2018-10-25

Overview

Sprint 4 will see the first draft of automating our cloud infrastructure. Some early questions on permissions led to a chat with the cloud team to discuss our plan.

First, we’ll continue to have permissions to create RGs in the sandbox subscription, and understand we won’t have that privilege in Dev or Prod subscriptions. The number of resource groups related to billing and budgets and they need to be monitored and managed.

We won't have permissions to manage access control on any subscription, as this will give us the ability to affect other users permission in the subscription. The cloud team has committed to a quick turn-around adding permissions to new SBX resource groups. If our work is being slowed by their response time we'll need to engage with them to work out a solution.

The scripting of infrastructure in Dev and Prod will need to refer to defined resource groups.