We are planning to use SFDX Org Development Model along with CI using scratch orgs (as we have limitations on going directly to Package Development model). The plan is to use scratch orgs only for using CI.
In our Production Org, we have enabled Dev HUB. Let's say we have 3 sandboxes (DEV, SIT and UAT).
Whenever developer do a commit to DEV branch in our Git repository, we would like to execute the following using pipelines (Azure),
- Create scratch org
- Push the DEV branch (force-app/main/default) as source to the scratch org 3).
- Run test classes
- If all the test classes passed, then deploy the code to SIT org.
In order to do the above, the first step is to authorize DevHub org in this case my Production Org.
In this case, the SFDX user used in the pipeline needs to have access to my Production Org and a connected app (for JWT based authorization) has to be created in Production Org? Is it possible to do all the above without any access to Production Org?