Cost governance features
Allocate every dollar. Hold every team accountable.
CloudMonitor's governance suite gives finance, engineering, and exec teams a shared view of who spent what — with the controls to enforce policy, set budgets, and run chargeback.
Cost groups
Model your organization. Not your subscriptions.
Cost groups are CloudMonitor's allocation primitive. Group resources by business unit, project, product, customer, environment — whatever maps to how your company runs.
- Nested hierarchy. Up to 5 levels deep. Production → Region → Product line → Service.
- Tag-based or resource-based. Build groups from tag values, resource groups, or subscription IDs.
- Virtual tags. Define computed tags using rules — fix tagging gaps without redeploying.
- Shared-cost allocation. Split shared services across consuming cost groups by rule.
Ownership & RBAC
Every cost group has an owner. And only the right people see it.
Assign owners — Finance Owner, Technical Owner, Business Owner — to every cost group. Use role-based access to scope what each user sees.
- Three owner roles per group. Finance, Technical, and Business owners — independently assigned.
- Row-level security on reports. Engineers see their cost group only. Finance sees everything. Auditable.
- Azure AD integration. Sync owner identities and roles from Azure AD groups.
- Last-login tracking. See which owners actively engage with their cost group reports.
Budgets & policy
Set budgets. Enforce policy. Catch breaches.
Define monthly, quarterly, and annual budgets per cost group with multi-threshold alerts. Define policy rules — disallow oversized VMs, untagged resources, prohibited regions.
- Multi-threshold budget alerts. Notify at 50%, 80%, and 100% of budget — to different audiences.
- Forecast vs budget. See where current spend is heading and act before breach.
- Policy rules. Disallow VMs above a SKU, untagged resources, or regions outside your data-residency.
- Policy-breach webhooks. Fire a webhook into Azure Automation or Logic Apps so your runbook can act when a policy breach is detected.
Chargeback & showback
Charge back to the right cost center. Down to the dollar.
Export per-cost-group invoices for SAP, Workday, NetSuite, or any finance system. Run showback for visibility-only customers; chargeback for actual recoveries.
- Per-cost-group invoicing. Generate monthly cost-center invoices in finance-ready CSV.
- RI chargeback. Allocate RI cost and savings back to consuming cost groups.
- Multi-currency support. For multi-region tenants, convert to local currency at the right FX.
- SAP / Finance integration. Push the journal directly to your finance system via webhook.
Chargeback invoice export
Per-cost-group monthly invoice with RI and shared-cost allocations.
Audit trail
Every change. Logged forever.
Every change to cost groups, tags, virtual tags, policy rules, ownership, and budgets is logged. Exportable for audit and compliance.
- Per-object change log. Who changed what, when, and from what value.
- Exportable for SOX & ISO audits. CSV exports formatted for typical audit toolchains.
- Anomaly investigation context. When investigating an anomaly, the audit log shows recent deployments and changes.
Continue exploring
Where to go next.
CloudMonitor for project managers
How a FinOps PM uses cost groups, RBAC, and chargeback workflows to run the practice.
CloudMonitor for the CFO
Chargeback, accruals, executive dashboard, and how finance reads CloudMonitor numbers.
Cost accountability
Why every dollar of Azure spend needs an owner — and how cost groups make that real.
Governance in CloudMonitor
Ownership, alerts, and a live inventory.
The governance views that make accountability real — cost-by-owner reporting, Teams-bot alerting, and a resource inventory across every subscription.
Ownership & accountability
Every cost mapped to an owner — and their last login.
See cost by business owner with last-login times surfaced, so dormant accounts and orphaned resources have a name attached well before the renewal conversation.
- Owner on every resource, inherited from tags and cost groups
- Last-login signal to flag dormant accounts
- Drill from owner to resource in a click
Real-time alerts
Budget breaches and anomalies, straight to Teams.
The CloudMonitor Teams bot routes anomaly and budget-breach alerts to the right channel per cost group — acknowledge, snooze, or hand off to ITSM without leaving Teams.
Resource inventory
Every resource, every subscription, one inventory.
A live inventory of every Azure resource across subscriptions — filterable by cost group, tag, owner, and creation date — so nothing runs unaccounted for.
Set up your cost-group hierarchy in 30 minutes.
Try the live demo — pre-populated with a multi-tenant cost-group structure.
