Enable customer-controlled onboarding of hyperscaler accounts via approval workflow (no MSP credential handling)

Current Situation

In Cloudability MSP, hyperscaler integrations (e.g., AWS, Azure, GCP) must be onboarded manually by the MSP using vendor credentials. End customers cannot add their own accounts directly, as credential management is restricted to MSP-controlled environments.

This creates a limitation in scenarios where customers hold direct contracts with hyperscalers (e.g., Microsoft MCA-E, AWS Enterprise Agreements), which are not managed or billed via the MSP.

Challenge

• Customers are required to share sensitive vendor credentials with the MSP
• This contradicts typical governance and security models
• It creates unnecessary operational effort for both MSP and customer
• It limits scalability in multi-account / multi-contract enterprise environments

From a process perspective, this is especially problematic in:

• Enterprise customers with multiple independently managed cloud contracts
• Regulated environments where credential sharing is restricted
• Scenarios where the MSP acts only as a FinOps / reporting provider, not as an operator

Proposed Enhancement

Introduce a customer-driven onboarding capability with an MSP approval workflow, enabling:

• Customers to connect their own hyperscaler accounts directly (within their instance)
• MSP to retain full governance via approval/review process before activation
• No requirement for MSP to handle or store vendor credentials
• Integration activation only after explicit MSP validation and approval

Key Functional Requirements

• Role-based access for customers to initiate integrations
• Approval workflow (e.g., "pending → approved → active")
• Visibility for MSP into requested integrations before approval
• Cost transparency before/after enabling integrations
• Optional policy controls (e.g., allowed providers, regions, account types)

Business Value

✅ Security & Compliance

• Eliminates need for credential sharing
• Supports zero-trust and least-privilege models

✅ Operational Efficiency

• Reduces onboarding effort for MSP teams
• Enables faster customer-driven integrations

✅ Scalability

• Supports enterprise customers with multiple direct contracts
• Improves usability in complex FinOps scenarios

✅ Customer Experience

• Empowers customers while maintaining MSP governance
• Aligns with modern cloud self-service paradigms