Prevent user from logging into the production instance

I like refreshing our playgrounds a lot and I don’t want any chance of certain people logging into the production instance.

I know there is a condition in BPM to detect the production instance but which business object or table (if any) would be appropriate to place a BPM of this nature?

1 Like
  1. Add the “non-prod” users to a security group.
  2. Create a function that disables users in said group. I’ve actually done something similar to disable separated users as part of our offboarding script. If you’re interested, I can walk you through it. It only works if you jump through some specific hoops.
  3. Add a REST call to your new function to your refresh script. Alternatively, just run it on a schedule or manually run it from Schedule Functions app.
1 Like

@Mark_Wonsil spoke once of just disabling users for a moment.

I did a BAQ of ACTIVE, non-Security Manager users and used DMT to disable the users. Then I would use the same file to enable them. The nice thing is that it didn’t force a password reset as it would if done in the UI.

3 Likes

Here is what @LoganS and I did.

Found the right method directive and built a couple of conditions as a safety to ensure we don’t lock admin accounts out

3 Likes