Adding a Developer

Adding a Developer

Before getting a CDC account

GitHub access

• Invite to application
  • send new developer link: https://github.com/CDCgov/prime-simplereport/invitations
  • after the developer accepts the invite. ask the developer to verify access to:
    • sonarcloud
    • chromatic
• Invite to static site
  • send new developer link: https://github.com/CDCgov/SimpleReport_Public_Site/invitations
• Invite to internal docs
  • send new developer link: https://github.com/usds/prime-simplereport-docs/invitations
• Invite to Coverity
• Invite to Snyk

Okta

You need to make sure they've been invited to both Prod and Preview Okta.

Okta Preview:

• Login to test.simplereport.gov and invite the new developer to your org as an admin of all facilities
• Find their account in the Okta admin portal
• Add to the following groups:
  • Prime Team Members
  • SimpleReport Engineering
  • SR-PENTEST-ADMINS
  • SR-TEST-ADMINS
  • SR-DEV-ADMINS
• Add to all the SimpleReport applications (especially SimpleReport (local dev))
• Make sure they're a member of at least one organization in each environment (it's usually sufficient to add to ADMINS and NO_ACCESS for a given org - admins lets them see the full app view, and no_access ensures they're linked to the SimpleReport database)

For Okta Prod:

• Directly add the user on the Okta admin portal
• Add to the Prime Team Members group

Metabase

• Invite to production Metabase
• Invite to test Metabase

After getting a CDC account

• Add user to the Prime Okta Admins group in Okta
• If the user is helping with support tasks, add to admin group for prod (SR-PROD-ADMINS)

Azure

• set up the dev with a -su account process doc
• Ask dev to sign in to portal.azure.com
• Reach out to CDC Active Directory team
  • Request access for the standard user to all appropriate reader groups (CT-PRIMESIMPLEREPORT{$ENV}-DMZ-AZ-Reader)
  • Request access for the SU user to all appropriate contributor groups (CT-PRIMESIMPLEREPORT{$ENV}-DMZ-AZ-Contributor)

Github Access

• add developer to security alerts (https://github.com/CDCgov/prime-simplereport/settings/security_analysis)

PagerDuty

• Add the dev to PagerDuty
• Prompt the dev to install the PagerDuty app and setup their notifications
• Add the user to the SimpleReport Escalation

Other Services

• DAP: Ask dev to follow the instructions
• search.gov: add the user to https://search.usa.gov/sites/8523/users
• Twilio
• Sendgrid

🎉 🎉 🎉 🎉 🎉