Advanced Terraform Cloud/Enterprise — Lesson 2: Identity, Teams, Agents, Workspaces, and Private Execution

Technical Scope

• SSO and identity-provider integration concepts
• Organizations, teams, permissions, and administrative separation
• Agent pools and private infrastructure access
• Workspace execution modes, variables, and credentials

Instructor Demonstration

Design a permission and agent model for isolated business units.

Applied Workshop

Create an access matrix for platform admins, module publishers, workspace owners, and auditors.

1. Translate the scenario into configuration, access, state, pipeline, or module decisions.
2. Implement the change in a controlled workspace or repository.
3. Capture the plan, logs, outputs, policy results, and post-change checks.
4. Explain one safer or more maintainable alternative and its trade-off.

Validation Standard

Administrative power is separated and private runs use the correct agent and credential path.

• The intended target, identity, environment, and state boundary are confirmed.
• The plan or execution evidence contains no unexplained destructive action.
• Security, reliability, maintainability, and operational ownership are reviewed.
• The final result can be reproduced from version-controlled inputs.

Failure Analysis

Investigate SSO mapping, agent registration, permission inheritance, and variable access.

Learners isolate the smallest verified cause, correct it, rerun the relevant validation step, and record the preventive action in the course improvement log.