UNIQA
Access, roles, and documentation for the UNIQA engagement.
Access to UNIQA systems is granted through roles, not direct permissions. Every role is requested in the UNIQA identity management portal and approved before it becomes usable.
Requesting roles
Roles are requested through the UNIQA IDM portal:
The portal is only reachable from the UNIQA network, so you have to be on the VPN — in practice this means connecting from the AVD (Azure Virtual Desktop) machine and opening the portal there.
Azure access
Azure permissions are not assigned permanently. They are activated on demand through Azure PIM (Privileged Identity Management): the role is assigned to you in IDM, and you then activate it in PIM for the time you need it.
Assigned roles
These are the roles currently assigned to Tomáš Rokos. Use them as a reference for what to request:
| Role | Note |
|---|---|
APP-ADO_PROD-CCoE_Modules_Delivery-Readers | Azure DevOps, valid until 12/1/2028 |
APP-GHE_PROD-AT-AIP-ADMIN | GitHub Enterprise |
APP-EAM_PROD_VIEWER | EAM viewer |
APP-AWS_PROD-261390480590_Admin | AWS account admin |
APP-SNA_PROD-Win-User | SNA Windows user |
APP-AZU_DEVE-6865a5a0-bb47-44f6-ace4-86bd8635e1f9_Owner | Azure subscription owner (activate via PIM) |
APP-AZU_DEVE-6865a5a0-bb47-44f6-ace4-86bd8635e1f9_Contributor | Azure subscription contributor (activate via PIM) |
APP-PID-PROD-VPN_2FA_PROD | VPN with 2FA — request this one first |
APP-ATF_PROD-uaip-Admin | Artifactory admin — request this or the Contributor role |
APP-ATF_PROD-uaip-Contributor | Artifactory contributor |
Request APP-PID-PROD-VPN_2FA_PROD first: without VPN access the rest of the portals are unreachable.
AVD connection fails
Sometimes the AVD machine refuses the connection and shows this error:
Reconnecting does not help — the session host has to be restarted. Write to nikola.nikolov@uniqa.at and ask him to restart your AVD machine. Include the machine number in the message, otherwise he does not know which host to restart.
Claude Code
The setup instructions for Claude Code on the UNIQA environment live in Confluence:
Confluence is internal, so open the link from the AVD machine or while connected to the VPN.
Documentation files
UNIQA documentation files are mirrored into a GitHub repository and kept in sync, so you can read them without going through the AVD machine: