# RACI

## Objective and Definitions <a href="#matomoraci-objectiveanddefinitions" id="matomoraci-objectiveanddefinitions"></a>

To have a common understanding about the responsibilities and duties between cegedim.cloud and the customer, we use a RACI matrix.

{% embed url="<https://en.wikipedia.org/wiki/Responsibility_assignment_matrix>" %}

<table data-header-hidden><thead><tr><th width="87"></th><th width="149"></th><th></th></tr></thead><tbody><tr><td><strong>R</strong></td><td>Responsible</td><td>Assigned to complete the task or deliverable</td></tr><tr><td><strong>A</strong></td><td>Accountable</td><td>Has final decision-making authority and accountability for completion (only 1 per task)</td></tr><tr><td><strong>C</strong></td><td>Consulted</td><td>An adviser, stakeholder, or subject matter expert who is consulted before a decision or action</td></tr><tr><td><strong>I</strong></td><td>Informed</td><td>Must be informed after a decision or action</td></tr></tbody></table>

## Generic RACI Matrix <a href="#matomoraci-racimatrix" id="matomoraci-racimatrix"></a>

Below is the RACI matrix describing actions related to managed products from cegedim.cloud's catalog.

There are slight differences according to the plan subscribed by the customer :

<table><thead><tr><th width="161">Plan</th><th>Description</th></tr></thead><tbody><tr><td>Self Service</td><td>The customer can create resources directly through ITCare, using self-service and pay-per-usage.</td></tr><tr><td>On Request</td><td>Resources are provisioned and delivered by cegedim.cloud on request by the customer.</td></tr></tbody></table>

<table data-full-width="true"><thead><tr><th width="247">Actions</th><th width="174.2">Plan</th><th width="154">cegedim.cloud</th><th width="124">customer</th><th>Comments</th></tr></thead><tbody><tr><td>Create, Stop, Start, Delete or Resize an instance or a cluster</td><td>Self Service</td><td>I</td><td>A / R</td><td><p>The decision of provisioning / stopping / starting / deleting a deployment and associated parameters is done by the customer.</p><p>The actions are performed :</p><ul><li>by customers through ITCare if they have subscribed to the "On Demand" service</li><li>for others customers, by cegedim.cloud's Professional Services team</li></ul></td></tr><tr><td>Use an instance or a cluster</td><td>*</td><td>I</td><td>A / R</td><td>Customer is responsible of the healthy usage of the product.</td></tr><tr><td>Modify configurations</td><td>On request</td><td>A / R</td><td>I</td><td>Certain configuration parameters can be modified at the customer's request.</td></tr><tr><td>Standard Monitoring</td><td>*</td><td>A / R</td><td>I</td><td>Monitoring is mandatory, and accessible to customer through ITCare.</td></tr><tr><td>Performance metrics</td><td>*</td><td>R</td><td>I</td><td>Performance metrics are provided by default and reachable through ITCare.</td></tr><tr><td>Backup and Restoration</td><td>*</td><td>R</td><td>A / I</td><td><p>Backup policy is defined by customer and applied by cegedim.cloud, which is responsible of ensuring that backups are done, and restoration of data when requested.</p><p>Customer has information about the backup in ITCare.</p></td></tr><tr><td>Disaster Recovery Protection</td><td>*</td><td>R</td><td>A / I</td><td><p>Disaster Recovery is activated by customer and applied by cegedim.cloud, which is responsible of ensuring that associated RTO and RPO are reached.</p><p>Customer has information about the Disaster Recovery Protection in ITCare.</p></td></tr><tr><td>Security Patches</td><td>*</td><td>R</td><td>A / I</td><td>Cegedim.cloud passes security patches in the execution environment, quarterly, during "Patch parties", by default.</td></tr><tr><td>Version Upgrades</td><td>On Request<br>or<br>Self Service</td><td>R</td><td>A / I / R</td><td>Upgrade can be done by the customer from the ITCare in autonomy when possible OR a request can be issued by the customer, and if the transition is possible, cegedim.cloud will upgrade or update the product version.</td></tr></tbody></table>

## Specific RACI Matrix

Some of our products have specific actions that can be carried out autonomously and in self-service from our ITCare cloud management tool. The matrices below are therefore complementary to the generic RACI matrix.

