Security: your account, your access and how you sign in
What the Security page shows about the account you are signed in with, the role you hold in the workspace, and what CostGuard does not keep about your sign-in.
What this page is for
Security answers three questions about you: which account this browser is signed in with, which role you hold in the workspace you are working in, and what CostGuard knows, or does not know, about your sign-in.
The page changes nothing about your account. Your password, multi-factor authentication and sign-in rules stay with Microsoft, where your organisation manages them.
Before you start
Every member of a workspace can open Security, on every plan. The role panel needs a selected workspace.
Your account
The panel “Your account” shows the account this browser is signed in with:
- “Name” and “Email”, as Microsoft sent them when you signed in.
- “Sign-in method”: Microsoft Entra ID (Microsoft work or school account).
- CostGuard holds no password for your account: your credentials are entered at Microsoft, not in CostGuard.
When Microsoft did not send a value, the panel says “Not available” rather than guess it.
Your access to the workspace
The panel “Your access to this workspace” shows “Your role” in the workspace you are working in and what that role allows. The role is read on the server for the selected workspace; another workspace may give you another role.
An owner sees “Open Members and roles”, the page where roles are changed. Only a workspace owner can change roles or remove access. Ask an owner of this workspace if your role needs to change.
If the role cannot be read at that moment, the panel says so and does not conclude that you have no access; try again with “Refresh”.
Sessions and sign-in rules
CostGuard keeps no record of your sign-in sessions or of the devices you use, so it cannot list them here and cannot end a session on another device. Signing out below ends your CostGuard session in this browser only.
Sign-in rules such as multi-factor authentication, conditional access and password policy are set and applied by your organisation in Microsoft Entra ID. CostGuard is not told which of them applied to your sign-in, so it does not report their state. Ask your Microsoft Entra ID administrator to review them.
“Sign out of this browser” is the same sign-out as the account menu in the top bar. It ends your CostGuard session in this browser; your Microsoft account itself is not signed out of other apps or devices.
Go further
The links at the bottom of the page lead on:
- “Data access and permissions”: What CostGuard reads from Azure, and who in the workspace can see it.
- “Azure connections”: The Azure subscriptions CostGuard reads, and whether each connection works.
- “Audit log”, for owners: Who changed what in this workspace, and when.
- “Trust Center - security” and “Security overview”, on the public site, in your language.
What you may see instead of figures
While the page reads, grey bars stand where the panels will appear. After that, the page may show one of these instead:
- “Select a workspace to see the role you hold in it.”
- “CostGuard has no active membership recorded for you in the selected workspace.”
- A role that could not be read: the panel says so and offers nothing it cannot confirm; the account panel is still shown.
- A sign-in that could not be renewed: sign in again; nothing on the page is changed by it.
What each plan includes
The table shows the first plan that includes each part of the page. Every plan above it includes it too.
| Feature | Free | Starter | Growth | Pro | Enterprise |
|---|---|---|---|---|---|
| The Security page | Included | Included | Included | Included | Included |
Every plan includes this page, and it never shows a price.
Troubleshooting
The page shows the wrong account
This browser is signed in to Microsoft with another account. Sign out, then sign in with the account you meant to use.
How do I end a session on another device?
Sign out on that device. CostGuard keeps no list of sessions, so it cannot end one elsewhere; your Microsoft Entra ID administrator can revoke your sign-in sessions there.
Does CostGuard use multi-factor authentication?
Multi-factor authentication is a rule your organisation sets in Microsoft Entra ID; Microsoft applies it when you sign in. CostGuard is not told whether it applied, so the page does not report it.
My role needs to change
Only an owner of the workspace can change a role, on “Members”. Ask an owner.