Skip to content

Commit

Permalink
Dtspo 18381 repo rename (#500)
Browse files Browse the repository at this point in the history
* Test example workflow

* Minor change

* Try sync

* Minor change

* Repo renamef from devops-azure-ad to azure-access

* Delete .github/workflows/copy.yml

---------

Co-authored-by: Tim Jacomb <[email protected]>
  • Loading branch information
cpareek and timja authored Jan 2, 2025
1 parent c17e817 commit e3f93dc
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 5 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -11,19 +11,19 @@ weight: 2

In order to give access to HMCTS resources, an account need to exist on the HMCTS Azure tenant. If user have `@hmcts.net` account, this section could be skipped but for `@justice.gov.uk` account holder, they will need to be invited as guest user first to be able to add groups to their account otherwise the pipeline will throw error that User account does not exist.

An existing teammate should create a pull request to [devops-azure-ad](https://github.com/hmcts/devops-azure-ad/blob/master/users/guest_user_invite.yml) and get it approved by Platform Operations.
An existing teammate should create a pull request to [azure-access](https://github.com/hmcts/azure-access/blob/master/users/guest_user_invite.yml) and get it approved by Platform Operations.

Once PR approved and merged, an automated email from the Microsoft will be sent out to the user to accept the invitation.

[Example PR](https://github.com/hmcts/devops-azure-ad/pull/4439/files)
[Example PR](https://github.com/hmcts/azure-access/pull/4439/files)

## Microsoft Entra ID groups

Microsoft Entra ID is used to give you and your team-mates access to specific subscriptions and resources in Azure.
When your Microsoft Entra ID user has access to a subscription, you will be able to view, create and modify Azure resources for your team.

As GitHub access is also provided by adding an Microsoft Entra ID Group, an existing teammate should create a pull request
to [devops-azure-ad](https://github.com/hmcts/devops-azure-ad/blob/master/users/prod_users.yml) and get it approved by Platform Operations.
to [azure-access](https://github.com/hmcts/azure-access/blob/master/users/prod_users.yml) and get it approved by Platform Operations.

The first user in a team should raise a [#platops-help](https://hmcts-reform.slack.com/app_redirect?channel=platops-help) request with the required groups.

Expand Down Expand Up @@ -55,7 +55,7 @@ Being a member of the group that indicates you are security cleared is a pre-req

The access package expires after one year, so you will have to re-request it after one year by clicking the link above.

There are checks in place on our [devops-azure-ad](https://github.com/hmcts/devops-azure-ad) pipeline to ensure certain groups require security clearance. If you have not requested the package and been approved, you will not be able to be added to groups that grant access to sensitive resources such as production environments.
There are checks in place on our [azure-access](https://github.com/hmcts/azure-access) pipeline to ensure certain groups require security clearance. If you have not requested the package and been approved, you will not be able to be added to groups that grant access to sensitive resources such as production environments.

## GitHub

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ Follow the instructions on the [person onboarding guide](/cloud-native-platform/

## Creating a new team

If you are a new team or just need a group created, then do a pull request to the [devops-azure-ad](https://github.com/hmcts/devops-azure-ad/blob/master/users/groups.yml) repository and get it approved by Platform Operations.
If you are a new team or just need a group created, then do a pull request to the [azure-access](https://github.com/hmcts/azure-access/blob/master/users/groups.yml) repository and get it approved by Platform Operations.

It should look like:

Expand Down

1 comment on commit e3f93dc

@github-actions
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@check-spelling-bot Report

🔴 Please review

See the 📜action log or 📝 job summary for details.

Unrecognized words (1)

jumpboxes

To accept these unrecognized words as correct, you could run the following commands

... in a clone of the [email protected]:hmcts/hmcts.github.io.git repository
on the main branch (ℹ️ how do I use this?):

curl -s -S -L 'https://raw.githubusercontent.com/check-spelling/check-spelling/v0.0.22/apply.pl' |
perl - 'https://github.com/hmcts/hmcts.github.io/actions/runs/12585176901/attempts/1'

🖊️ Please consider adding a word to the allow list if it is flagged as a spelling error but is genuinely used within the project.
🤔 Think we might see a flagged mistake in another PR in the future? Please consider adding it as an expected pattern.

Please sign in to comment.