← Ground Control

Permissions Matrix

The Matrix

This page is a preliminary draft of what permissions eveyone should have based on department and team, and is what Ground Control is using to grant permissions to new hires (this mirrors the department list in Jira). If you notice anything wrong or missing, ping #org-ground-control on Slack to get it updated.

For those submitting New Hire tickets, if your person needs anything beyond what’s listed here please include that in the Anything else? field.

Ground Control can view the same data in spreadsheet format here.

The following info is included:

Notes

  • An n/a under __ Role means no account should be created for that service
  • If __ Role is populated but __ Group(s) is not, then an account should be created but not added to any groups
  • A ? in any field is data that needs to be filled out

Permissions

Admin

Cost Center381100
ContactLory Trost
Google RoleMember
Google Group(s)Admin Team
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)n/a
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)n/a
TrelloMember
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Engineering


Aggregation

Cost Center381300
ContactBeejay Morgan
Google RoleMember
Google Group(s)Aggregation
LDAP Role (GID)enterpriseauth-banno-ops
LDAP Group(s)banno-dev
enterpriseauth-banno-ops
GitHub RoleMember
GitHub Group(s)aggregation
banno
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)n/a
TrelloMember
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Role?
PagerDuty Group(s)?


Analysts

Cost Center381300
ContactRachel Fredericksen
Google RoleMember
Google Group(s)Analysts
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)analyst
banno
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-analysts
Trello RoleMember
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Client

Mobile

Android
Cost Center382700
ContactJanene Pappas
Google RoleMember
Google Group(s)Android Dev
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)android
banno
mobile
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-android
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a

Note: Mobile developers with test devices who are still on NON Jamf Banno Macs have those Macs added to the Mobile Developer group in Endpoint Manager to allow those devices to work. This is not applicable to new hires.

GoDough
Cost Center146600
ContactJanene Pappas
Google RoleMember
Google Group(s)GoDough Dev
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
mobile
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)n/a
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a

Note: Mobile developers with test devices who are still on NON Jamf Banno Macs have those Macs added to the Mobile Developer group in Endpoint Manager to allow those devices to work. This is not applicable to new hires.

iOS
Cost Center382700
ContactJanene Pappas
Google RoleMember
Google Group(s)iOS Dev
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
iOS
mobile
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-ios
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a

Note: Mobile developers with test devices who are still on NON Jamf Banno Macs have those Macs added to the Mobile Developer group in Endpoint Manager to allow those devices to work. This is not applicable to new hires.

UI

Content
Cost Center381300
ContactLandon Lewis
Google RoleMember
Google Group(s)Content
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
ux
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-enterprise-content
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Enterprise
Cost Center381300
ContactLandon Lewis
Google RoleMember
Google Group(s)Enterprise
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
ux
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-enterprise-admin
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Online
Cost Center381300
ContactLandon Lewis
Google RoleMember
Google Group(s)Online
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
ux
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-web
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Treasury
Cost Center38####
ContactRyan DeBoer
Google RoleMember
Google Group(s)TreasuryUX
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
team-treasury
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)n/a
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Data Services

Aviato

Cost Center381300
ContactMike Munhall
Google RoleMember
Google Group(s)Aviato
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
team-aviato
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-aviato
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Curry

Cost Center381300
ContactDan Chilton
Google RoleMember
Google Group(s)Curry
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
team-curry
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-curry
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Discovery

Cost Center381300
ContactZach McCoy
Google RoleMember
Google Group(s)Discovery
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
discovery
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-discovery
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Dreamwork

Cost Center381300
ContactDave Johnson
Google RoleMember
Google Group(s)Dreamwork
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
team-dreamwork
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-dreamwork
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Jabberwocky

Cost Center381300
ContactMike Munhall
Google RoleMember
Google Group(s)Jabberwocky
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
jabberwocky
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-jabberwocky
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Kayak

Cost Center381300
ContactVikram Dhinsa
Google RoleMember
Google Group(s)Kayak
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
team-kayak
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-kayak
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Mirai

Cost Center381300
ContactCecilia Osborn
Google RoleMember
Google Group(s)Mirai
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
team-mirai
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-mirai
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Prism

Cost Center381300
ContactDan Chilton
Google RoleMember
Google Group(s)Prism
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
nodejs
prism
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-prism
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Pupper

Cost Center381300
ContactDave Johnson
Google RoleMember
Google Group(s)Pupper
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
team-pupper
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-pupper
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Developer Advocates

