https://pulumi.com logo
#pulumi-cloud
Title
# pulumi-cloud
c

crooked-kitchen-90092

11/03/2023, 4:00 PM
is there a way to automatically grant team access to new stacks? we’re in the middle of migrating some older infrastructure and creating a fair number of stacks. it’s a tedious manual process, and half the time we forget to do it before someone says “hey i need access to this stack.”
l

little-cartoon-10569

11/05/2023, 6:35 PM
No. We have had that problem for years.
l

lemon-agent-27707

11/10/2023, 3:26 AM
cc @sticky-translator-61903 Definitely something we want to improve. How would you want this to work? We did add a teams flag to the CLI which doesn’t fully automate it, but can be a useful helper https://www.pulumi.com/blog/stack-init-teams-flag/
l

little-cartoon-10569

11/10/2023, 3:30 AM
I didn't know about that feature. Does that grand read, write or admin access?
And what does it do when you're not on an Enterprise plan?
l

lemon-agent-27707

11/10/2023, 3:40 AM
We do have an issue open for specifying permission level and we hope to get to it soon: https://github.com/pulumi/pulumi/issues/14326 Teams are an enterprise feature so the
--teams
flag does require that your org be on an enterprise plan.
l

little-cartoon-10569

11/10/2023, 3:41 AM
For non-enterprise plans, there's no way to add a 2nd owner, is that right? All users are admins on all stacks?
l

lemon-agent-27707

11/10/2023, 3:50 AM
All RBAC related features are a part of the enterprise plan https://www.pulumi.com/pricing/