Site-admin access to internal instances

Site-admin access to internal instances (dotcom, s2, rctest, demo) is provided through an auto-approved Entitle workflow. It will grant temporary site-admin access to your dotcom account connected to you sourcegraph.com email. Removing long-lived admin accounts largely reduces the risk of compromised credentials across our instances.

[data:image/svg+xml;base64,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](data:image/svg+xml;base64,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)

Note

This is currently deployed only in the dotcom instance. Other instances are unchanged for the moment.

How it works

You can request access by typing /access_request in Slack, which will pop up the Entitle Access Request dialog. Set the Request type to “Search for permission” and in the Search permission box type dotcom. That will filter the list to [SET] Dotcom site-admin - Internal tool. Click that entry to choose it. Set your desired duration, make sure you add a nice justification and you're good to go!

Access should be granted in less than a minute and will be granted to your normal Dotcom account. Just refresh your session and you're good to go!

Screen Recording 2024-05-16 at 11.36.01.mp4

Click here to request access now.

Note

This requires users to have a verified @Sourcegraph.com email account as their primary emailattached to their SAMS account used to log into Dotcom.

If you have any issues with the integration, please drop a message in #discuss-core-services.

Maintenance

This is an MSP called EntitlerEntitle integration built into SAMS, with the code hosted in sourcegraph/sourcegraph-accounts.