305099: Added an Accessgroup for granting project team access to Azur…

…e resources (#70) * Added an Accessgroup for granting project team access to Azure resources. * 0.2.21
DEFRA · Jul 10, 2024 · 642528e · 642528e
1 parent 0206bbf
commit 642528e
Show file tree

Hide file tree

Showing 4 changed files with 21 additions and 3 deletions.
diff --git a/src/ADP.Portal.Api/ADP.Portal.Api.csproj b/src/ADP.Portal.Api/ADP.Portal.Api.csproj
@@ -2,7 +2,7 @@
 
   <PropertyGroup>
     <TargetFramework>net8.0</TargetFramework>
-    <Version>0.2.20</Version>
+    <Version>0.2.21</Version>
     <Nullable>enable</Nullable>
     <ImplicitUsings>enable</ImplicitUsings>
     <InvariantGlobalization>true</InvariantGlobalization>

diff --git a/src/ADP.Portal.Core/Git/Services/GroupsConfigService.cs b/src/ADP.Portal.Core/Git/Services/GroupsConfigService.cs
@@ -157,6 +157,20 @@ private GroupsRoot BuildTeamGroups(string tenantName, string teamName, IEnumerab
             });
         });
 
+        root.Groups.Add(new Group
+        {
+            DisplayName = $"AAG-Azure-ADP-{teamName.ToUpper()}-Resources-Contributor",
+            Description = "AD group to grant contributor access to team resources. For e.g. Contributor to Team resource group, DataOwner to team queues and topic.",
+            Type = GroupType.AccessGroup
+        });
+
+        root.Groups.Add(new Group
+        {
+            DisplayName = $"AAG-Azure-ADP-{teamName.ToUpper()}-Resources-Reader",
+            Description = "AD group to grant reader access to team resources.",
+            Type = GroupType.AccessGroup
+        });
+
         return root;
     }
 

diff --git a/src/ADP.Portal.Core/Git/template/UserGroupMemberShip.defra.yml b/src/ADP.Portal.Core/Git/template/UserGroupMemberShip.defra.yml
@@ -5,10 +5,12 @@ techUser:
   - AAG-Azure-ADP-{teamName}-SND4-PostgresDB_Writer
   - AAG-Azure-ADP-{teamName}-DEV1-PostgresDB_Reader
   - AAG-Azure-ADP-{teamName}-TST1-PostgresDB_Reader
+  - AAG-Azure-ADP-{teamName}-Resources-Contributor
 nontechUser:
   - AAG-Azure-ADP-GlobalRead
 admin:
   - AAG-Azure-ADP-SND4-AKS-Cluster-Custom-Resources-Reader
   - AAG-Azure-ADP-{teamName}-SND4-PostgresDB_Writer
   - AAG-Azure-ADP-{teamName}-DEV1-PostgresDB_Reader
-  - AAG-Azure-ADP-{teamName}-TST1-PostgresDB_Reader
+  - AAG-Azure-ADP-{teamName}-TST1-PostgresDB_Reader
+  - AAG-Azure-ADP-{teamName}-Resources-Contributor
diff --git a/src/ADP.Portal.Core/Git/template/UserGroupMemberShip.defradev.yml b/src/ADP.Portal.Core/Git/template/UserGroupMemberShip.defradev.yml
@@ -3,8 +3,10 @@ techUser:
   - AAG-Azure-ADP-GlobalRead
   - AAG-Azure-ADP-SND3-AKS-Cluster-Custom-Resources-Reader
   - AAG-Azure-ADP-{teamName}-SND3-PostgresDB_Writer
+  - AAG-Azure-ADP-{teamName}-Resources-Contributor
 nontechUser: 
   - AAG-Azure-ADP-GlobalRead
 admin:
   - AAG-Azure-ADP-SND3-AKS-Cluster-Custom-Resources-Reader
-  - AAG-Azure-ADP-{teamName}-SND3-PostgresDB_Writer
+  - AAG-Azure-ADP-{teamName}-SND3-PostgresDB_Writer
+  - AAG-Azure-ADP-{teamName}-Resources-Contributor