Coordinate Removal Of CsiUsers Account From Project Permissions Group [internal]\Loc Service Account

[davfost]

The CsiUsers account should be removed from the project permissions group [internal]\Loc Service Account in order to meet wave 1 security requirements.

The initial ask to add the manage identity account Juno-dss-aad-multitenant-app-PROD to the project permissions group [internal]\Loc Service Account has already been done.

• Kevin Liang (CE) [email protected] intends to remove the CsiUsers account by the end of June 2024.
• Location of the permissions group for [internal]\Loc Service Account at Settings · Permissions (dnceng) - Settings (azure.com)

• Notify Kevin Liang (CE) [email protected]that the manage identity account Juno-dss-aad-multitenant-app-PROD has been added to the project permissions group [internal]\Loc Service Account
• Verify if any of our service currently depend on the project permissions group [internal]\Loc Service Account and require updates to use the new manage identity account Juno-dss-aad-multitenant-app-PROD
• Coordinate with the account removal with Kevin Liang (CE) [email protected] to ensure they are ready to move to the managed identity account for localization pipelines.
• Once all impacted parties are ready to move to the new manage identity account Juno-dss-aad-multitenant-app-PROD remove the CsiUsers account from the project permissions group [internal]\Loc Service Account

NOTE:

• The rollback process if an uexpcted break occurs should just be to add the CsiUsers account back to the project permissions group [internal]\Loc Service Account

Release Note Category

• [ ] Feature changes/additions
• [ ] Bug fixes
• [ ] Internal Infrastructure Improvements

Release Note Description