Grant Access to analytics-privatedata-users for BTracy-WMF
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	BTracy-WMF
	Sep 23 2025, 2:49 PM

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access

Wikimedia developer account username: Btracy
Email address: btracy@wikimedia.org
Requested group membership: analytics-privatedata-users
Reason for access: Superset
Name of approving party (manager for WMF/WMDE staff): @ATsay-WMF
Ensure you have read the Analytics Data Access User Responsibilities
Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

- User has read the Data Access Guildelines for the Data Platform.
- User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
- User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
- User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
- access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
- access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml - NOT NEEDED

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access
For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	admin: add user btracy with privateadata-users, no shell access	operations/puppet	production	+8 -1

Customize query in gerrit

Event Timeline

BTracy-WMF created this task.Sep 23 2025, 2:49 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 23 2025, 2:49 PM

I approve this request!

JVanderhoop-WMF removed a project: Experimentation Lab.Sep 23 2025, 8:56 PM

Hi, the group you are requesting, analytics-privatedata-users can be used in 3 different ways.

Could you take a look and determine (maybe with the help of Data Engineering) which of the 3 options described there you need, if possible?

Thanks!

Dzahn triaged this task as Medium priority.Sep 24 2025, 4:08 PM

Dzahn added a project: Data-Engineering.

Dzahn moved this task from Untriaged to Awaiting User Input on the SRE-Access-Requests board.

To be pragmatic.. let's just start with the lowest level of (that type of) access and see in practice if you run into any blockers. Leveling up to more access is always possible when/if actually needed.

That sounds like the right path forward. Thank you!

Great! I am going ahead. Meanwhile.. please check the box that you have read https://wikitech.wikimedia.org/wiki/Data_Platform/Data_access_guidelines

Dzahn updated the task description. (Show Details)Sep 25 2025, 6:02 PM

Change #1191472 had a related patch set uploaded (by Dzahn; author: Dzahn):

[operations/puppet@production] admin: add user btracy with privateadata-users, no shell access

https://gerrit.wikimedia.org/r/1191472

gerritbot added a project: Patch-For-Review.Sep 25 2025, 6:23 PM

I've read the guidelines and updated this request to reflect. Thanks, again.

Great. Thanks! I have uploaded a code change to make it happen and it's in review now.

Dzahn changed the task status from Open to In Progress.Sep 25 2025, 6:34 PM

Dzahn claimed this task.

Dzahn moved this task from Awaiting User Input to Patch in Review on the SRE-Access-Requests board.

Change #1191472 merged by Dzahn:

[operations/puppet@production] admin: add user btracy with privateadata-users, no shell access

https://gerrit.wikimedia.org/r/1191472

Hey @BTracy-WMF You have been added to the analytics-privatedata-users group as requested.

Let us know if you need anything else. Cheers

You can try out Superset now.

Maintenance_bot removed a project: Patch-For-Review.Sep 25 2025, 9:31 PM

When trying to access https://superset.wikimedia.org, I'm receiving the error message "Service access denied due to missing privileges." Attaching a screenshot for reference.

I initially assumed this was caused by a delay in updating permissions, but that does not seem to be the case one week after this request was originally resolved. Is this a matter of the level of permissions I was granted?

Screenshot 2025-10-03 at 3.25.30 PM.png (926×792 px, 83 KB)

Mentioned in SAL (#wikimedia-operations) [2025-10-03T19:37:56Z] <mutante> LDAP added user btracy to group wmf T405366

Yes, it seems like that is the case. This goes back to T405366#11210719.

I think you also needed to request the LDAP group "wmf". Which nowadays is self-service via https://idm.wikimedia.org (https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#WMF_Group)

To be pragmatic I just did this for you and added you directly though.

Please try again now.

I have access now, thanks @Dzahn !

ah:) cool. I did not mean to open it again. that was just because I had the tab already open when you closed it.

	F66724475: Screenshot 2025-10-03 at 3.25.30 PM.png
	Oct 3 2025, 7:33 PM

Grant Access to analytics-privatedata-users for BTracy-WMFClosed, ResolvedPublicActions