Working/ Testing without Admin role on QA/PROD

[Nikhil Bajaj9]

Hi All,

I want my testers to Test in QA environment and cross verify the things in PROD after code movement but i don't want to give them Admin Role on PROD and QA as well. Can you please suggest the best strategy or what role apart from sn_read_only, ITIL and impersonator i should provide my Dev and Testers on QA/PROD environment. 

@Ankur Bawiskar , @Dr Atul G- LNG , @Allen Andreas , @Mark Roethof , @Maik Skoddow , @Ashutosh Munot1 , @Sandeep Rajput , @Anurag Tripathi , @Prasad Pagar , @Ravi Gaurav , 

[SumanthDosapati]

@Nikhil Bajaj9 

Testers can have admin in QA instance and

RO Admin (sn_read_only + admin) in Prod Instance.

In QA instance if you still dont want to give admin, the go with individual roles(based on modules they test) along with itil and impersonator.

Accept the solution and mark as helpful if it does, to benefit future readers.
Regards,
Sumanth

[Sandeep Rajput]

@Nikhil Bajaj9 Could you please share some details on the features these users are going to test? We usually do not grant any elevated roles to non Admin users on production. We form different user groups based on their job functions and grant roles (aligned with their job function) to the groups. Initially testers are added to these groups so that they can verify different features by executing the test cases and prepare test reports. Once all the features are verified the testers are removed from the groups. 

[Nikhil Bajaj9]

Hi Sandeep,

We too have groups but what i want is a strategy that Testers and Dev will work on QA and PROD without having Admin Roles. I want either the list of all roles which we should give the Dev and Testers to work on complete ITSM/ITAM Modules.