Page MenuHomePhabricator

Fundraising access request for spuri
Closed, ResolvedPublic

Description

This is a new access request for PERSON. They require the following access: (mark each box with an x)

  • civicrm web access
    • standard access
    • donor services access
  • ssh access - if specific hosts: list here
  • mysql - if specific hosts or databases: list here
  • superset
  • other: please explain

New User Procedure / Checklist

When adding a new user to the fundraising / fr-tech ecosystem, we have a set of places where we need to create accounts and access.

Prerequisites

Before we can take any action to add a user, we need to verify that they are authorized to have such access. This requires confirmation from their manager and approval from the C level that access is approved.

[x] user_verification
Requires: user request
[x] access_rights: letter to C level (currently Lisa) verifying grant of access
[x] account name/contact info: verify on https://collab.wikimedia.org/wiki/Fundraising#Contact_List

Accounts and Services

[x] client_ssl_cert
Requires: user_verification
[x] cert_setup: generate cert on frpm1001 using ssl_user_admin
[x] account_setup: sms the user the password for the key
[x] follow_on: assist with certificate installation
[x] civicrm
Requires: client_ssl_cert
[x] account_setup: Create user account. This will notify the user via email to update their password.
[x] follow_on: Verify user can log in to https://civicrm.wikimedia.org
[x] superset
Requires: client_ssl_cert
[x] account_setup: Create user account. Notify the user of their account name and password.
[x] follow_on: Verify user can log in to https://analytics.frdev.wikimedia.org
[x] archive_access: Add to google drive archive group. https://drive.google.com/drive/folders/0ADWGPlZtksGdUk9PVA

Event Timeline

Approval.

Date: Tue, 15 Nov 2022 14:28:16
From: Lisa Seitz Gruwell
To: Megan Hernandez 
Cc: Erica Roden, Sheetal Puri, Dallas Wisehaupt
Subject: Re: Lisa - please approve Sheetal civi access
----------------------------------------

Approved!
Dwisehaupt updated the task description. (Show Details)
Dwisehaupt moved this task from Triage to In Progress on the fundraising-tech-ops board.

SSL client cert created and sent. Password sent via SMS. Civi and superset accounts created and set with temp passwords. Instructions sent on how to log in and change those passwords.

Dwisehaupt updated the task description. (Show Details)
Dwisehaupt moved this task from In Progress to Done on the fundraising-tech-ops board.

Verified access is working for civi and superset via logs. Closing.