Cloud Portal: The Products Tab
The Products tab lets you provision a new cloud product, or manage an existing one.
You can provision products of three types: Free, Development and Production.
Provisioning a New Product
To provision a new product, open your Portal's Products tab and click Add Product.
Creating a product requires the Products Creation account role — the Add Product button is hidden otherwise. Users without any relevant access do not see the Products tab at all.
The New Product wizard will open and walk you through the following simple stages:
A. Plan
B. Account
C. Billing
D. Customize
E. Summary
Account and Billing are only asked for when the wizard still needs that information:
- Account appears only when your account has neither its details nor a payment method on file.
- Billing appears only when no payment method is on file, and never for Microsoft Azure or AWS Marketplace accounts, whose payment is handled by the provider.
So the first product you provision usually walks through all five stages, while later ones typically go straight from Plan to Customize and Summary.
A. New Product: Plan
Use the Plan page to choose your product's cloud Provider, Region, Tier, Instance, Storage and Payment model.
-
Cloud Provider
Choose your cloud host. It can currently be one of three providers:
Amazon Web Services, Microsoft Azure, and Google Cloud Platform. -
Region
Select where your equipment would be physically located. -
Tier
You can raise a Free node, a Development node or a Production cluster.
Learn more about them in the Tiers and Instances page. -
Instance
Choose the instance type that best suits your requirements.
Learn more about them in the Tiers and Instance page. -
Storage
Select disk type and size.
Learn more about them in the Scaling page. -
Payment model
Choose your payment model and commitment.
Learn more about them in the Pricing, Payment and Billing page.
B. New Product: Account
Enter your account information and click Next.
C. New Product: Billing
Enter your billing details and click Next.
D. New Product: Customize
Choose your product's display name, release channel and allowed IP addresses.
The Display Name is simply the name that would appear in your Cloud Products tab.
The Allowed IPs section determines which addresses would be allowed to manage your database.
This adds an important layer to your database security on the network level.
You can read more about it in the Security page.
E. New Product: Summary
The Summary stage shows you your choices and lets you edit them if you wish.
When you finish defining your product, the cloud provisioning routine will show you
your new product's status until it's ready to go.
View the Product Metrics
This allows you to analyse your machine resources for a selected time period and cluster node. It's useful for analysing usage, instance overload and traffic.
The Metrics and Cluster Health buttons — on both the product list and the product view — require at least Viewer access to the product, and are disabled without it.
View the Cluster Health
This allows you to analyse your cluster incidents for a selected time period, cluster node, severity, category and event status.
In addition, Cluster Health generates suggestions for a selected cluster node based on incident trends that can help resolve cluster stability issues.
The view also shows node availability for the last 30 days and a history of product type changes.
It's useful for analysing usage, instance overload and traffic.
More details can be found here.
View the Alerts
This allows you to have the events recorded by Cluster Health emailed to you, so you do not have to watch the Portal to learn that an instance is under pressure. You can configure a single daily summary digest and any number of custom alerts that fire as soon as a chosen event is recorded, each with its own list of recipients.
The Alerts tab requires the Monitoring feature to be enabled on the product, plus at least Viewer access to it. Changing the rules additionally requires the Manage features permission together with the Security admin add-on, and the product must be Active.
More details can be found here.
Managing an Existing Product
The actions available on a product depend on your per-product permissions — buttons for actions you are not permitted to perform are hidden or disabled, and the Account Owner always has full access.
To modify an existing product, find it in the Products tab and click its Manage button.
This is a general view of the product details page:
This is a general view of the serverless product details page:
Instance Access: Open Studio
The bar at the top of the product view — above the Manage, Metrics, Cluster Health and Alerts tabs — shows the product's name and status, and carries the Open Studio button that takes you to RavenDB Studio.
- On a single-node product, Open Studio is a plain button that opens that node's Studio in a new tab.
- On a multi-node product, Open Studio is a dropdown listing every node — Node A, Node B, and so on — so you can pick the node whose Studio you want to open.
The button appears only while the product is Active or Deploying changes. Until you have downloaded the client certificate, hovering it shows the reminder "Please remember to download Certificate before accessing studio" — Studio will not let you in without an installed certificate, so download it first.
Open Studio is also available per product directly in the Products list, next to the Manage button.
Change Instance Type and Storage
You can view your configuration and change your product's instance type and storage size here.
- Change Instance Type
Use sliders to set your desired configuration. This can be changed later as you need to scale to changing data processing needs.
More details can be found here.
- Change Storage
Use this slider to modify your product's storage.
Disk can be migrated to Data Disk using Migrate disk button.
When eligible, the Storage section also shows an Upgrade to Premium V2 button to upgrade the disk to Azure Premium SSD v2.
More details can be found here. For Azure Premium SSD v2 — eligibility, constraints, and behavior of the upgrade — see Azure Premium SSD v2.
Security: Certificate and Audit Logs
The Security card holds your instance's client certificate and its audit logs. See the Security page for the wider picture.
Download certificate and Regenerate certificate require the Security admin add-on — no base preset grants it on its own. See audit logs requires the Operator preset or higher. Buttons you are not permitted to use are disabled, with a tooltip explaining why.
