# UNIQA (/docs/uniqa)





Access to UNIQA systems is granted through roles, not direct permissions. Every role is requested in the UNIQA identity management portal and approved before it becomes usable.

## Requesting roles [#requesting-roles]

Roles are requested through the UNIQA IDM portal:

<Cards>
  <Card title="UNIQA IDM" href="https://idm.uniqagroup.com/" />
</Cards>

The portal is only reachable from the UNIQA network, so you have to be on the VPN — in practice this means connecting from the AVD (Azure Virtual Desktop) machine and opening the portal there.

## Azure access [#azure-access]

Azure permissions are **not** assigned permanently. They are activated on demand through **Azure PIM** (Privileged Identity Management): the role is assigned to you in IDM, and you then activate it in PIM for the time you need it.

## Assigned roles [#assigned-roles]

These are the roles currently assigned to Tomáš Rokos. Use them as a reference for what to request:

| Role                                                            | Note                                                         |
| --------------------------------------------------------------- | ------------------------------------------------------------ |
| `APP-ADO_PROD-CCoE_Modules_Delivery-Readers`                    | Azure DevOps, valid until 12/1/2028                          |
| `APP-GHE_PROD-AT-AIP-ADMIN`                                     | GitHub Enterprise                                            |
| `APP-EAM_PROD_VIEWER`                                           | EAM viewer                                                   |
| `APP-AWS_PROD-261390480590_Admin`                               | AWS account admin                                            |
| `APP-SNA_PROD-Win-User`                                         | SNA Windows user                                             |
| `APP-AZU_DEVE-6865a5a0-bb47-44f6-ace4-86bd8635e1f9_Owner`       | Azure subscription owner (activate via PIM)                  |
| `APP-AZU_DEVE-6865a5a0-bb47-44f6-ace4-86bd8635e1f9_Contributor` | Azure subscription contributor (activate via PIM)            |
| `APP-PID-PROD-VPN_2FA_PROD`                                     | VPN with 2FA — request this one first                        |
| `APP-ATF_PROD-uaip-Admin`                                       | Artifactory admin — request this **or** the Contributor role |
| `APP-ATF_PROD-uaip-Contributor`                                 | Artifactory contributor                                      |

Request `APP-PID-PROD-VPN_2FA_PROD` first: without VPN access the rest of the portals are unreachable.

## AVD connection fails [#avd-connection-fails]

Sometimes the AVD machine refuses the connection and shows this error:

<img alt="AVD unable to connect error" src="__img0" />

Reconnecting does not help — the session host has to be restarted. Write to [nikola.nikolov@uniqa.at](mailto:nikola.nikolov@uniqa.at) and ask him to restart your AVD machine. Include the machine number in the message, otherwise he does not know which host to restart.

## Claude Code [#claude-code]

The setup instructions for Claude Code on the UNIQA environment live in Confluence:

<Cards>
  <Card title="HEA-R Claude Code Setup Guide" href="https://confluence.uniqagroup.com/spaces/HHVT/pages/4784146622/HEA-R+Claude+Code+Setup+Guide" />
</Cards>

Confluence is internal, so open the link from the AVD machine or while connected to the VPN.

## Documentation files [#documentation-files]

UNIQA documentation files are mirrored into a GitHub repository and kept in sync, so you can read them without going through the AVD machine:

<Cards>
  <Card title="uniqa-filestash" href="https://github.com/bighub-ai/uniqa-filestash" />
</Cards>