Processes
Access Management
How access is requested, granted, and reviewed.
Purpose
Control access to production systems and sensitive data.
Procedure
- Request access with justification and scope (gcloud, prod DB, or tooling).
- Approvals by the relevant service owner or engineering leadership.
- Provision access with least privilege and time-bounded permissions where possible.
- Review and revoke access when it is no longer needed.
Notes
- Access is handled case-by-case today; use Slack for coordination.
Last updated on