1. Purpose

This document defines the required access permissions, software installations, and setup steps for onboarding a new developer into the Data Platform team.

Note – Every developer must ensure all the required access are raised and software are installed and verified in the first week of joining the team

2. Access Request Requirements

2.1 Syra Access

Syra is an ITSM platform accessible to end users and IT agents for raising service requests and reporting IT incidents related to internal IT services.

Access should be automatically assigned within a week of joining.

Once access to Syra is granted, the developer can raise the remaining required access requests.

Syra Link - Digital Workplace - Home

3. Required System Access

Entra ID creation – SQO account for Azure access –

BMC Helix Access Management
Raise VM (VDI) request.
Access to Jira
Access to GitHub
Software installation on VDI

3.1 Entra ID Creation

Entra SQO ID is essential to access azure resources only. Below is the process to raise request for SQO account.

Syra Link - https://syensqo-dwp.onbmc.com/dwp/rest/share/OJSXG33VOJRWKVDZOBST2U2CL5IFET2GJFGEKJTUMVXGC3TUJFSD2QKHI5AUISZQGNCDITBRJ5AVGN2JJ43VOUZXJFHTOV2BHBKVEJTSMVZW65LSMNSUSZB5GE3TCMRGMNXW45DFPB2FI6LQMU6UGQKUIFGE6R27JBHU2RI=

Steps to follow -

Click on the above-mentioned link, request form will appear as below and the click on Request Now button.

2. Complete form will appear, where you need to fill in further information.

Type of Request - Tier X Account

Entra ID Tenant Name - syensqosa.onmicrosoft.com (syensqo.com Prod)

Action - Creation

Employee Type - Employee/Contractor

Account Validity - Other

Specify Date - Next year date.

Business Justification - Joining Data Team and going to work on Azure Data Platform and would need the SQO account created for the SySight project resources on azure.

3. Validation - Once SQO account is created, please try accessing Azure portal - : portal.azure.com using SQO account. It might ask to reset the password, please do so.

4. To get an access to fabric, drop an email to DataEngineerAzure@syensqo.com. With the details below

SQO Email Address
Purpose/ Use Case
Duration for access
Level of Access (Contributor/Member/Viewer)

3.2 Access Provisioning: Add User to AD Group

Once SQO account is created, you need to get added in the below mention AD group

Syra Link - https://syensqo-dwp.onbmc.com/dwp/rest/share/OJSXG33VOJRWKVDZOBST2U2CL5IFET2GJFGEKJTUMVXGC3TUJFSD2QKHI5AUISZQGNCDITBRJ5AVGN2JJ43VOUZXJFHTOV2BHBKVEJTSMVZW65LSMNSUSZB5GE3TCMRGMNXW45DFPB2FI6LQMU6UGQKUIFGE6R27JBHU2RI=

Steps to follow –

Click on Request Now, and select Configuration in

2. Select Configuration in Type of Request drop down, then new boxes will appear for further details.

Entra ID Tenant Name – syensqosa.onmicrosoft.com (syensqo.com Prod)

Type of Change – Groups Management

Short Explanation –

As member of data platform team, please add my sqo account in below group

SQO Account – username-sqo@syensqo.com

For Developers - GSA_ADMIN_SUB-OTH - SySight - 00-APP-DEVTEAM

For Reader - GSA_ADMIN_SUB-OTH - SySight - 00-Reader

Expected Due Date – Next Year Future Date

3. Once Request is complete, you will be able to access Azure resource

3.2 BMC Helix Access Management

BMC Helix Access Management is ticket management tool to check the status of tickets and to whom it is assigned

Syra Link - https://syensqo-dwp.onbmc.com/dwp/rest/share/OJSXG33VOJRWKVDZOBST2U2CL5IFET2GJFGEKJTUMVXGC3TUJFSD2QKHI5AUISZQGNCDITBRJ5AVGN2JJ43VOUZXJFHTOV2BHBKVEJTSMVZW65LSMNSUSZB5GE3TEMRGMNXW45DFPB2FI6LQMU6UGQKUIFGE6R27JBHU2RI=

Steps to follow -

Once you click the above-mentioned link before page will appear

2. Click on Request now - Below page will appear, fill the required fields and if you want, you can add collaborator to share your request details to anyone(optional)

Requestor - your AD account (automatically appears)

Nature - Select “Add” from drop down.

