Page MenuHomePhabricator

Grant Access to wmf, analytics-privatedata-users for TTaylor
Closed, ResolvedPublic

Description

  • The username of your existing account on wikitech.wikimedia.org: TTaylor
  • Do you currently have shell access (Yes/No)? No
  • Purpose (Specify which service you need to get access to, e.g. Icinga, Grafana, Superset etc): Superset, Hue/HDFS, Turnilo, Yarn, etc.
  • The specific LDAP group that you want to be added to (optional): wmf, project-analytics

Also: Posix groups: analytics-privatedata-users

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

Event Timeline

Hi @ttaylor,

I guess in your case we don't need signoff from the analytics team :) I don't know how we should proceed re: manager approval for access though.

Joe renamed this task from Grant Access to wmf for TTaylor to Grant Access to wmf, analytics-privatedata-users for TTaylor.Oct 4 2021, 5:50 AM
Joe triaged this task as Medium priority.
Joe updated the task description. (Show Details)

Maybe get manager approval from Corey

Change 726563 had a related patch set uploaded (by Kormat; author: Kormat):

[operations/puppet@production] admin: Add ttaylor to ldap_only_users

https://gerrit.wikimedia.org/r/726563

Change 726563 merged by Kormat:

[operations/puppet@production] admin: Add ttaylor to ldap_only_users

https://gerrit.wikimedia.org/r/726563

Kormat claimed this task.
Kormat subscribed.

Hi @ttaylor, this is now done. You can confirm it by searching for 'ttaylor' on https://contact.toolforge.org/. Cheers.

Change 830796 had a related patch set uploaded (by Btullis; author: Btullis):

[operations/puppet@production] Grant ttaylor access to PII through Superset

https://gerrit.wikimedia.org/r/830796

I have added a patch to correct Tajh's access permissions, so that he will be able to access PII in Superset.
The wikitech reference to this access level is here: https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Dashboards_in_Superset_/_Hive_interfaces_(like_Hue)_that_do_access_private_data

Change 830796 merged by Btullis:

[operations/puppet@production] Grant ttaylor access to PII through Superset

https://gerrit.wikimedia.org/r/830796

BCornwall subscribed.

It looks like this ticket has been resolved. I'm going to close it but please do re-open if there is any unfinished business.

Thank you!