Page MenuHomePhabricator

Fundraising access request for jbaldwin
Closed, ResolvedPublic

Description

This is a new access request for jbaldwin. They require the following access: (Mark the box for each requirement with an x)

  • civicrm web access
    • standard access
    • donor services access
  • ssh access - if specific hosts: list here
  • mysql - if specific hosts or databases: list here
  • superset
  • other: please explain

New User Procedure / Checklist

When adding a new user to the fundraising / fr-tech ecosystem, we have a set of places where we need to create accounts and access.

Prerequisites

Before we can take any action to add a user, we need to verify that they are authorized to have such access. This requires confirmation from their manager and approval from the C level that access is approved.

[x] user_verification
Requires: user request
[x] access_rights: letter to C level (currently Lisa) verifying grant of access
[x] account name/contact info: verify on https://collab.wikimedia.org/wiki/Fundraising#Contact_List
[x] (if not advancement) add to okta notify list: create ITS ticket for adding to fr-tech okta notification list

Accounts and Services

[x] client_ssl_cert
Requires: user_verification
[x] cert_setup: generate cert on frpm1001 using ssl_user_admin
[x] account_setup: sms the user the password for the key
[x] follow_on: assist with certificate installation
[x] superset
Requires: client_ssl_cert
[x] account_setup: Create user account. Notify the user of their account name and password.
[x] follow_on: Verify user can log in to https://analytics.frdev.wikimedia.org
[x] archive_access: Add to google drive archive group. https://drive.google.com/drive/folders/0ADWGPlZtksGdUk9PVA

Event Timeline

Adding @ERoden-WMF to specify details of what is needed.

Thanks @Dwisehaupt we'd like to get Angelito Reyes and James Baldwin from Finance set up in Superset, they only need view access to see some revenue reports. I will send an email to Lisa for approval and share the Collab steps with James and Angelito.

Dwisehaupt changed the edit policy from "Custom Policy" to "All Users".Sep 12 2023, 6:31 PM
Date: Mon, 11 Sep 2023 17:38:28
From: Lisa Seitz Gruwell
To: Erica Roden
Cc: Dallas Wisehaupt
Subject: Re: Superset Access Approval - James Baldwin & Angelito Reyes
----------------------------------------

Yes, I approve. 

On Mon, Sep 11, 2023 at 4:29 PM Erica Roden wrote:
      Hi Lisa, 
We'd like to set Angelito and James from Finance up with Superset access so we can continue streamlining our month end
process by giving them access to reporting that will help them reconcile with our numbers.

Could you please approve?

Thanks.

Hi @Dwisehaupt I've added Angelito & James to the contact list on Collab. Please let me know if you need anything else to get them set up.

Dwisehaupt moved this task from Triage to In Progress on the fundraising-tech-ops board.

SSL client certificate created and sent via email. Password sent via SMS.

Superset account created and random password set. Password sent via SMS. Email sent with instructions on how to change the password.

Dwisehaupt claimed this task.
Dwisehaupt updated the task description. (Show Details)
Dwisehaupt moved this task from In Progress to Done on the fundraising-tech-ops board.

Verified cert is installed and access is working. Closing.