Connecter Sentry à Lutril
Lutril connects to Sentry with an auth token and reads your organization members with their role, their last sign in, their last activity, whether they have two factor enabled and whether the membership came from your identity provider. Access is time boxed from both ends: a grant invites somebody or raises the organization role on a membership they already have, and the deadline writes the previous role back or removes the membership. A pending invitation is reported as pending rather than counted as access, because nobody has signed in with it yet.
Accès demandés
- member:read (list the organization members and read one membership)
- member:write (invite, raise an organization role for a time boxed grant, restore the previous one, and remove a membership)
Étapes de configuration
- 1
Decide which kind of token you need. Changing an organization role requires a USER auth token: Sentry refuses an organization level role change made with an internal integration token. If you only want the roster and access reviews, an organization token is enough.
Sentry auth tokens - 2
For a user auth token, open the account dropdown at the top left of Sentry and go to User Auth Tokens, then create one with the member:read and member:write scopes.
Create a user auth token - 3
Note the operational catch that comes with a user token: Sentry ties it to the person who created it, so it stops working if that person leaves the organization. Create it from an account you will keep, not from a leaver's.
- 4
Copy the token straight away. Sentry shows it once.
- 5
Find your organization slug. It is the name in your Sentry address, sentry.io/organizations/<slug>.
- 6
In Lutril, connect Sentry, paste the token and the slug. Leave the base URL empty for sentry.io, or set https://de.sentry.io or https://us.sentry.io for a region pinned organization, or your own address for self hosted Sentry.
- 7
To time box Sentry access, set the access levels on the Sentry app in your catalogue to billing, member, admin, manager and owner. Those are Sentry's own organization roles, so what somebody requests is exactly what they get.
Update a member's roles - 8
A grant only ever raises a role. Anyone who already holds the role they asked for, or a higher one, is left exactly as they were, so a deadline can never take away access that Lutril did not grant.
- 9
An account that is the organization's only owner is refused rather than changed. Sentry will not let its last owner be demoted or removed, so a time boxed grant on one could not undo itself and Lutril says so instead of making it.
- 10
Removing somebody takes them out of the organization and leaves their Sentry account alone, so the next grant invites them back. Lutril never deletes a Sentry account.
Où le créer
Documentation officielle
Connectez-vous à Lutril pour brancher Sentry, ou réservez une démo et nous le mettons en place avec vous. Sans slides.