Since all of these researches are WMF staff, they can be added to the cn=wmf group. Usually this should be done as part of onboarding (or when they got cluster acccess), but since most of the services otherwise guarded by cn=wmf (e.g. Kibana, Grafana, Graphite) are probably unused by them, it wasn't noticed so far.

(Non-staff can have access via the cn=nda group in case they've signed the NDA.)

added bearloga and hjiang following https://wikitech.wikimedia.org/wiki/LDAP#Common_LDAP_administrative_actions

sudo -i ldapvi -b ou=groups cn=wmf (on terbium)

Have they all explicitly requested access and justified it?

In T149187#2745392, @Krenair wrote:

Have they all explicitly requested access and justified it?

Yes they are data analyst and researchers interested in using Pivot sooner or later, plus they are wmf employees and I don't think a reason why they shouldn't be in the wmf group. Any concern from your side?

In T149187#2745475, @elukey wrote:

In T149187#2745392, @Krenair wrote:

Have they all explicitly requested access and justified it?

Yes they are data analyst and researchers interested in using Pivot sooner or later, plus they are wmf employees and I don't think a reason why they shouldn't be in the wmf group. Any concern from your side?

The wmf group in particular gives out a LOT of rights unrelated to pivot (e.g., some code review permissions) and generally shouldn't be granted without specific requests.

In T149187#2745541, @Krenair wrote:

In T149187#2745475, @elukey wrote:

In T149187#2745392, @Krenair wrote:

Have they all explicitly requested access and justified it?

Yes they are data analyst and researchers interested in using Pivot sooner or later, plus they are wmf employees and I don't think a reason why they shouldn't be in the wmf group. Any concern from your side?

The wmf group in particular gives out a LOT of rights unrelated to pivot (e.g., some code review permissions) and generally shouldn't be granted without specific requests.

I think that it makes sense for WMF employee to be in there, but I got your point about gerrit. Maybe the wmf group has been a bit abused?

Anyhow, for this use case I am inclined to proceed to add the users in the description to wmf unless somebody strongly opposes.

Added chelsyx, ellery and leila to wmf. Removed the ones already there, after a review I added more people to the list of requests than necessary.

Cc: @leila, @ellery, @chelsyx - you can now use Pivot :)

oh! it works. Thanks, @elukey and team.

Thank you @elukey !