mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 13:37:30 +00:00
31 lines
2.3 KiB
Markdown
31 lines
2.3 KiB
Markdown
# Scaling financial security with GitOps and RBAC
|
||
|
||
A leading digital payments provider focused on making international money transfers faster and more transparent, operating in the highly regulated financial services industry, required a management solution that could match the rigor of their security and compliance standards.
|
||
|
||
## At a glance
|
||
|
||
- **Endpoints:** 662 (macOS and Windows).
|
||
- **Primary requirement:** GitOps workflows and granular RBAC.
|
||
- **Key integrations:** Windows Autopilot, Okta, and Fleet Cloud.
|
||
- **Previous solution:** Workspace ONE and self-managed osquery.
|
||
|
||
## The challenge: restrictive "magic" systems
|
||
|
||
Their previous experience with Workspace ONE was defined by high restrictions and a lack of granular Role-Based Access Control (RBAC). This made it impossible to safely delegate tasks to the help desk. Additionally, running a self-managed, on-premise osquery instance led to fragmented deployments and operational silos.
|
||
|
||
## The solution: Fleet Cloud and configuration-as-code
|
||
|
||
They are unifying fragmented deployments into a single Fleet Cloud environment. This transition focuses on a GitOps-first approach, treating physical hardware like cloud infrastructure. By using Fleet’s granular RBAC, they can finally grant specific, limited access to support staff without compromising the entire management stack.
|
||
|
||
## The results: professionalized deployment controls
|
||
|
||
- **GitOps adoption:** All configurations are now version-controlled and peer-reviewed, replacing "magic" backend changes with predictable, code-driven workflows.
|
||
- **Automated labeling:** The team uses the Fleet API for dynamic device grouping and bulk operations, replacing what was previously a manual, error-prone process.
|
||
- **Unified compliance:** Integrating Windows Autopilot and Okta into a single API has removed the technical debt of managing disconnected silos, providing instant data for financial audits.
|
||
|
||
<meta name="articleTitle" value="Scaling financial security with GitOps and RBAC">
|
||
<meta name="authorFullName" value="Irena Reedy">
|
||
<meta name="authorGitHubUsername" value="irenareedy">
|
||
<meta name="category" value="announcements">
|
||
<meta name="publishedOn" value="2026-02-23">
|
||
<meta name="description" value="A digital payments provider scaled secure device management with Fleet Cloud, GitOps, and granular RBAC to unify compliance and audits.">
|