User Management in Multiple Environments

Rick Root
Rick Root
Tenth Anniversary Kudos 2 Name Dropper Participant
in Blackbaud CRM Developer Discussions

Has anyone built any kind of app to streamline user management across mtuliple CRM environments?

I'd like to be able to go to one place and create users, de-activate users, assign permission, andh ave all of those things go to multiple environments (prod, dev, staging, training, etc)

Thoughts?

Comments

  • Brantley Hobbs
    Brantley Hobbs
    Sixth Anniversary Name Dropper Facilitator 1

    @Rick Root we (UGA) have some powershell that we use to manage the (local) AD groups we use for permissions. From there we use a BB supplied utility that uses the API to re-sync roles early every morning.

    We're on-prem and I honestly don't know enough about how the Azure cloud hosted stuff works to know if it would be useful for you (if you are Azure hosted), but you are welcome to it. In our case we're using the same AD groups across all environments, but it is possible to have different groups targeted for different environments.

  • Jennifer Borri
    Jennifer Borri
    Tenth Anniversary Kudos 1 Name Dropper Participant

    @Rick Root We don't have an app, but we manage our users permissions in our AD. AD groups are linked to the BBCRM security role group feature. A BB supplied Role Sync utility is then scheduled on the app servers on each environment to run every X minutes. It adds new users and permissions based on AD group membership and removes permissions when the user is removed from an AD group. We only have to manually add and remove sys admin permissions…everything else is taken care of on the AD side. (Self-hosted in AWS)

Categories