Multi-cloud cost visibility for MSPs: managing 20 tenants from one dashboard

If you're a Managed Service Provider managing cloud infrastructure for multiple clients, you've lived the visibility problem: Client A is on Azure, Client B is on AWS, Client C runs multi-cloud. Each has different subscriptions, different budgets, different stakeholders who want different reports. You end up switching between three cloud consoles, maintaining spreadsheets for cross-client comparisons, and manually assembling reports that should be automated. Cloud Cost Optimizer was designed for exactly this scenario. ## One installation, unlimited tenants The MSP license tier allows unlimited cloud accounts (tenants). Connect one Service Principal per Azure tenant, one IAM credential per AWS organization, one Service Account per GCP organization. CCO auto-discovers all subscriptions under each account. Every subscription across every client appears in a single unified interface — but data scoping ensures each client team only sees their own data. ## Data scoping: who sees what CCO separates **what you can do** (role) from **what you can see** (scope): - **Owner and Admin** roles always see everything — your internal team managing all clients - **Analyst** users can be scoped to specific providers or subscriptions — a client's FinOps lead sees only their Azure subscriptions - **Viewer** users get read-only access to their scoped data — client executives reviewing dashboards Scoping cascades automatically across the entire platform: Cost Explorer, Analytics, Recommendations, Alerts, Budgets, Reports, and even the AI Assistant all respect the user's scope. ## SSO group sync: automatic scope management For MSPs managing dozens of users across client organizations, manual scope assignment doesn't scale. CCO's SSO group sync maps your Azure AD (or Google/OIDC) groups to internal data scopes: 1. Create a CCO group scoped to Client A's Azure subscriptions 2. Map your IdP group "Client-A-Team" to that CCO group 3. When anyone in that IdP group logs in via SSO, they automatically get Client A scope New team members get the right access on first login. No admin intervention needed. ## White-label branding The MSP tier includes full branding customization: - **Company name** — your name replaces "Cloud Cost Optimizer" everywhere - **Logo** — sidebar, login page, and all email headers - **Favicon** — browser tab - **Accent color** — email headers, login page gradient, PDF report headers Your clients see your brand, not ours. Reports, alert emails, budget notifications — all carry your identity. ## Per-client reporting Generate reports scoped to individual clients or aggregate across all: - **Single-client**: select one client's subscriptions, generate a Full Report with costs, recommendations, alerts, budgets, and savings - **Aggregate**: select all subscriptions for a cross-client overview with hierarchical breakdown (Provider → Subscription → Resource Group → Services) - **Automated delivery**: save Cost Explorer queries with email schedules — each client stakeholder gets their weekly cost update automatically ## The operational reality Running CCO for 20 clients isn't 20x the work. It's one Docker Compose stack, one PostgreSQL database, one set of background tasks. Cost data for all clients refreshes every 4 hours. Recommendations generate across all subscriptions in a single bulk operation. The incremental work per client is: connect their cloud account (5 minutes), create a data scope group (2 minutes), invite their team members (1 minute each). ## Try it The [live demo](https://cco-demo.quantumitpartners.com) includes 4 cloud accounts across Azure, AWS, and GCP — simulating a multi-tenant MSP environment. Log in as the admin user to see the full scope management experience, or as the analyst to see scoped data in action.