Coverage and responsibilities in cloud management

Updated: July 30, 2026

Want to summarize with AI?

Provides a comparison of tasks and the parties responsible for cloud management, including Cisco SD-WAN Cloud, Cloud-Pro, and Cloud-MSP services.

This table summarizes which parties are responsible for key tasks in Cisco SD-WAN Cloud management across different service models.

Table 1. Coverage and responsibilities in cloud management
Task	Cisco SD-WAN Cloud	Cisco SD-WAN Cloud-Pro	Cisco SD-WAN Cloud-MSP	Comments
Provision fabrics
Provision fabrics from Cisco Catalyst SD-WAN Portal	Customer	Customer	Cisco CloudOps
Monitor and troubleshoot cloud control components infrastructure
Monitor CPU and data disk utilization	Cisco CloudOps
Troubleshot loss of connectivity to network interfaces
Troubleshoot failure to reach instances
Monitor Cisco Catalyst SD-WAN services
Provide expiration notification of control component SSL certificates	Cisco CloudOps
Monitor availability of the Cisco SD-WAN Manager web server
Troubleshoot loss of control connection to the control components
Manage capacity of Cisco Catalyst SD-WAN control components	Cisco CloudOps			Cisco CloudOps monitors and upgrades the instance capacity according to the number of devices on the fabric. Cluster expansion may occur.
Disaster Recovery
Capture periodic volume snapshots	Cisco CloudOps			In multitenancy, the volume and configuration snapshots apply to the entire multitenant Cisco SD-WAN Manager cluster, not to individual tenants.
Capture periodic configuration backups	Cisco CloudOps
Capture on-demand snapshots	Not applicable	Customer	Customer
Restore fabric based on volume or configuration	Cisco CloudOps
Onboard Cisco SD-WAN Analytics	Not applicable *	Customer	Customer	* Cisco SD-WAN Analytics is onboarded by default for all Cisco Catalyst SD-WAN deployments.
Assist with on-premises to cloud migration	Cisco CloudOps			For more details on the on-premises to cloud migration, refer to On-Premises to Cloud Migration Process Details on the Cisco website.
Configure custom subnets and TACACS	Not applicable	Customer	Customer	Set up custom subnets and TACACS during Day-0 provisioning. For Day-N, you can open a TAC case with Cisco CloudOps. TACACS is available for Cisco SD-WAN Cloud-MSP fabrics via MT-Edge. Refer to the Cisco Catalyst SD-WAN Systems and Interfaces Configuration Guide for more information.
Renew control component certificates	Cisco CloudOps	Customer *	Customer *	* CloudOps can help renew certificates when requested.
Upgrade software
Upgrade control component software	Cisco CloudOps	Cisco CloudOps *	Cisco CloudOps *	* We perform upgrades only to recommended releases.
Upgrade edge device or node software	Customer
Upload and manage edge images in Cisco SD-WAN Manager Software Repository	Cisco CloudOps	Customer	Customer
Respond to Cisco CloudOps notifications to authorize the service window, approve an instance reboot, review changes, or verify changes carried out by Cisco CloudOps	Customer
Create Smart Accounts (SA) or Virtual Accounts (VA) on software.cisco.com and attach Cisco Catalyst SD-WAN subscribed devices to the SA and VA	Customer
Allow external management of SA and VA on PNP Connect	Customer	Not applicable	Not applicable	Do not allow external management of SA and VA on PNP Connect before provisioning a fabric in Cisco Catalyst SD-WAN Portal. The provisioning workflow automatically enables the external management.
Accept external management of SA and VA and map tenant VA to your SA and VA	Cisco CloudOps	Not applicable	Not applicable
Define device configuration templates and policies through Cisco SD-WAN Manager	Customer
Perform other activities that require you to log in to Cisco SD-WAN Manager. These activities include template and policy configuration and edge device management	Customer
Manage certificates for web servers	Cisco CloudOps	Customer *	Customer **	* CloudOps can help renew certificates when requested. ** CloudOps can renew web certificates if the Cisco SD-WAN Cloud-MSP fabric is deployed in the cisco.com domain.
Sync edge serials with credentials	Not applicable *	Customer	Customer	* Cisco SD-WAN Cloud customers can use their Cisco Connection Online (CCO) login credentials for SSO and syncing edge serials.
Manage the allowed IP access list	Not applicable	Customer	Customer
Configure a custom identity provider (IdP)	Not applicable	Customer	Customer	Cisco SD-WAN Cloud fabrics only support CCO as an identity provider. You can use SSO to navigate among Catalyst SD-WAN applications such as Cisco SD-WAN Manager, Cisco SD-WAN Analytics, and Cisco Catalyst SD-WAN Portal.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.