New Docs Section for Enterprise Users
Background
As we start to add more and more features revolving around Enterprise Users, it is time we have a dedicated section in the docs about this feature-set that can be updated as we add controls. Right now, the user claims process is very behind the scenes and operates off of domain verification - we need to document what is happening for our users. More importantly, we need to let them know what having "Enterprise Users" gets them, from an administrative and security perspective.
Automated User Claims Processes:
- Domain Verification MVC using Domain(s) verifie... (#353030 - closed)
- Enterprise Users - MVC: Automatic Claim of exis... (#322039 - closed)
Proposal
Create a new section in the documentation called "Enterprise Users" (also..it's not too late to change the name. GitHub calls it "Enterprise Managed Users" - [docs](https://docs.github.com/en/enterprise-cloud@latest/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/about-enterprise-managed-users).
In this section, outline the following:
- How a user becomes an enterprise user
- Definition of an Enterprise User
- How to verify domain in order to have enterprise users be claimed (they are also automatically tagged as "Enterprise" when provisioned vis SCIM or SAML)
- Bounds of Enterprise Users (SaaS, Premium+ Only)
- Top-Level Group Controls (do we call this Namespace?)
-
Prevent user from deleting their account
-
Prevent user from changing their email address
-
Prevent user from creating groups and projects outside the corporate group
-
No e-mail confirmation required for provisioned users
-
Group Owner can obtain user's email addresses via UI [issue]
-
- User-Level Controls
- Reset 2FA for a user
- Impersonate a user
- User knows they are Enterprise managed by having a "Managed by" badge
- User implications of being Enterprise Managed
- Link/explanation of ToS that was agreed to - when using company e-mail, account belongs to company
References
- Solutions Brief - internal only