Copy from profile - mention - amol.ubale@syensqo.com or shubham.gupta1@syensqo.com

Comments - Give proper comments like below -

“I am joining Data Platform team (SySight Project) hence I need access for BMC Helix for ticket management.”

Collaborators (Optional)

The request usually takes 1-2 days for completion.

3. Validation – Once tickets is complete, please check of if you have access by clicking here - BMC Helix ITSM 25.3.01 | Ticket Console

3.3 VDI Access Request

VDI is a workstation where all the required software will be installed that provides the Data Platform team with a secure, standardized, and efficient environment, supporting both productivity and compliance.

Request Process is different for Internal Employee and Contractors

3.3.1 For Employees

Syra Link - https://syensqo-dwp.onbmc.com/dwp/rest/share/OJSXG33VOJRWKVDZOBST2U2CL5IFET2GJFGEKJTUMVXGC3TUJFSD2QKHI5AUISZQGNCDITBRJ5AVGN2JJ43VOUZXJFHTOV2BHBKVEJTSMVZW65LSMNSUSZB5GIYTGNRGMNXW45DFPB2FI6LQMU6UGQKUIFGE6R27JBHU2RI=

Steps to follow –

Once you click the above-mentioned link, page will appear, click on Request Now

2. Then fill in all the required details.

Type of VM – Persistent VM
Type of Request – Create New VM
AD Account – Short Name
Contact Email Address – Your Email ID
Profile – Windows 11 Full Could Managed – SCO
VM Type – Performance-ext VM (4vCPU, 16 GB RAM, 250 GB HDD)
Type of Access – Select both Remote Access only, Local Administrator
Required Software – Yes
Application found in list – No
Additional Information - Share the list of software that needs to be installed

Hi Team,
Would you please create the persistent VM and install below Softwares;

List of SWs;
Python 3.11 (native, not via MS Store!) ,
VSCode with below extensions - Azure tools - Python - Bicep - Github Copilot,
Git ,
Notepad++ with extensions - Json Tools plugin,
Postman Desktop ,
PowerBI Desktop
Az CLI
SSMS
WinSCP
One Lake Explorer
Zulu - Java
Putty
duckdb

3. Once request is complete, you will receive an email with details, please try login to VDI.

4. Please reach out to tpa.operations@syensqo.com and keep Anup Mule in CC for any issues related to VDI

3.3.2 For Contractor

First raise TPA requests, steps mentioned in the below link,

https://syensqo-dwp.onbmc.com/dwp/app/#/knowledge/KBA00023401/rkm

Once this request will get approved by the sponsor of your contracting company you will be allowed to connect to the VDI You can find your company name and sponsor in this file- SCO TPA COMPANIES V2.xlsx - Google Sheets. If your company name is not present, you need to get that added into the list. You can connect to tpa.operations@syensqo.com and keep Anup Mule in CC for any issues related to VDI. They will guide you with the next steps.

OR

Syra Link - https://syensqo-dwp.onbmc.com/dwp/app/#/catalog/category/1339/SBE/SBE

Click on Third-Party Access (TPA) - User Access Management / Other Request / Software Installation (Software installation option is available for TPA team usage only)

Type of Request - Select TPA - Add/Remove (User)

Type of Action - Add User(s)

Then additional fields will appear, fill all the required fields and add collaborator and submit.

Company name Non-SCO - Check the spreadsheet and specify the same name.

AD Account(s) - Ad account created while registering in Syensqo - short account name.

The Email Address(es) for the User(s): Non Syensqo - Your parent company email id

Additional Comments - This is optional, however mention the team’s name and why you need VM something like below.

“Joining Data Team, hence required new VM for development and Testing.”

