Skip to content

Commit 156e881

Browse files
authored
Update support-admin-tool.md
1 parent 6b9a7ed commit 156e881

File tree

1 file changed

+10
-6
lines changed

1 file changed

+10
-6
lines changed

user/enterprise/support-admin-tool.md

Lines changed: 10 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -6,38 +6,42 @@ layout: en_enterprise
66

77
> The tool is only visible to Platform maintainers from TCIE 3.x as **Admin-v2**. The tool must be configured with a list of GitHub handles that allow **admin** access.
88
9-
> The tool is only accessible via web browser.
9+
> The tool is only accessible via a web browser.
1010
11-
## Forcefully logging out users from Travis
11+
## Log out users Forcefully from Travis
1212
To increase security and prevent unauthorized access, Travis CI introduces the new **“Log out user and revoke all tokens”** option, which allows admin users to manually log out of any unwanted user.
1313

1414
### Log out Users
1515
Travis CI admin users can now click the **“Logout”** button next to the **“Log out user and revoke all tokens”** option in the User view to log out specific users manually.
1616

17-
By clicking the **“Logout”** button, Travis CI invalidates all Travis authentication tokens and logs out the selected user from all Travis CI platforms. This prevents access via web browser, public API, and travis cli.
17+
By clicking the **“Logout”** button, Travis CI invalidates all Travis authentication tokens and logs out the selected user from all Travis CI platforms. This prevents access via web browser, public API, and Travis Cli.
1818

1919
Logged-out users cannot access Travis CI via the web browser or travis-cli tool without re-accessing the system. Any build automation based on an API token associated with such a user will cease to work.
2020

2121
### Why must I log out of my user and revoke all tokens?
2222

2323
Consider the following: The user gets suspended, e.g., in the GHE server (3rd-party app), and Travis CI is not notified of the action; therefore, no action is taken on Travis CI's side. At the same time, such users may still have a valid Travis Web UI browser, travis-cli access tokens, and a working Travis API authentication token.
2424

25-
Such a situation may be valid and desired. However, there are cases, like a person leaving a company or team, when it is simply a security matter to revoke all accesses for such users. Travis CI cannot react automatically since no automated notification has been sent out, e.g., the GHE server account is suspended. If you are considering a less drastic approach, you may consider manually [suspending a user](/user/enterprise/user-management/) instead of logging out and revoking all tokens.
25+
Such a situation may be valid and desired. However, there are cases, like a person leaving a company or team, when it is simply a security matter to revoke all accesses for such users. Travis CI cannot react automatically since no automated notification has been sent out, e.g., the GHE server account is suspended. If you are considering a less drastic approach, consider manually [suspending a user](/user/enterprise/user-management/) instead of logging out and revoking all tokens.
2626

2727
Suspended users still have access to Travis CI via browser or travis-cli (assuming they have valid Travis access tokens present in these tools) but cannot trigger builds.
2828

2929
### Auth tokens
3030

31-
Following environment variables are used to manage the life of token.
31+
The following environment variables are used to manage the token's life.
3232

3333
- `WEB_TOKEN_EXPIRES_IN_HOURS`
3434
- `AUTH_TOKEN_EXPIRES_IN_DAYS`
3535
- `AUTH_CLI_TOKEN_EXPIRES_IN_DAYS`
3636

3737
These tokens can be set using the admin console `kubectl kots admin-console -n tci-enterprise-kots` under the "Advanced Setting" menu.
3838

39-
## Re-accessing Travis CI
39+
## Re-access Travis CI
40+
4041
To re-access Travis CI, users must log in using a 3rd-party authenticator such as GitHub (browser, travis-cli), GitLab, or BitBucket (browser). Only with access can users see the private repositories, build history, build job logs, and obtain new Travis API tokens.
4142

4243
Please note: if such users (logged out and tokens revoked) are, e.g., suspended in the GHE server, they will be unable to successfully use their GHE server account to log into Travis CI UI or travis-cli.
4344

45+
## Contact Enterprise Support
46+
47+
{{ site.data.snippets.contact_enterprise_support }}

0 commit comments

Comments
 (0)