-
Notifications
You must be signed in to change notification settings - Fork 989
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Rearranging ADO page #6826
Rearranging ADO page #6826
Conversation
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
2. Remove the **Microsoft Graph / User Read** permission. | ||
3. Click **Add a permission**. | ||
4. Select **Azure DevOps**. | ||
5. Select the **user_impersonation** permission. This is the only permission available for Azure DevOps. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
[custom.Typos] Oops there's a typo -- did you really mean 'user_impersonation'?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approved with some wording suggestions!
|
||
::: | ||
|
||
To use dbt Cloud's native integration with Azure DevOps, an account admin needs to set up an Microsoft Entra ID app as a service principal. We recommend setting up a separate [Entra ID application than used for SSO](/docs/cloud/manage-access/set-up-sso-microsoft-entra-id). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
To use dbt Cloud's native integration with Azure DevOps, an account admin needs to set up an Microsoft Entra ID app as a service principal. We recommend setting up a separate [Entra ID application than used for SSO](/docs/cloud/manage-access/set-up-sso-microsoft-entra-id). | |
To use dbt Cloud's native integration with Azure DevOps, an account admin needs to set up a Microsoft Entra ID app as a service principal. We recommend setting up a separate [Entra ID application than used for SSO](/docs/cloud/manage-access/set-up-sso-microsoft-entra-id). |
Co-authored-by: Leona B. Campbell <[email protected]>
Co-authored-by: Leona B. Campbell <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Two changes I'm requesting:
- I want us to move service user to a separate page rather than having all 3 sections on adding service principal for the first time, migrating to service principal and service user overview on the same page to avoid any confusion.
- The migrating to service principal might still be incorrect. We don't want the user to add in the app credentials again, rather we want to tell them to use the same app for service principal which they used for service user to begin with. They need to go to org settings > users and add their service user app registration as a service principal. The adding the user to the ADO org settings might be missing as well which we need to add.
To avoid the back and forth and so we can ship this early next week, I've scheduled a pairing session for us. Let me know if there's a better time for you if that doesn't work. Thanks!
|
||
You can use these instructions to create a service principal app. The service principal feature is being gradually rolled out to dbt Cloud accounts, so it may not be available in all accounts. | ||
|
||
If you need to configure dbt Cloud and Azure DevOps but don't see the **Service principal** option in your account settings, use the [**Service user**](#set-up-service-user) configuration for now. You can easily [migrate to a service principal](#migrate-to-service-principal) when available for your account. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This URL for service user doesn't work. I think it needs to be #connect-a-service-user
Thanks for proactively setting time up with @matthewshaver on Monday, @sidpatel13! |
3. A dbt Cloud account admin needs to [add the app to dbt Cloud](/docs/cloud/git/setup-azure#add-your-azure-ad-app-to-dbt-cloud). | ||
4. dbt Cloud developers need to [personally authenticate with Azure DevOps](/docs/cloud/git/authenticate-azure) from dbt Cloud. | ||
- [**Service principal (recommended)**](/docs/cloud/git/setup-service-principal): Currently, this feature is in a phased rollout and not widely available to all accounts. | ||
- [**Service user (legacy)**](/docs/cloud/git/setup-service-user): Availble to all accounts. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
typo: Available
2. Click the **edit icon** to the right of the **Azure DevOps** settings. | ||
3. Change **Service user** to **Service principal** and click **Save**. You do not need to edit any existing fields. | ||
|
||
Continue on from the [add role to your service principal](#add-a-role-to-service-principal) section on this page and follow the remaining instructions. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we update this line and include the other section that is relevant here as well which is to connect azure devops. Following the remaining instructions is misleading since it will also include adding the app details to dbt cloud which we don't want the migration flow to include
What are you changing in this pull request and why?
This moves around some sections and brings the full Service User instructions back. This is a bandaid for some clients between worlds and utilizes two H1 headers. I know this is a little outside our style requirements, but this would be helpful.Splits the ADO setup into two docs - one for service principal one for service user
Updates the intro page to link to the appropriate files
There is a banner up top that is new language in need of review
https://www.notion.so/dbtlabs/Azure-DevOps-Service-Principal-18abb38ebda7808f96bcf4a4bc9a4944?pvs=4
Checklist
🚀 Deployment available! Here are the direct links to the updated files: