As an Analytical Platform engineer
I expect principle of least privilege across all our services
So that nobody has administrative access if they don't need it
Value / Purpose
There are 30+ "owners" of moj-analytical-services and half of those should not require this level of access, only @ministryofjustice/analytical-platform and @ministryofjustice/operations-engineering
Useful Contacts
@ministryofjustice/analytical-platform
User Types
Platform Engineering
Hypothesis
If we remove users who do not need administrative access
Then there is less chance that someone can do something they shouldn't
User Story
As an Analytical Platform engineer I expect principle of least privilege across all our services So that nobody has administrative access if they don't need it
Value / Purpose
There are 30+ "owners" of
moj-analytical-services
and half of those should not require this level of access, only @ministryofjustice/analytical-platform and @ministryofjustice/operations-engineeringUseful Contacts
@ministryofjustice/analytical-platform
User Types
Platform Engineering
Hypothesis
If we remove users who do not need administrative access Then there is less chance that someone can do something they shouldn't
Proposal
Revoke non AP/Ops Eng access
Additional Information
No response
Definition of Done