(deploy_dsh_shm)=

# Deploy a DSH management environment

Follow the Data Safe Haven (DSH) [deployment guide](https://data-safe-haven.readthedocs.io/).

:::{warning}
Make sure you are reading the version of the docs (see the bottom right) that matches the DSH release you recorded in the TRE GitHub issue.
:::

You will need to:

## Set up the context

:::{important}
Each {ref}`role_trusted_research_sysadmin` needs to do this
:::

We are currently using the following settings:

| Parameter | Value |
| --- | --- |
| `admin-group-name` | `Safe Haven Production Admins` |
| `name` | `prod5` |
| `description` | `Turing Production Data Safe Haven v5` |
| `subscription-name` | `[Prod] Safe Haven Management V5` |

## Configure Microsoft Entra ID

:::{important}
This only needs to be done once, but each {ref}`role_trusted_research_sysadmin` needs an account with Global Admin privileges.
:::

## Deploy the management environment (SHM)

:::{important}
This only needs to be done once.
:::

| Parameter | Value |
| --- | --- |
| `entra-tenant-id` | check with the {ref}`role_trusted_research_sysadmin` team |
| `fqdn` | `prod.turingsafehaven.ac.uk` |
| `location` | `uksouth` |