3.4 Access to Jira

We are using Jira as a DevOps Board helps your team manage the entire software delivery lifecycle, from planning and coding to deployment and operations, all in a transparent and collaborative environment

Knowledge Article - https://syensqo-dwp.onbmc.com/dwp/app/#/knowledge/KBA00015401/rkm

OR

Syra Link - https://syensqo-dwp.onbmc.com/dwp/rest/share/OJSXG33VOJRWKVDZOBST2U2CL5IFET2GJFGEKJTUMVXGC3TUJFSD2QKHI5AUISZQGNCDITBRJ5AVGN2JJ43VOUZXJFHTOV2BHBKVEJTSMVZW65LSMNSUSZB5GEZDEMBGMNXW45DFPB2FI6LQMU6UGQKUIFGE6R27JBHU2RI=

Steps to follow -

Click on Request now

Verify your details and Click Next

Another page will appear, fill in all details.

Type of Request - User Creation

Please select the application - Jira

Business Justification - Joining the Data Team and going to work on Azure Data Platform. Hence require Jira to access board to create and update tasks. Additional Information – This is important, request will not approve and processed further without full details, so make sure to copy below details.

Access Details

Why do you need access to Jira? Answer: Project Management/Task creation and Updating
Which Jira product do you need access to? Answer: We need access to “Azure Data Squads” space
Access Level Requested: Answer: Project Contributor
Business justification for access? Answer: Working as a Data engineer in the team, i would need to see the Jira board and create and update the task.
Is this access temporary? Answer: No
Do you require any special permissions (e.g., creating projects, manage workflows)? Answer: No Special Permission needed, Only I should be able to see and update the task/epic/user story.

Validation – Once request is approved, try accessing Jira portal

Link: Data teams Epics/Features - Kanban Board - Jira

Note: If you don't get invited then please follow up with the ticket owner.

3.5 Access to GitHub

Syra Link - https://syensqo-dwp.onbmc.com/dwp/rest/share/OJSXG33VOJRWKVDZOBST2U2CL5IFET2GJFGEKJTUMVXGC3TUJFSD2QKHI5AUISZQGNCDITBRJ5AVGN2JJ43VOUZXJFHTOV2BHBKVEJTSMVZW65LSMNSUSZB5GEZDEMBGMNXW45DFPB2FI6LQMU6UGQKUIFGE6R27JBHU2RI=

Steps to follow -

Click on Request Now

2. Verify you details and press next button

3. Please select the application - Github & Github Copilot and give proper justification and submit request

Follow this document to raise the request - GitHub access process - Google Docs
If you face any challenges you can drop an email to Derek Yang (Github Service Owner) and Tanish bhola (DevOps Engineer) to get this access.
You need access on your normal account to Github, not on SQO.

Once you are able to access Github and drop an email to DataEngineerAzure@syensqo.com to get repository access

Link for Github: https://github.com/SQO-SySight

4. Required Software in VDI

Installing these tools on a VM provides a standardized, secure, and controlled environment for development, testing, data analysis, and cloud management. This setup supports productivity, collaboration, and compliance with IT policies.

Required Software -

Python 3.11 (native, not via MS Store!) - Essential for developing and running scripts, data processing, and integrating with various tools and platforms.
VSCode with below extensions - Azure tools - Python - Bicep - Github Copilot - Enables efficient software development, cloud resource management, and automation, improving productivity and code quality.
Git - Facilitates source code management, collaboration, and version tracking, which are critical for team-based development.
Notepad++ with extensions - Json Tools plugin - Useful for quick editing, reviewing, and validating configuration files and scripts, especially JSON data.
Azure CLI
One Lake Explorer - Enables efficient data access and management in cloud data lakes, supporting analytics and data engineering.
Duckdb - Ideal for fast, analytical data processing on local files, supporting data science and analytics workflows.
Postman Desktop - Streamlines API development and testing, ensuring robust integration between systems and services and also useful for testing http Azure functions.
SSMS

Other Software