I have three environments: Dev, Test, and Prod. I would like to assign security groups to restrict access to these environments.
Currently, I’ve created two security groups which are DEV_SG and TEST_SG for the Dev and Test environments.
The goal is to:
Allow developers to access the Dev environment and create apps there.
Allow a different group of testers to access the Test environment and run the apps.
Keep the Prod environment open to all users to run the Apps in the company.
Should I:
Create two Teams for each security group in the Dev and Test environments,
After creating the teams, then assign the security role "Environment Maker" to the developer Team in Dev env., and
Assign the "Basic User" role to the tester Team in Test env.?
While creating the Team, I don't know which Membership type should I choose to?
I’m quite confused about the access permission differences between security groups, security roles, and membership types while creating a Team within an environment. Could you please share the best practice for managing access in this scenario?
If there are any helpful articles, I would really appreciate your recommendations.
Many thanks in advance!
Best regards,
Lee