### Kubernetes

<table data-full-width="true"><thead><tr><th width="192">Actions</th><th width="153">Plan</th><th width="163">cegedim.cloud</th><th width="107">customer</th><th>Comments</th></tr></thead><tbody><tr><td>Add a Kubernetes node</td><td>Self-service</td><td>I</td><td>A / R</td><td>Customer can add Kubernetes nodes in self-service using ITCare.</td></tr><tr><td>Resize Kubernetes nodes</td><td>Self-service</td><td>I</td><td>A / R</td><td>Customer can resize Kubernetes nodes in self-service using ITCare.</td></tr><tr><td>Remove a Kubernetes node</td><td>Self-service</td><td>I</td><td>A / R</td><td>Customer can remove a Kubernetes node in self-service using ITCare.</td></tr><tr><td>Enable HA mode</td><td>Self-service</td><td>I</td><td>A / R</td><td>Customer can enable High Availability on a Kubernetes cluster in self-service using ITCare.</td></tr></tbody></table>

### MariaDB

<table data-full-width="true"><thead><tr><th width="186">Actions</th><th width="148">Plan</th><th width="166">cegedim.cloud</th><th width="107">customer</th><th>Comments</th></tr></thead><tbody><tr><td>Add a MariaDB read-only Replica</td><td>On Request</td><td>A / R</td><td>I</td><td>On request, a read only MariaDB replica can be configured for a standalone MariaDB node.</td></tr></tbody></table>

### OpenSearch

<table data-full-width="true"><thead><tr><th width="174">Actions</th><th width="135">Plan</th><th width="166">cegedim.cloud</th><th width="102">customer</th><th>Comments</th></tr></thead><tbody><tr><td>Index management</td><td>*</td><td>I</td><td>A / R</td><td>Customer is responsible of the creating and managing his indices. cegedim.cloud do not have access to them except for the security_audit index.</td></tr></tbody></table>

### PostgreSQL

<table data-full-width="true"><thead><tr><th width="174">Actions</th><th width="128">Plan</th><th width="161">cegedim.cloud</th><th width="102">customer</th><th>Comments</th></tr></thead><tbody><tr><td>Restore source PostgreSQL on a destination (seed)</td><td>Self-service</td><td>I</td><td>A / R</td><td><p>The decision to restore a PostgreSQL farm to another PostgreSQL farm is made by the client. The actions are carried out:</p><ul><li>through ITCare if they have subscribed to the "On Demand" service.</li><li>by the Professionnals Services team at cegedim.cloud</li></ul></td></tr><tr><td>Convert to High availability</td><td>Self-service</td><td>I</td><td>A / R</td><td><p>The decision to restore a PostgreSQL farm to another PostgreSQL farm is made by the client. The actions are carried out:</p><ul><li>through ITCare if they have subscribed to the "On Demand" service.</li><li>by the Professionnals Services team at cegedim.cloud</li></ul></td></tr></tbody></table>

### Apache Kafka

<table data-full-width="true"><thead><tr><th width="200">Actions</th><th width="148">Plan</th><th width="163">cegedim.cloud</th><th width="114">customer</th><th>Comments</th></tr></thead><tbody><tr><td>Manage Apache Kafka objects</td><td>*</td><td>I</td><td>A / R</td><td>Customer is responsible of the Apache Kafka objects management (topics, partitions, etc..) and its healthy usage.</td></tr><tr><td>Add a broker node to an Apache Kafka cluster</td><td>*</td><td>I</td><td>A / R</td><td>Customer is responsible of the Apache Kafka cluster's nodes (topics, partitions, etc.) and its healthy usage.</td></tr></tbody></table>

### RabbitMQ

<table data-full-width="true"><thead><tr><th width="195">Actions</th><th width="148">Plan</th><th width="161">cegedim.cloud</th><th width="113">customer</th><th>Comments</th></tr></thead><tbody><tr><td>Manage RabbitMQ objects</td><td>*</td><td>I</td><td>A / R</td><td>Customer is responsible of the RabbitMQ objects management (exchanges, queues, etc..) and its healthy usage.</td></tr></tbody></table>

### Bot Defense

<table data-full-width="true"><thead><tr><th width="224">Actions</th><th width="148">Plan</th><th width="158">cegedim.cloud</th><th width="110">customer</th><th>Commentaires</th></tr></thead><tbody><tr><td>Enable / Disable Bot Defense option on a Load Balancer</td><td>Self-service</td><td>I</td><td>A / R</td><td>The decision of enabling / disabling the Bot Defense option is done by the customer.</td></tr><tr><td>Add or delete Whitelisted IP</td><td>Self-service</td><td>I</td><td>A / R</td><td>Customer can add or delete whitelisted IP.</td></tr><tr><td>Access to DDOS and blocked requests from Bot Defense and Dos Protection</td><td>Self-service</td><td>I</td><td>A / R</td><td>Report in real time blocked request (Including blocked ip, blocking reason and the support ID).</td></tr><tr><td>Request details on blocked request</td><td>On Request</td><td>A / R</td><td>I</td><td>Upon request by the customer, more information can be provided for a blocked request by providing the support ID</td></tr></tbody></table>

