--- title: 'Onboard Builder Teams to Their Team Development AWS Accounts' menuTitle: '6. Onboard Builder Teams' disableToc: true weight: 60 --- {{% comment %}} Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. SPDX-License-Identifier: CC-BY-SA-4.0 {{% /comment %}} In this step either Security or Cloud Administrators will onboard a limited set of initial builders who will have access to their team development environments. The outcome is that a small team of builders has the knowledge to start using their team development AWS accounts, where to find basic usage documentation, and who to contact for support. This step should take about 60 minutes to complete. {{< toc >}} ## 1. Assemble Onboarding Documentation Work with your cross-functional colleagues in Security, Compliance, and Finance to assemble the basic form of a getting started document and share it with the members of the initial builder teams so that they understand the fundamentals of their responsibilities, access permissions, and how to access and begin using their team development AWS accounts. See the [Example Getting Started Guide for Builder Team Members]({{< relref "01-getting-started-guide-builder-team-members.md" >}}) as a recommended starting point. ## 2. Create Team Development Groups in AWS SSO Create a new group in AWS SSO for each of the builder teams and associate those groups with an initial set of permissions and their respective team development AWS accounts. 1. As a Cloud Administrator, use your personal user to log into AWS SSO. 2. Select the AWS **`management`** account. 3. Select **`Management console`** associated with the **`AWSAdministratorAccess`** role. 4. Select the appropriate AWS region. 5. Navigate to **`AWS SSO`**. 6. Access **`Groups`** in AWS SSO. 7. Select **`Create group`**. 8. Provide a group name. For example, replacing `example` with your organization's identifier: * `example-dev-infra` * `example-dev-` 9. Provide a description. For example: * `Dev - Foundation` * `Dev - ` 10. Select **`Create`**. ## 3. Grant Development Groups Access to Team Development AWS Accounts Next, enable each team development group to access the associated team development AWS account. 1. Access **`AWS accounts`** in AWS SSO. 2. Select the checkbox next to the team development AWS account of interest. For example: * `dev-infra` * `dev-` 3. Select **`Assign users`**. 4. Select **`Groups`**. 5. Select the checkbox next to the group of interest. For example: * `example-dev-infra` * `example-dev-` 6. Select **`Next: Permission sets`**. 7. Select the checkbox next to **`example-dev-infra-team`**. 8. Select **`Finish`**. Repeat the process above to address all of the initial team development groups and AWS accounts. ## 4. Create Builder Team Users in AWS SSO {#create-builder-team-users} Now that you've established the two team development groups in AWS SSO and granted those groups permissions to access their respective team development AWS accounts, your next step is to create a user in AWS SSO for each builder team member. 1. Access **`Users`** in AWS SSO. 2. Select **`Add user`**. 4. Specify a user name and complete at least the other required fields. Typically, the user name will simply be the user's corporate email address. 5. Select **`Next: Groups`**. 6. Select `example-dev-` or similar. 7. Select **`Add user`**. Repeat these steps for each builder team user. ## 5. Add Foundation Team Members to Development Group Since you've already created users in AWS SSO for foundation team members, all you need to do to at this stage is to add the foundation team member users to the newly created foundation team development group in AWS SSO. 1. Access **`Groups`** in AWS SSO. 2. Select `example-dev-infra`. 3. Select **`Add users`**. 4. Select the checkbox for each foundation team member. 5. Select **`Add users`**. The foundation team members now have access to the foundation team development AWS account. ## 6. Brief Builder Team Members Meet with the builder team members to brief them on their access and other topics covered in the [Example Getting Started Guide for Builder Team Members]({{< relref "01-getting-started-guide-builder-team-members" >}}).