Page MenuHomePhabricator

Grant Access to PII in Superset for HMonroy and Dmaza
Closed, ResolvedPublic

Description

  • The usernames of your existing account on wikitech.wikimedia.org: HMonroy and Dmaza
  • Do you currently have shell access (Yes/No)? Yes
  • Purpose (Specify which service you need to get access to, e.g. Icinga, Grafana, Superset etc): Superset
  • The specific LDAP group that you want to be added to (optional):

Superset access required for CommTech's work with Realtime-Preview-Wish-2021, can be revoked after that project is complete (~3 months from now).

Event Timeline

HMonroy removed MMandere as the assignee of this task.
HMonroy added a subscriber: KSiebert.
HMonroy added a subscriber: MMandere.
dmaza renamed this task from Grant Access to PII in Superset for HMonroy and DMaza to Grant Access to PII in Superset for HMonroy and Dmaza.May 5 2022, 6:51 PM
dmaza updated the task description. (Show Details)
dmaza added a subscriber: dmaza.

@HMonroy happy to help grant superset access, but I am not sure exactly how to do that? This ticket, T283190, appears similar, is that what group you all need? Also, would you kindly use the access template so as to keep these requests consistent, https://phabricator.wikimedia.org/maniphest/task/edit/form/8/

@jhathaway this ticket is exactly the same request as [T296161]. Dmaza and I need the same access as samwilson. Please let me know if you still need me to update the template. Thank you for looking into this!

Thanks @HMonroy from my read of T296161 it is ultimately the same as T283190, both add the user to the analytics-privatedata-users group. If you could use the template, twice, that would be appreciated, as I can then ensure the boxes are checked for both accounts.

RLazarus added subscribers: Ottomata, RLazarus.

Grabbing this from @jhathaway as I've taken over SRE clinic duty for this week. This is actually the right template for the use case, since Superset access is via LDAP, not SSH (even though PII access is controlled with a posix group). We can go right ahead with it.

@Ottomata Can you approve for analytics-privatedata-users please?

@HMonroy and @dmaza In the meantime please read the Analytics user responsibilities carefully if you haven't already, and I'll be back with you shortly. :)

Change 790414 had a related patch set uploaded (by RLazarus; author: RLazarus):

[operations/puppet@production] admin: Add hmonroy, dmaza to analytics-privatedata-users

https://gerrit.wikimedia.org/r/790414

Change 790414 merged by RLazarus:

[operations/puppet@production] admin: Add hmonroy, dmaza to analytics-privatedata-users

https://gerrit.wikimedia.org/r/790414

RLazarus claimed this task.

Thanks!

You're both in the wmf group already, so nothing to do there:

rzl@mwmaint1002:~$ ldapsearch -x cn=wmf | grep -P 'hmonroy|dmaza'
member: uid=dmaza,ou=people,dc=wikimedia,dc=org
member: uid=hmonroy,ou=people,dc=wikimedia,dc=org

I just merged the change adding you both to analytics-privatedata-users; please wait for 30 minutes while it propagates through the fleet, then you can expect everything to work. I'm marking this Resolved, but feel free to reopen if you have any trouble!