### GlusterFS

<table data-full-width="true"><thead><tr><th width="195">Actions</th><th width="148">Plan</th><th width="163">cegedim.cloud</th><th width="113">customer</th><th>Comments</th></tr></thead><tbody><tr><td>Manage storage volumes</td><td>Self-service</td><td>I</td><td>A / R</td><td>Customer is responsible of the management (creation, deletion, resize) of the storage volumes for his cluster.</td></tr></tbody></table>

### Object Storage

<table data-full-width="true"><thead><tr><th width="214">Actions</th><th width="135.2">Plan</th><th width="166">cegedim.cloud</th><th width="85">customer</th><th>Comments</th></tr></thead><tbody><tr><td>Create an <strong>Object Store</strong></td><td>Self-service</td><td>I</td><td>A / R</td><td><p>The decision of provisioning / Deleting / modify an <strong>Object Store</strong> and associated parameters is done by the customer.</p><p>The actions are performed :</p><ul><li>by customers through ITCare if they have subscribed to the "On Demand" service</li><li>for others customers, by <strong>cegedim.cloud</strong>'s Professional Services team</li></ul></td></tr><tr><td>Manage Object Store Quota</td><td>Self-service</td><td>I</td><td>A / R</td><td></td></tr><tr><td>Delete a Object Store</td><td>Self-service</td><td>I</td><td>A / R</td><td></td></tr><tr><td>Create an Object User</td><td>Self-service</td><td>I</td><td>A / R</td><td><p>The decision of creating an <strong>Object User</strong> and associated parameters is done by the customer.</p><p>The actions are performed :</p><ul><li>by customers through ITCare if they have subscribed to the "On Demand" service</li><li>for others customers, by cegedim.cloud's Professional Services team</li></ul></td></tr><tr><td>Manage Object Users</td><td>Self-service</td><td>I</td><td>A / R</td><td><p>The decision of modify an <strong>Object User</strong> and associated parameters is done by the customer.</p><p>These actions include the <strong>Secret Key renewal</strong> or <strong>Object User</strong> locking.</p><p>The actions are performed :</p><ul><li>by customers through ITCare if they have subscribed to the "On Demand" service</li><li>for others customers, by <strong>cegedim.cloud</strong>'s Professional Services team</li></ul></td></tr><tr><td>Delete Object Users</td><td>Self-service</td><td>I</td><td>A / R</td><td><p>The decision of Delete an <strong>Object User</strong> and associated parameters is done by the customer.</p><p>The actions are performed :</p><ul><li>by customers through ITCare if they have subscribed to the "On Demand" service</li><li>for others customers, by <strong>cegedim.cloud</strong>'s Professional Services team</li></ul></td></tr><tr><td>Create Bucket</td><td>Self-service</td><td>I</td><td>A / R</td><td><p>Bucket creation and associated parameters is done by the customer.</p><p>The actions are performed using the <strong>S3 API.</strong></p></td></tr><tr><td>Delete Bucket</td><td>Self-service</td><td>I</td><td>A / R</td><td><p>Bucket deletion and associated parameters is done by the customer.</p><p>The actions are performed using the <strong>S3 API.</strong></p></td></tr><tr><td>Manage Bucket Policy</td><td>Self-service</td><td>I</td><td>A / R</td><td><p>Bucket Policy management is done by the customer.</p><p>The actions are performed using the <strong>S3 API.</strong></p></td></tr><tr><td>Manage Lifecycle Configuration</td><td>Self-service</td><td>I</td><td>A / R</td><td><p>Lifecycle Configuration management is done by the customer.</p><p>The actions are performed using the <strong>S3 API.</strong></p></td></tr><tr><td>Manage Object Configuration</td><td>Self-service</td><td>I</td><td>A / R</td><td><p>Object Lock configuration on Bucket or object is done by the customer.</p><p>The actions are performed using the <strong>S3 API.</strong></p></td></tr><tr><td>Availability and Monitoring</td><td>*</td><td>R / A</td><td>I</td><td><strong>cegedim.cloud</strong> will ensure the Object Storage Service is globally available and healthy at all times.</td></tr><tr><td>Multi Region Replication</td><td>*</td><td>R / A</td><td>I</td><td><p>Data replication between region is done by <strong>cegedim.cloud</strong>, which is responsible of ensuring that associated RTO and RPO are reached.</p><p>Customer has information about the Disaster Recovery Protection in ITCare.</p></td></tr><tr><td>Security Patches</td><td>*</td><td>R / A</td><td>I</td><td><strong>cegedim.cloud</strong> apply security patches. it is transparent for customers and this does not lead to an interruption of service.</td></tr><tr><td>Version Upgrades</td><td>*</td><td>R / A</td><td>I</td><td><p><strong>cegedim.cloud</strong> apply upgrade patches. it is transparent for customers and this does not lead to an interruption of service.</p><p><strong>S3 API</strong> may change.</p></td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://academy.cegedim.cloud/policies/raci.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.