On the Pulumi service, it seems only one person can be an admin. Is there a way that more than one person can add/remove members? Mostly, we want it to not be a bottleneck on a single person (or an issue if their account gets disabled)?
03/01/2022, 11:38 PM
That doesn't seem right that only one person can be an admin, but I haven't done a lot with orgs lately. I'm double-checking with some folks internally to ensure that's not a bug.
Got some information back. On the Team tier, there's only one admin. Enterprise has multiple admins. It's on the pricing page in the Security section of the table: https://www.pulumi.com/pricing/
Are you on the Team tier?
03/02/2022, 5:51 AM
An I see it now.
That's a surprising limitation on the Team edition, as it makes it very difficult to not have a single point of failure for Pulumi in terms of who can set it up.
03/02/2022, 3:31 PM
I don't personally have much insight into that decision for Team edition, unfortunately. In prior positions with other tools with similar admin situations, I've gone the route of having a bot account with the creds locked in a password safe, but I know that's not the ideal solution and can still be problematic if the bot account gets disabled or compromised (or an email tied to it does).
03/02/2022, 3:32 PM
Thanks @great-queen-39697, all good. I understand it’s a business decision. Appreciate you pointing out that it’s an intentional limitation.