PagerDuty SSO and Role Management

User roles in Pagerduty cannot currently be managed entirely via ADs in MS Entra. Everbright uses PagerDuty Advanced Permissions, which allows for a variety of set and flexible roles. However, all onboarded users to PagerDuty are defaulted into the Responder role, which provides all the visibility and functionality needed to “take action on incidents, create incidents for any Team, and create schedule overrides.”

If any team member needs more configuration privileges their role may be changed by their Team EM, who have the Manager role, or by DevOps team members, some of whom have the Global Admin role. Pagerduty is managed on a per seat license, so Managers should consult with Global Admins before adding users to PagerDuty.

Offboarding should be done by the regular process of managing users in ADs.