Responsibilities and access control

Production environments

• By default, only Team Cloud can perform Disaster Recovery (DR) in production.
• This is because DR requires access to the central backup account and elevated permissions in the DR account, according to Bymiljøetaten’s guideline “Access Management in Production Databases”.

Product Developer Responsibilities

• Request and schedule regular DR practice to be done for production environments by Team Cloud.
• Maintain oversight of DR needs and granted access for their application.

Exception: Developer-Executed DR

• If a developer team needs to perform DR themselves (for example, for critical applications requiring rapid incident response or when Team Cloud is unavailable outside normal working hours), this must be requested by the Product Developer.
• Team Cloud:
  • Grants access to the specified individuals
  • Documents the granted access
• The Product Developer remains responsible for managing and reviewing this access.

Non-production environments

• Any developer team member can perform DR.
• The developer team:
  • Tests DR procedures
  • Requests clarification or training from Team Cloud if documentation is unclear or improvements are needed
  • Requests and schedules a DR practice to be done on preproduction environments by Team Cloud if needed.

Documentation

• Team Cloud has documented the DR process.
• This documentation can be shared with development teams when required.