James Robinson

Hmm, I'm not sure why deleting the `data` storage account would make any difference here. Running `Run_ADSync.ps1` will trigger synchronisation of the groups in AzureAD/Entra to the ones on the...

Yes, I think it probably should be moved to a later milestone. Just wanted to make sure we were thinking about it and moving it deliberately.

Some discussion on #1820: > Perhaps we could replace `dsh config upload config.yaml` with something like `dsh deploy shm --config config.yaml` which would prompt for "are you sure?" if there's...

This is one to check with RCP but I don't think we're using any classic administrator roles on these subscriptions.

Could this be because the subscription was set up a while ago, before retirement was on the horizon?

> In general, I don't like how `cli.py` is structured. It isn't very idiomatic typer. > > I think it would be much clearer and easier to use if it...

It's currently created once per context here: https://github.com/alan-turing-institute/data-safe-haven/blob/develop/data_safe_haven/context/context.py#L82-L85.

This line (https://github.com/alan-turing-institute/data-safe-haven/blob/develop/data_safe_haven/infrastructure/project_manager.py#L108) loads the encryption key from a DSHPulumiProject, but there's nothing that sets the encryption key for a *new* DSHPulumiProject project (the default constructor from https://github.com/alan-turing-institute/data-safe-haven/blob/develop/data_safe_haven/config/pulumi.py#L61 sets this...

Closed by #2129.

1. You can upload a config which contains an SHM and SRE with the same name. 2. If you run `dsh deploy sre ` then the deployment starts running. It's...