Page MenuHomePhabricator

Requesting access to analytics-privatedata-users for tais-lessa
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

Complete ALL items below as the individual person who is requesting access:

  • Wikimedia developer account username: tais-lessa
  • Email address: tlessa.wikimedia.org
  • SSH public key (must be a separate key from Wikimedia cloud SSH access):
  • Requested group membership: analytics-privatedata-users
  • Reason for access: Access to superset presto dashboards (without SSH)
  • Name of approving party (manager for WMF/WMDE staff): is this my manager? If so, Carolyn Li-Madeo
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: not sure where to find this - could you please send it my way?
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet) - checked Dayforce
  • - User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.) - NOT NEEDED
  • - The provided SSH key has been confirmed out of band and is verified not being used in WMCS. - NOT NEEDED
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml - NOT NEEDED

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access


I am currently experiencing issues when trying to access some dashboards from my team (apps team). Here are some screenshots for reference.

The dashboards I want to see are the iOS and Android dashboards because I am a product designer for the Apps teams.

I was then directed here to request an extra layer of access - I am in the wmf group already.

Thanks for your help and please let me know if you need anything else from me!

image.png (2,410×1,136 px, 115 KB)
image.png (720×520 px, 185 KB)

Event Timeline

Pppery renamed this task from Requesting access to <ENTER RESOURCE NAME> for <ENTER YOUR USERNAME> to Requesting access to analytics-privatedata-users for tais-lessa.Sep 19 2025, 10:40 PM

Hi Data Engineering,

the requesting user appears to already have access to superset but with the exception of some dashboards.

Tagging you for visibility per https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#analytics-privatedata-users

I am assuming this can only mean "add Kerberos principal", so this request is just like T405219. Right?

Dzahn triaged this task as Medium priority.Sep 24 2025, 4:41 PM
Dzahn moved this task from Untriaged to In Discussion on the SRE-Access-Requests board.

Change #1191462 had a related patch set uploaded (by Dzahn; author: Dzahn):

[operations/puppet@production] admin: upgrade tais-lessa from ldap_only to privatedata-users, no shell

https://gerrit.wikimedia.org/r/1191462

Dzahn changed the task status from Open to In Progress.Sep 25 2025, 5:37 PM
Dzahn claimed this task.
Dzahn moved this task from In Discussion to Patch in Review on the SRE-Access-Requests board.

To be pragmatic I am going with a "one level upgrade" from the lowest to the second lowest level here:

https://wikitech.wikimedia.org/wiki/Data_Platform/Data_access#Access_Levels

This step is needed either way and if it turns out more is needed we will have to build on it.

But this is easier than dealing with T405517 while also avoiding unnecessary access privileges.

@TLessa-WMF Could you take a look at signing L3 while the code change I uploaded is in review? Cheers

Dzahn updated the task description. (Show Details)

@TLessa-WMF We need one more thing. Please get your manager to approve here on this ticket. Thank you

Dzahn added a subscriber: cmadeo.

Hello @cmadeo Dayforce says you are the manager of @TLessa-WMF and to complete this access request we just need an approval from the manager. Could you take look? Thank you

@Dzahn document signed, thank you so much for your help!

@cmadeo for context here, I am trying to be able to view the iOS and Android Monthly Metrics so that I can see the impact of our work as we implement new features and also make informed decisions based on data.

Dashboards:
https://superset.wikimedia.org/login/?next=https://superset.wikimedia.org/superset/dashboard/Android_Monthly_Metrics_Dashboard/

https://superset.wikimedia.org/login/?next=https://superset.wikimedia.org/superset/dashboard/482/?native_filters_key%3DEZk2im4XDB30VOHeRMTO4GqEjhDDzgMBCmvjlCHekko1MJ_pAoTrNyfZleTq87Xm

  • Thank you and let me know if any questions!

Thank you as well! All looks good. Only pending on the approval. Please note the people handling these requests are rotating on a weekly basis so someone else might take this over.

Dzahn changed the task status from In Progress to Stalled.Oct 1 2025, 4:45 PM

stalled on manager approval.

Apologies for the delay! As @TLessa-WMF's manager I am happy to approve. Thank you and very sorry for holding this up.

Dzahn changed the task status from Stalled to In Progress.Oct 2 2025, 4:55 PM
Dzahn updated the task description. (Show Details)

Change #1191462 merged by Dzahn:

[operations/puppet@production] admin: upgrade tais-lessa from ldap_only to privatedata-users, no shell

https://gerrit.wikimedia.org/r/1191462

Thank you @cmadeo

@TLessa-WMF you have been added to the requested group just now. You should be able to see those dashboards. (give it max 30 minutes to propagate)

Dzahn removed cmadeo as the assignee of this task.