Grouper Users - Open Discussion List

[Peter DiCamillo <>]

When we've done that, we've used folders for the different environments. The APP folder would contain PROD, QA, and DEV folders (or whatever environments you require.) In each environment folder there would be individual role groups, such as Owners, Developers, and Testers as you mentioned. So one group might be APP:QA:Testers. I don't know that there's any Grouper best practice for this. I'd like to know about it if there is.

Peter

On 12/8/17 12:49 PM, Tomo O'BRIEN wrote:

Hi folks,

We're interested in environment-specific groups like {APP}-Dev, {APP}-QA, {APP}-UAT, {APP}-Prod so we can have appropriate permission groups for each environment. 

I haven't seen this pattern described on the wiki but maybe I'm just not looking in the right places?  Has anyone developed a naming/composite structure for this situation?

I'm thinking about something like:

{APP}Owners (functional owners)

{APP}Developers 

{APP}Testers 

{APP}-DEV (union of Owners + Developers or maybe just Developers)

{APP}-QA (union of Owners + Testers)

{APP}-PROD (just Owners)

At some point we'd also have an intersection with our Employees + include - exclude group -- not sure where this is best positioned - after the ad hoc owners/developers/tests group or after the union of owners+testers or developers

Any thoughts or suggestions would be appreciated!

Thanks!

Tom O'Brien