Skip to main content

SRE Onboarding Checklist for Empower Team Members

📘 This article calls out how to advise SRE team members to onboard team members. In general, you should not have to do this yourself.

  1. Login to the Azure portal and add the new team members to the following AD Groups, within Entra:
    1. "Empower Platform" (Everyone)
    2. "Empower" (Everyone)
    3. "Empower-Dev-QATeam" (QA)
    4. "Empower-SREPod" (SRE)
    5. "Empower-Dev-InfrastructureTeam" (New/Junior SRE)
    6. "Empower-Prod-InfrastructureTeam" (Senior/Leading SRE)
    7. "Empower-DataPod" (Data Pod)
    8. "Empower-ClientDeliveryTeam" (Delivery Engineers)
    9. "Empower-Dev-DeveloperTeam" (Everyone, which links to GitHub access)
  2. Confirm with the new hire's manager that a "Capax Global" Hitachi IT ticket has been submitted, to request these credentials for the new hire, for accessing the "Capax Global" Entra Tenant, separate from the Hitachi Entra tenant. This Capax access is responsible for access our highest level testing regression environment.
  3. Within the "Empower" Azure DevOps (ADO) project, assign the new hires to "Team Permission" groups, as required.
    1. Source: https://dev.azure.com/hsol-opic/Empower/_settings/permissions
    2. DataPod
    3. Software Pod
    4. SREPod
    5. (No QAPod permission group)
  4. They will all need hsol-opic Organization licensing, to see Test Suites.
    1. Source: https://dev.azure.com/hsol-opic/_settings/users
    2. (If NOT QA): The new hire's hitachisolutions.com e-mail address should be listed in this screen and have a "Basic" license assigned.
    3. (If QA): Click "Group Rules" and then find "Empower-Dev-QATeam", select the three dots on the lower right side -> Manage Members -> Type in the new QA member's hitachisolutions.com account.
  5. Above Entra Access should provide everyone StateDB and Empower non-production Environmental Access.
  6. Provide them access to DataDog.
    1. Source (SSO Login): https://us3.datadoghq.com/organization-settings/users
    2. Upper right -> Invite Users
    3. Paste in the New Hire's e-mail address.
    4. (Non SRE/Team Lead): Assign 'DataDog ReadOnly' Role
    5. (SRE): Assign DataDog SRE Role
    6. (Restricted Roles): Assign DataDog Admin Role
  7. Provide UC Access to Databricks Environments in Hitachi Entra Tenant.
    1. Source is convoluted: need to Go to the Databricks Workspace -> Click Launch Workspace Button -> Authenticate -> Upper right hand corner -> Manage Account -> Authenticate. You can try to go directly through, but SSO isn't consistent. You should end in a "https://accounts.azuredatabricks.net/" prefixed URL.
    2. Start above process here: https://portal.azure.com/#@hitachisolutions.com/resource/subscriptions/b5f57abf-349d-414a-a5a2-9e560d398a25/resourceGroups/neo-augustus-yempower-in-southcentralus/providers/Microsoft.Databricks/workspaces/augustus-in-databricks-02/overview
    3. Click User Management -> And search for existing User.
      1. If not present: Add the user, including First/Last name and e-mail
      2. If present: validate their credentials are "hitachisolutions.com". Sometimes, "hsydn.com" credentials are added. You'll need to add a duplicate name, with "hitachisolutions.com" e-mail/account for SSO to properly work.
    4. Update the UC engineers group membership for Hitachi within Empower Configuration -> admin group -> unity_catalog_users. This task should be covered by Terraform.
  8. (Only Applicable to SRE/Data/QA Members) Login to the Capax Entra Tenant. This requires that step 2 is completed from the hiring manager Add the new team members to the following AD Groups, within Entra:
    1. (SRE): Empower-Capax-SRE
    2. (QA): Empower-Capax-QA
    3. (Data Pod): Empower-Capax Data
  9. (Only Applicable to SRE/Data/QA Members) Login to the Capax Entra Tenant. This requires that step 2 is completed from the hiring manager Add UC Access for Capax UC, similar to above. Connect from a Capax hosted Azure Databricks Workspace.