Cost Center381300
ContactJaime Lopez
Google RoleMember
Google Group(s)Developer Advocates
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)n/a
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Infrastructure

Cost Center382300
ContactEli Barb
Google RoleMember
Google Group(s)Infrastructure
LDAP Role (GID)enterpriseauth-banno-ops
LDAP Group(s)banno-admin
banno-dev
enterpriseauth-banno-ops
GitHub RoleMember
GitHub Group(s)banno
infrastructure
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-infrastructure
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Infrastructure
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Infrastructure regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Team Odyssey

Cost Center382300
ContactJon Miller
Google RoleSuper Admin
Google Group(s)Tech Ops
LDAP Role (GID)enterpriseauth-banno-ops
LDAP Group(s)Agent Smith Admins
banno-admin
enterpriseauth-banno-ops
GitHub RoleOwner
GitHub Group(s)banno
ops
Jira RoleBasic
Jira AccessService Desk
Software
Jira Group(s)team-tech-ops
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-TechOps
``
JHA-PSA-JAMF-Banno-Support
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of TechOps regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty RoleGlobal Admin
PagerDuty Group(s)?


Geezeo

Currently the Geezeo team has their own instance for almost everthing and use their JHA accounts for primary authentication. Banno only provides a laptop and assistance getting logged into it. More info here.
Cost Center395900 Operations
395905 Product
395909 Technology
ContactErica Anderson
Google Rolen/a
Google Group(s)n/a
LDAP Role (GID)n/a
LDAP Group(s)n/a
GitHub Rolen/a
GitHub Group(s)n/a
Jira Rolen/a
Jira Accessn/a
Jira Group(s)n/a
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


OpenAnywhere

Cost Center395800 Operations
395808 Research and Development
ContactBen Moran
Google Rolen/a
Google Group(s)OpenAnywhere
 
Note: Add @jackhenry.com email to this group
LDAP Role (GID)n/a
LDAP Group(s)n/a
GitHub RoleMember
 
Note: Send invite to @jackhenry.com email
GitHub Group(s)openanywhere
Jira Rolen/a
Jira Accessn/a
Jira Group(s)n/a
Slack RoleMember
 
Note: Send invite to @jackhenry.com email
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Operations

Implementation

Cost Center382100
ContactSheena Deutsch
Google RoleMember
Google Group(s)Implementation
LDAP Role (GID)enterpriseauth-banno-ops
LDAP Group(s)banno-dev
enterpriseauth-banno-ops
GitHub RoleMember
GitHub Group(s)banno
implementation
Jira RoleBasic
Jira AccessService Desk
Software
Jira Group(s)n/a
TrelloMember
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Support

Cost Center381200
ContactDerek Van Dyke
Google RoleMember
Google Group(s)Support
LDAP Role (GID)enterpriseauth-banno-ops
LDAP Group(s)banno-dev
enterpriseauth-banno-ops
GitHub RoleMember
GitHub Group(s)banno
implementation
support
Jira RoleBasic
Jira AccessService Desk
Software
Jira Group(s)team-support
TrelloMember
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Product Design & Management

Cost Center382000
ContactMatt Kerner
Google RoleMember
Google Group(s)Product
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
product
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-design
team-product-managers (leads only)
TrelloMember
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Documentation

Cost Center382000
ContactWes Iliff
Google RoleMember
Google Group(s)Documentation
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)banno-dev
enterpriseauth-banno-platform
GitHub RoleMember
GitHub Group(s)banno
documentation
Jira RoleBasic
Jira AccessSoftware
Jira Group(s)team-documentation
Trellon/a
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
``
 
Note: Contractors get CN=JHA-PSA-F5APMVPN-Banno-Contractor
instead of Standard regardless of team
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a


Web Solutions

Cost Center377500
ContactShea Hardin
Google RoleMember
Google Group(s)Web Solutions
LDAP Role (GID)enterpriseauth-banno-platform
LDAP Group(s)Agent Smith Web Devs
GitHub RoleMember
GitHub Group(s)jha web
Jira RoleBasic
Jira AccessService Desk
Software
Jira Group(s)team-web-solutions
TrelloMember
AD On-Prem Group(s)CN=JHA-PSA-F5APMVPN-Banno-Standard
Azure AD Group(s)JHA-PKCS-BannoSystems
PagerDuty Rolen/a
PagerDuty Group(s)n/a