Skip to main content

Offboarding

Offboarding from Organizational Onboarding​

For customers who want to completely remove Upwind integration from their Azure tenant:

Step 1: Remove Cloud Scanner Resources​

Identify and delete Cloud Scanner resource groups deployed by Upwind:

# List Cloud Scanner resource groups by naming pattern
az group list --query "[?starts_with(name, 'upwind-cs-rg-ucsc-')].{Name:name, Location:location, Tags:tags}"

# List Cloud Scanner resource groups by Upwind Org ID tag
az group list --query "[?tags.OrgID && starts_with(tags.OrgID, 'org_')].{Name:name, Location:location, OrgID:tags.OrgID}"

# Filter resource groups for your specific organization ID and delete them
ORG_ID="org_your-organization-id"  # Replace with your actual Upwind organization ID
RESOURCE_GROUPS=$(az group list --query "[?tags.OrgID=='${ORG_ID}' && starts_with(name, 'upwind-cs-rg-ucsc-')].name" -o tsv)

# Delete all identified resource groups
for RG in $RESOURCE_GROUPS; do
    az group delete --name "$RG" --yes --no-wait
done

Using Azure Portal​

  1. Navigate to Resource Groups
  2. Look for resource groups with naming pattern: upwind-cs-rg-ucsc-*
  3. Verify they have the tag OrgID=org_xxx (your Upwind organization ID)
  4. Delete the identified resource groups

Step 2: Destroy Terraform Onboarding Module​

Remove the organizational onboarding infrastructure:

# Navigate to your Terraform directory
cd /path/to/your/terraform/config

# Destroy the onboarding module
terraform destroy

Step 3: Revoke Cloud Credentials​

Revoke all cloud credentials associated with the tenant:

  1. Navigate to Upwind Console:

  2. Revoke Credentials:

    • Locate your Azure tenant entry
    • Revoke all associated cloud credentials
    • This will disable Upwind's access to your Azure resources

Step 4: Request Tenant Entry Deletion​

Important: Tenant entry deletion is an administrative action that must be performed by Upwind. Your tenant cannot be re-onboarded until the tenant entry in Upwind is deleted.

  • Contact Upwind support to request complete tenant entry removal from the platform
  • Provide your organization ID and tenant ID for verification
Complete Offboarding
  • Service interruption: All Upwind monitoring and scanning will stop immediately
  • Data retention: Contact Upwind support about data retention policies
  • Irreversible action: Complete offboarding cannot be easily undone

Support​

If you encounter any issues not covered in this guide:

  1. Check the Azure Activity Log for any error messages
  2. Review RBAC assignments and permissions
  3. Contact Upwind support with:
    • Detailed error messages
    • Azure subscription ID
    • Resource group name
    • Relevant log entries