-
Download certificate
Downloads the Initial Client Certificate package — a zip archive containing the.pfxfiles. This is an operator-level certificate used to perform cluster-wide operations (like creating or deleting databases) and for your first login to RavenDB Studio.The first time you use it, the portal opens the Downloading and Installing Initial Certificate dialog, which walks you through downloading the package and installing it, with instructions for Windows + Chrome and Linux + Chrome. You can reopen that dialog later from How to setup certificate? in the dropdown next to the button.
-
Regenerate certificate
Click the dropdown next to Download certificate and choose Regenerate certificate. Use it when your current certificate has expired, or when you want to stop using the one you hold.Regenerating a certificate creates a new identity. After this operation, you must download and install the new certificate to maintain access via the portal.
The previous certificate is not automatically removed from the cluster by this operation. To revoke old certificates, you must use the RavenDB Studio Certificates view.
-
Certificate expiration date
The card shows how long the current client certificate remains valid. Cloud client certificates are issued for five years, and renewal is handled for you:- 60 days before expiry, the account is emailed a notice stating the expiration date and the date of the automatic renewal.
- 30 days before expiry, the certificate is regenerated automatically.
An automatic renewal behaves like a manual one: download and install the new certificate to keep your access working, and remove the old certificate from the RavenDB Studio Certificates view when you no longer need it.
For maximum security and performance, we recommend using the initial certificate only for setup and emergency access.
- Granular Permissions: Create separate certificates for each user, developer, or application.
- Least Privilege: Use the Studio to assign specific roles (e.g., User vs. Admin) or restrict access to specific databases.
- Save CPU Credits: If your instance uses a burstable CPU (especially low-end instances), generating certificates can consume significant CPU credits. We recommend generating certificates off-cloud (on your own machine) and importing them into the Studio via Settings > Certificates.
-
See audit logs
Opens the Select date to load audit logs dialog. Pick a year and month, then expand a node tag to list the audit log files that node recorded in that month and download them.
Allowed IPs
The Allowed IPs card determines which addresses are allowed to connect to your database instance, adding an
important layer of security at the network level. It lists the current entries as IP Address and Alias pairs.
A 0.0.0.0/0 (Allow all) entry is pinned to the top of the list and flagged with a warning, because it leaves your
instance reachable from anywhere.
Editing the list requires the Security admin add-on — no base preset grants it on its own. Without it the Edit button is disabled, with a tooltip explaining why.
Click Edit to change the list.
Each row takes an address in CIDR notation
(for example 192.168.0.0/24) and a free-text alias. Add my IP inserts the address you are currently connecting
from, Add new IP adds an empty row, and the bin button removes a row. Click Save to apply your changes, or
Cancel to discard them.
You can increase your system's security further using this in-depth security measure and restrict access to trusted sources, e.g. your application servers. More details can be found in the Security page.
Manage features
You can view features available for your product, enable, disable and configure them here.
Available features are described on Product Features page.
Enabling, disabling, and configuring features requires the Manager (or Admin) preset — this includes switching a Serverless product to regular deployment. Security-related features (Monitoring/OpenTelemetry and Power BI) additionally require the Security admin add-on to be enabled or disabled; see Product Features.
Nodes: Additional product nodes
You can expand your cluster by adding more product nodes to your cluster. This helps improve High Availability and task/load balancing.
More details can be found here.
Subscription & support
The Subscription & support card gathers what your product is paying for, which RavenDB build it tracks, and where to get help with it.
Subscription details
| Field | Description |
|---|---|
| Payment | Your payment model — On-Demand, Yearly All Upfront or Yearly No Upfront. See Pricing, Payment and Billing. |
| Contract | The date your current contract runs until. Shown only for term contracts. |
| Release channel | The RavenDB release channel this product tracks, as chosen in the Customize stage. |
When a newer release channel than the one your product tracks becomes available, an Update available pill appears next to the release channel. Clicking it opens the Support view with this product selected, so you can ask for the upgrade — changing the release channel is not a self-service action.
For Microsoft Azure and AWS Marketplace accounts the Payment and Contract rows are not shown, because billing is handled by the provider. Only the release channel appears.
Support & help resources
This part of the card offers direct links to the Documentation, GitHub discussions and the Discord community, and a badge showing whether the product is covered by Paid support or the Free tier.
If your account has an active paid support option, the card also offers Request support for this instance, which opens the Support view with this product already selected. Otherwise it links to a comparison of the paid support plans.
The support badge and the request/compare panel are shown only to users with the Support account role. The three resource links are always available.
Maintenance and Danger Zones
You can restart your product nodes, deploy additional tools and terminate your product here.
- Maintenance Zone
Use this tab to restart selected node and deploy RavenDB tools. For Serverless products, you can switch to regular deployment.
Changing your product deployment type is irreversible.
- Danger Zone
Use this tab's Terminate button to eliminate your cluster.
Terminating your instance is irreversible. Your data and cluster properties will be permanently lost.
User Access
The product view includes a User Access widget that lists the account users who have access to this product, together with their access level. If you can manage users, you can change a user's preset and toggle the Security admin add-on directly in the widget, then click Save changes — without leaving the product view. The Account Owner is always shown with full access. Use Manage in Users & Access to open the Users & Access page for the full user-management view. When no other users have been granted access yet, the widget shows an empty state.
