bcgov / cloud-pathfinder

This is the technology and UX backend repo for the cloud pathfinder ZenHub task board
https://app.zenhub.com/workspaces/cloud-pathfinder-5e4dbb426c3c6af8dcbf06a7/board?repos=241742911
Creative Commons Zero v1.0 Universal
2 stars 8 forks source link

Intake SDPR to Funnel for their Azure request #955

Closed ActionAnalytics closed 3 years ago

ActionAnalytics commented 3 years ago

Describe the issue There is an email thread about Azure access. Social Development and Poverty Reduction

Which Sprint Goal is this issue related to?

Note: 'Milestone' is a ZenHub term that we use synonymously with 'Sprint'.

The 'Milestone' description (created in ZenHub) should clearly list Sprint Goals. This section should indicate which 'goal' this issue is related to.

Additional context

Definition of done

ActionAnalytics commented 3 years ago

Jon says: Intake to prod may be difficult right now due to pre-phase 3 deployment items not yet in place

ActionAnalytics commented 3 years ago

Jon: If they want a space, they can try things out, but nothing is prod

scayzer commented 3 years ago

Exchanged emails with SDPR (Ryan F) and found out that they want some tricky permissions for their app:

Our application would require:

Application Permission: Sites.Selected (to enable our application to manage documents stored in a SharePoint site) Application Permission: Users.Read.All (so our application can search through the government user list) Application Permission: GroupMember.Read.All (not an absolute requirement, but it will allow us to leverage existing AD groups to manage certain application permissions, rather than re-creating groups in our app as we do for eApprovals with admin users)

These permissions require “Admin consent”. This means someone in our tenant with admin consent capabilities must sign off on these permissions before we can use them.

Jon and Jesse won't be able to provide these permissions, so have informed SDPR that they'll need to await set-up of our SEA and new processes in Azure - will keep in touch. Next check-in: late September