---
seo:
  image: /og-brand.png
  title: "rolle quickstart: your first cloud session"
title: Quickstart
description: Connect AWS, Azure, or Google Cloud, import what your machine already has, and start a role your tools can use in one click.
---

1. **Open rolle**

    The first launch runs onboarding. Pick a cloud, sign in, and choose roles. Connect more clouds at the end, or later from the **Add** menu.

    ![Onboarding: identities found on this machine and the three clouds to connect](/screenshots/onboarding-cloud.png)

2. **Import what your machine already has**

    **Import from this machine** finds Identity Center portals in the AWS CLI and Granted configs, Azure tenants in the az CLI, and gcloud Application Default Credentials. Later, use **Add → Import from this machine**.

3. **Start a session**

    Press **Start** on a role. When the integration is signed out, rolle signs in first. An active AWS session is a profile:

    ```sh
    aws sts get-caller-identity --profile default
    ```

    Every AWS session uses the profile `default` unless you give it a name. Two sessions can share a name. Starting one stops the other.

4. **Use the credentials**

    The row actions open a terminal with the session ready, open the cloud console, or copy the credentials as shell exports.

## CLI

```sh
rolle integration add aws-sso --alias acme --start-url https://acme.awsapps.com/start --region us-east-1
rolle integration login acme
rolle session list
rolle start "Acme Prod/AdministratorAccess"
aws sts get-caller-identity --profile default
rolle stop "Acme Prod/AdministratorAccess"
```