When you provide permissions, Workload Factory attaches a policy to the instance with permissions to manage resources and processes within your cloud provider account. This allows Workload Factory to execute various operations starting from discovery of your storage environments to deploying cloud resources such as volumes in storage management.

For FSx for ONTAP database workloads for example, when Workload Factory is granted with the required permissions, it scans all EC2 instances in a given account and region, and filters all Windows-based machines. If AWS Systems Manager (SSM) Agent is installed and running on the host and System Manager networking is configured properly, Workload Factory can access the Windows machine and verify whether SQL Server software is installed or not.

Workload Factory uses permissions to perform certain tasks. Permissions are bundled into set permission policies. Permission policies appear in the Codebox and are copiable JSON. Each cloud provider has its own set of permission policies tailored to the specific requirements and capabilities of that cloud environment. This documentation provides permission references for each cloud provider.