- Phab username: @Jdlrobson-WMF
- Manager: @SCherukuwada
- Reason: WMF staff who occasionally needs access to security tasks
- TODO: @Jdlrobson-WMF should enable MFA in Phab
Description
Event Timeline
Sorry for the delay. The username is @Jdlrobson-WMF - I want to keep my security access separate from access with my personal account.
As the Phab account @Jdlrobson-WMF was created yesterday, do you plan to switch to using @Jdlrobson-WMF for acting in your official role at WMF, and formerly used account @Jdlrobson will remain only for volunteer activity? It would seem confusing to use two different accounts both for staff activity while only one account name has a -WMF suffix. See also related https://office.wikimedia.org/wiki/User_account_policy
yes, I agree with @Aklapper. We would only want the account with MFA to access security tickets.
I'm confused. The subject of having two usernames seems off topic for this security request and unrelated. My account Jdlrobson is a legacy account inherited from Bugzilla and associated with my volunteer account Jdlrobson. I am happy to talk about it elsewhere but I don't think this ticket is the appropriate venue.
- @Jdlrobson-WMF has MFA enabled (unless I've made a mistake setting it up - if so let me know)
- I am requesting security access on this account with MFA.
- It is associated with my Wikimedia email.
- https://office.wikimedia.org/wiki/User_account_policy does not apply to Phabricator but the new username meets the criteria outlined there in that it suffixes with -WMF.
- For interactions with security tickets it's important to me affiliate myself with the Wikimedia Foundation. I do not want that associated with my personal account or my personal email address.
I hope this makes sense. Feel free to reach out on Slack or put something in my calendar if there is a problem with this setup.
@Jdlrobson-WMF - Yes, I think you should be good now with the above explanation. We can enable security access for your -WMF account now. Thanks.
{F57722004}
@Jdlrobson: That account seems not used only for volunteer activities though? Actions in T380508 or T380509 look like WMF activity, not volunteer activity... Could you please clarify if you plan to use @Jdlrobson-WMF for WMF work from now on exclusively, and keep @Jdlrobson for volunteer activity only?