MLZ Tier 3: Should we add some optional RBAC automation to add groups with permissions to the Tier 3 environment.

Azure / missionlz

Azure landing zone for SCCA-compliant organizations.

MIT License

214 stars 122 forks source link

MLZ Tier 3: Should we add some optional RBAC automation to add groups with permissions to the Tier 3 environment. #990

Closed mikedzikowski closed 2 months ago

mikedzikowski commented 2 months ago

As we on-board Tier3 environments would we want to create a group for the environment in Entra and then provide some prescriptive RBAC as a baseline? This would all the Tier 3 app owners to use the environment after it is built.

Or do we need to look into management groups for MLZ? Or is that moving away from the initial intent of being lightweight?