory you already maintain
No data scoping means a contractor brought in for one subscription sees the entire estate

The Solution

StratoLens uses Azure Entra ID for sign-in and layers role and scope controls on top:

Sign in with Entra ID: No separate StratoLens password. Group membership flows through automatically
Six built-in roles: Viewer, Operator, Manager, Administrator, Cost Analyst, Resource Viewer
Custom roles: Pick from 30 permissions across Resource Access, Security & Compliance, Scanning & Operations, and System Settings
Data Access Scopes: Restrict any user or group to specific Azure subscriptions or management groups

Key Benefits

Grant access to Entra groups so team membership stays in sync automatically

Six built-in roles cover the common cases without any custom configuration

Custom roles let you build exactly the permission set a job needs

Data Access Scopes restrict any grant to specific subscriptions or management groups

Common Use Cases

Onboard a new FinOps analyst with the Cost Analyst role and no setup

Restrict a contractor to a single subscription with a scoped Viewer grant

Build a custom Auditor role that sees policy compliance and audit logs but no cost data

Want the Details?

Explore our documentation to see how User Permissions System works in detail.

Read Documentation View All Features

Start Your 28-Day Free Trial

Every feature unlocked. Deploys to your Azure tenant. No data leaves your tenant.

Available now on the Azure Marketplace.

Start free trial

Not ready to install anything? Browse the Azure Footguns Database: 55+ documented ways Azure quietly costs money or creates risk.

Request a demo

StratoLens catches the cost waste, access risk, and config drift across your whole Azure estate, from inside your own tenant, so your data never leaves it.