1434637 - Add owners to testdaybot app

Status: RESOLVED FIXED

(mozilla.org :: Heroku: Administration, task)

Description

[Dave Hunt [:davehunt] [he/him] ⌚BST]

I have recently created the testdaybot in Heroku to move it out of SCL, and transferred ownership to the mozillacorporation account. Please add the following Heroku users as owners of the app:

[e-mail]
[e-mail]
[e-mail]
[e-mail]

Comment 1

[Ed Morley [:emorley]]

Hi!

Please could you ask all of those users to create a Heroku account, enable 2FA (via https://dashboard.heroku.com/account) and let me know when they've done so? (Unfortunately Heroku doesn't have a way to enforce 2FA, so I have to vet users manually as I add them).

Also if any of the above have Mozilla LDAP emails, they would be preferred since it would reduce the migration effort when we switch to SSO in the future (bug 1387250).

Many thanks :-)

Comment 2

[Ed Morley [:emorley]]

Also let me know which permissions they'll need:
https://devcenter.heroku.com/articles/app-permissions-cheatsheet

Comment 3

[Dave Hunt [:davehunt] [he/him] ⌚BST]

Thanks Ed! I believe the permissions they will need are:

* View config variables
* Edit config variables
* Restart app
* View logs

Andrei: Could you take a look at comment 1 from Ed and let us know when all of the users have configured 2FA for Heroku? Also note Ed's comment about preferring to use LDAP emails if available. Thanks!

Comment 4

[Ioana Chiorean]

Hey, I have changed my account under LDAP and set the 2FA.

Comment 5

[Andrei Vaida [:avaida]]

(In reply to Dave Hunt [:davehunt] ⌚️UTC+0  from comment #3)
> Andrei: Could you take a look at comment 1 from Ed and let us know when all
> of the users have configured 2FA for Heroku? Also note Ed's comment about
> preferring to use LDAP emails if available. Thanks!

Of course! Ed, we all created Heroku accounts using our LDAPs, and 2FA has also been configured. Here's the updated list of users that need to be added as owners of the app:

[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]

Comment 6

[Ed Morley [:emorley]]

Many thanks! 2FA confirmed enabled for all of those accounts, and added to the app with view+deploy+operate permissions.

Dave, I've also given you `manage` permissions, which means you can update the user list in the future (just check for 2FA when doing so :-)).

Let me know if anything else needed.