Remove obsolete GACA access to our 3pao folder

pburkholder commented 2 years ago

The cloud.gov team has a folder, FedRAMP JAB - cloud.gov - 3PAO access.

Over time, we have granted access to these files/folders via GACA, and now we need to remove obsolete access.

Acceptance criteria:

[ ] No access to these folders for addresses of the form gsa.fname.lname@gmail.com

Sketch:

Can one remove recursively in the UI?
Do we need GSA IT helpdesk support?
Do we have to manually remove all these?
Do we need to write scripts to do this (with gam or gdrive, for example)?

bengerman13 commented 2 years ago

to manage this better in the future - can we put GACA accounts into groups? (probably a follow-up ticket needed there)

pburkholder commented 2 years ago

It's worth a try. A group of cloudgov-3pao-secureit with zero members would have the same effect as removing users.

On Wed, May 11, 2022 at 1:14 PM Ben Berry @.***> wrote:

to manage this better in the future - can we put GACA accounts into groups? (probably a follow-up ticket needed there)

— Reply to this email directly, view it on GitHub https://github.com/cloud-gov/cg-compliance/issues/256#issuecomment-1124033594, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAJHWCWLRT4NWVOYFQBPPVDVJPTF5ANCNFSM5VVJLSYA . You are receiving this because you authored the thread.Message ID: @.***>

--

Peter Burkholder | cloud.gov https://cloud.gov ISSO, compliance & security lead please use @.*** for cloud.gov matters

*202-709-2028 <(202)%20209-2028> | @. @.> *

| pronouns he-him https://www.mypronouns.org/he-him *Free/Busy Calendar @.**>

cloud-gov / compliance

Remove obsolete GACA access to our 3pao folder #256

--