search

Praqma / onboarding-as-code

Automating the onboarding process
2 stars 2 forks source link

Who is going to run the script (permissions) #3

Open buep opened 7 years ago

buep commented 7 years ago

Everybody that would potentially run this script, are not admins on all our services. So they have to be admins, or the script needs to run under a certain user or key/token in all or some cases.

lakruzz commented 7 years ago

People with admin access to G Suite

buep commented 7 years ago

Indeed, but if all settings pr. employee and permission is in pr. person YML flle, then when I need to change permissions I will update my YML file and make a PR. Then one of you need to run, which make we wait in a queue because you're always busy.

So if that is the decision, we need some other way of changing permissions for people so it is not required to be run by one of the few with G Suite access. Today you just ping one of the handful of people with admin access on a specific service.

I don't imagine we can configure everything so open so we can avoid kind of roles on the services, which mean the will change once a while.

So todays change of permission need to move the YML files, and a script re-run is needed.