---
name: track-spend-with-cloudability-deploy
title: Deploying with IBM Cloud projects
description: Deploying with IBM Cloud Projects ensures that your infrastructure is managed, secure, and always compliant by using infrastructure as code (IaC) and integrated compliance tools. For more information, see Learn about IaC deployments with projects.
last-updated: 2026-01-06
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/track-spend-with-cloudability?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Deploying with IBM Cloud projects
{: #deploy-cloud}

Deploying with IBM Cloud Projects ensures that your infrastructure is managed, secure, and always compliant by using infrastructure as code (IaC) and integrated compliance tools. For more information, see [Learn about IaC deployments with projects](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-understanding-projects&format=markdown).


## Before you begin
{: #required-access-for-projects}

Ensure that you created [iam credentials](https://cloud.ibm.com/docs/track-spend-with-cloudability?topic=track-spend-with-cloudability-planning&format=markdown) to authorize the project deployment and have the permissions to create a project in the desired account. These access permissions include:

- The Editor role on the Projects service
- The Editor and Manager role on the Schematics service
- The Viewer role on the resource group for the project

For more information, see [Assigning users access to projects](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-access-project&format=markdown).

### Deploying the IBM Cloudability Enablement deployable architecture
{: #running-cloudability-enablement}

Complete the following steps to run the Cloudability Enablement deployable architecture with IBM Cloud Projects:

1.  From the IBM Cloud [catalog](https://cloud.ibm.com/catalog?search=Cloudability%20Enablement%20label%3Adeployable_architecture#search_results){: external}, search for Cloudability Enablement, and click the tile for the deployable architecture.
2.  Select the latest product version from the Architecture section.
3.  Click **Add to project**.
    1.  Name your project, enter a description, and specify a configuration name. Then, click **Create**.
    2.  Select the region and the resource group where project resources are created.
4.  Edit and validate the configuration:
    1.  Select your authentication method that corresponds to your iam operator that was [previously configured](https://cloud.ibm.com/docs/track-spend-with-cloudability?topic=track-spend-with-cloudability-planning&format=markdown#cloudability-iam-prereqs). You can use a trusted profile, an existing secret in Secrets Manager, or add your API key directly. For more information, see: [Using an API key or secret to authorize projects](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-authorize-project&format=markdown).
    2.  On the **Required** tab, select the `cloudability_auth_type` corresponding to the desired authentication method:
        a. `none`: Only enables billing exports. Cloudability is not granted any permissions to access the bucket. Proceed to step 5.
        b. `manual`: Grants permissions to Cloudability, but does not register the IBM Cloud account in Cloudability. This needs to be done manually within Cloudability. No Cloudability API key is required for this method. Proceed to step 4.
    3.  Configure additional Cloudability authentication inputs corresponding to the selected `cloudability_auth_type`:
        a. **Cloudability Authentication**: On the **Required** tab, enter the `cloudability_api_key` with the API key that is created by following the [acquiring Cloudability API key](https://cloud.ibm.com/docs/track-spend-with-cloudability?topic=track-spend-with-cloudability-planning&format=markdown#acquiring-api-key) guide.
        b. **Access Administration API Key**: On the **Required** tab, enter the `frontdoor_public_key`, `frontdoor_secret_key` and `cloudability_environment_id` created by following the [acquiring access administration API key](https://cloud.ibm.com/docs/track-spend-with-cloudability?topic=track-spend-with-cloudability-planning&format=markdown#frontdoor-api-key) guide.
    4.  If the IBM Cloud account is an enterprise account, then set `is_enterprise_account` to **True** and on the **Optional** tab enter in the value of the `enterprise_id`, which is available on the [enterprise dashboard](https://cloud.ibm.com/enterprise) if your account is an enterprise account.
    5.  Optionally, update any other parameters. See the [configuration reference](https://cloud.ibm.com/docs/track-spend-with-cloudability?topic=track-spend-with-cloudability-configure&format=markdown) for documentation on the available parameters.
    6.  Save the configuration.
    7.  Click **Validate**. Validation takes a few minutes.

        IBM Cloud Projects run a Security and Compliance Center (SCC) scan against the IBM Cloud for Financial Services profile. Controls that are part of the deployable architecture and are included in the list of supported Compliance Manager rules are checked when you validate the configuration.
{: important}

5.  Deploy the configuration. After you validate your configuration, you can deploy it to your target account:

    1.  Review the input values and make any necessary changes.
    2.  Click **Deploy**. Deploying the deployable architecture can take a few minutes. You are notified when the deployment is successful.

6.  Review the outputs from the deployable architecture.

7.  If using the `manual` mode for the `cloudability_auth_type`.

    1.  Login to Cloudability UI and navigate to **Settings** -> **Vendor Credentials** and Click **Add Datasource** and select **IBM**.
    2.  Complete the form based on the outputs from the deployable architecture.
    3. Click **Verify Credentials**

8.  You can validate that the connection to IBM Cloud was completed in Cloudability under [**Vendor Credentials**](https://app.apptio.com/cloudability#/credentials/ibm)

During the validation and deployment process, monitor the [needs attention items](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-needs-attention-projects&format=markdown). The widget reflects any issue that occurs in your configurations.
{: remember}

### Updating the IBM Cloudability Enablement deployable architecture
{: #updating-cloudability-enablement}


1. Select the project from the [projects list](https://cloud.ibm.com/projects) that contains the IBM Cloudability Enablement deployable architecture
2. Go to the Configurations tab, select the configuration corresponding to the Cloudability Enablement deployable architecture.
3. Click the **Edit** button.
4. Update the desired [configuration inputs](https://cloud.ibm.com/docs/track-spend-with-cloudability?topic=track-spend-with-cloudability-configure&format=markdown) or [upgrade to a new version](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-needs-attention-projects&interface=ui&format=markdown#na-version-update)
5. Click the **Save** button
6. Click the **Validate** button. A modal dialog is displayed which provides more details about your in-progress validation.

## Next Steps
{: #deploy-next-steps}

Congratulations your IBM Cloud account should now be added to Cloudability. Your billing data from your account should appear in Cloudability within 24 hours. You can also request that up to a year of [historical data be added to your bucket](https://cloud.ibm.com/docs/account?topic=account-exporting-your-usage&interface=ui&format=markdown#access-historical-data). If you experience any issues during the validation stage, consult the [getting help and support guide](https://cloud.ibm.com/docs/track-spend-with-cloudability?topic=track-spend-with-cloudability-help-and-support&format=markdown).