DevOps Automation

DevOps Automation

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Urban Code Security

    Posted Wed December 21, 2016 11:00 AM

    We are working on setting up Urban Code deploy throughout the company. We are looking for anyone who has information in regards to Security practices for setting up different team/roles within UC Deploy.

     

    Thanks in advance!



  • 2.  RE: Urban Code Security

    Posted Tue December 27, 2016 08:31 PM

    UCD has a team/role based security system, you can check more details here:

    https://www.ibm.com/support/knowledgecenter/SS4GSP_6.2.0/com.ibm.udeploy.admin.doc/topics/security_ch.html



  • 3.  RE: Urban Code Security

    Posted Thu December 29, 2016 05:56 AM

    My sugestion is that you make a good intial work regarding how you like to divide the access right

    My recomendation is that you create roles for each type of situation you like to combine

    Example roles can be

    Environmental access roles;

    PROD -> access to producvtion environments

    TEST -> access to development environments

    DEV -> access to development environment

    Functional Roles;

    Deployer -> able to run deployment processes

    Operator -> able to stop/start

    Functional administrative roles;

    Administrator

    Proces developer

     

     



  • 4.  RE: Urban Code Security

    Posted Wed January 04, 2017 10:38 AM

    Here is a good article on the UrbanCode Deploy security model.

    https://meetmurad.wordpress.com/2015/08/26/security-configuration-in-ucd/



  • 5.  RE: Urban Code Security

    Posted Thu January 05, 2017 11:53 AM

    Christopher,

    In addition to what Max posted, we include those roles in the delivery stream on the teams so they can receive notifications and approve/reject deployments.  These include roles like QA and Manager.

    And of course, the answer we all hear - "it depends".  How you are currently structured and if/how that will change as a part of your urbanCode implementation (which is probably a part of your organization's DevOps transformation), will all be a factor in how it eventually will be structured.

    What I have seen is that UCD is very flexible, it's just a matter of learning how and where to make it happen.