|
1 |
| -# Team |
| 1 | +# NAIS team |
2 | 2 |
|
3 | 3 | Everything in NAIS is organized around the concept of a team.
|
| 4 | +Nothing in NAIS is owned by an individual; the team as a whole owns the [workloads](./workloads.md) built by the team, as well as all provisioned resources. This is to ensure that everything can continue to operate even if someone leaves. |
4 | 5 |
|
5 |
| -A team is a group of people, typically working on the same set of products or services, and sharing the same set of responsibilities. |
| 6 | +A NAIS team doesn't necessarily map directly to the organizational team unit, and (usually) consists of purely technical personnel developing and operating on the same set of products or services. The reason for this is that being member of a NAIS team will grant you access to all the workloads and provisioned resources that the team owns. To reduce the attack surface, it's a good idea to limit access to the people that actually need it. |
6 | 7 |
|
7 |
| -The team owns the workloads built by the team, as well as all provisioned resources. Nothing is owned by an individual, but by the team as a whole. This is to ensure that the team can continue to operate even if a member leaves the team. |
8 |
| - |
9 |
| -A team doesn't necessarily map directly to the organizational team unit, and usually consists of technical people involved in the actual development and operations. The reason for this is that being member of a NAIS team will grant you access to all the workloads and provisioned resources that the team owns. To reduce the attack surface, it's a good idea to limit access to the people that actually need it. |
| 8 | +To [become a member](../how-to-guides/team.md) of a NAIS team, you need to have a Google account that is a member of your organization's Google Workspace. |
10 | 9 |
|
11 | 10 | ## The anatomy of a team
|
12 | 11 |
|
13 |
| -A team has two different roles, `owner` and `member`. |
| 12 | +A team has two different roles, `owner` and `member`. |
14 | 13 | A team has at least one `owner`, and can have multiple `members`. The `owners` have permission to add and remove `members`, as well changing the roles of the `members`.
|
15 | 14 | You can be a member and owner of multiple teams.
|
16 | 15 |
|
17 |
| -## What does NAIS provide a team? |
18 |
| - |
19 |
| -When you [create a team](../how-to/create-team.md), NAIS will ensure you have the following: |
20 |
| - |
21 |
| -- A isolated area for your team's workload, in each environment (e.g. dev and prod) |
22 |
| -- A GitHub team with the same name, in your GitHub organization. The members of your NAIS team will be synchronized with the GitHub team. |
23 |
| - |
24 |
| - |
25 |
| -TODO: |
26 |
| -- Requirement: google user |
27 |
| - |
28 |
| - |
29 |
| - |
30 |
| - |
31 |
| - |
32 |
| - |
33 |
| - |
34 |
| - |
35 |
| - |
36 |
| - |
37 |
| - |
38 |
| - |
39 |
| - |
40 |
| - |
41 |
| - |
42 |
| - |
43 |
| - |
44 |
| - |
45 |
| - |
46 |
| - |
47 |
| - |
48 |
| - |
| 16 | +## What does a NAIS team provide? |
49 | 17 |
|
| 18 | +When you [create a team](../how-to/create-team.md), the following will be provisioned for you: |
50 | 19 |
|
| 20 | +- An isolated area for your team's workload and resources in each environment (e.g. dev and prod) |
| 21 | +- A GitHub team with the same name in your GitHub organization. The members of your NAIS team will be synchronized with the GitHub team. |
| 22 | +- Roles and permissions to access the workloads and resources in the team's area. |
0 commit comments