Controlled organizations

A controlled organization is an additional organization that allows you to centrally manage your organization, users, and user access settings across different regions from a single interface. After you link a region, you can manage these entities by setting up an organization in the main region; the resources of the organizations remain isolated and available only within their own region.

If the main and controlled organizations are in different regions, create a separate billing account in the controlled organization’s region to pay for its resources. For businesses and individual entrepreneurs, you need to activate the new billing account; until you activate it, you will not be able to pay for resources.

If the main and controlled organizations are in the same region, by default you pay for the controlled organization's resources from the billing account linked to the main organization.

Controlled organization in Yandex Cloud UIsControlled organization in Yandex Cloud UIs

A controlled organization is a technical entity which is not displayed in Yandex Cloud UIs: you will not see it listed among your account's organizations in the management console or in Cloud Center. You cannot switch to a controlled organization or invite users to it.

For a controlled organization, the workflow will be different from that of a regular organization:

• You manage users, groups, federations, and roles in the main organization. In a controlled organization, you cannot create user groups or federations or add users to them: the required entities are automatically synchronized from the main organization.
• In a linked region, resources are created inside clouds belonging to the controlled organization. You will see such clouds in your account’s general list of clouds; work with them in the management console of the relevant region the same way as with the clouds of the main organization.

SyncingSyncing

The following entities are automatically synced between the controlled organization and the main one:

• Yandex accounts and federated accounts.
• User groups and group membership.
• Federations.
• Roles.
• Quotas for entities created before connecting the controlled organization.

Not synced:

• Quotas for entities created after connecting the controlled organization.
• OS Login settings.

How to get startedHow to get started

To get started with resources in another region:

1. Link a region to your main organization: this will create a controlled organization.
2. Wait for the initial synchronization between the main and controlled organizations to complete. It may take several hours.
3. Create a cloud in the linked region.
4. Create resources in the new cloud and manage them via that region’s management console.