Page MenuHomePhabricator

Fundraising access request for KEVIN HILL
Closed, ResolvedPublic

Description

This is a new access request for KEVIN HILL (KHILL-WMF). They require the following access: (mark each box with an x)

  • civicrm web access
    • standard access
    • donor services access
  • ssh access - if specific hosts: list here
  • mysql - if specific hosts or databases: list here
  • superset
  • other: METABASE

An email request for C-Level approval was sent to Sheetal Puri - and I've added my contact details to the Contact List - thanks!


New User Procedure / Checklist

When adding a new user to the fundraising / fr-tech ecosystem, we have a set of places where we need to create accounts and access.

Prerequisites

Before we can take any action to add a user, we need to verify that they are authorized to have such access. This requires confirmation from their manager and approval from the C level that access is approved.

[x] user_verification
Requires: user request
[x] access_rights: letter to C level (currently Lisa) verifying grant of access
[x] account name/contact info: verify on https://collab.wikimedia.org/wiki/Fundraising#Contact_List
[-] (if not advancement) add to okta notify list: create ITS ticket for adding to fr-tech's entry in the Okta Workflows Table

Accounts and Services

[x] client_ssl_cert
Requires: user_verification
[x] cert_setup: generate cert on frpm1002 using ssl_user_admin
[x] account_setup: sms the user the password for the key
[x] follow_on: assist with certificate installation
[ ] civicrm
Requires: client_ssl_cert
[ ] account_setup: Create user account. This will notify the user via email to update their password.
[ ] follow_on: Verify user can log in to https://civicrm.wikimedia.org
[x] metabase
Requires: client_ssl_cert
[x] account_setup: Reach out to FR-Analytics about new user requiring access
[ ] superset
Requires: client_ssl_cert
[ ] account_setup: Create user account. Notify the user of their account name and password.
[ ] follow_on: Verify user can log in to https://superset.frdev.wikimedia.org
[ ] archive_access: Add to google drive archive group. https://drive.google.com/drive/folders/0ADWGPlZtksGdUk9PVA

Event Timeline

Hi @Dwisehaupt - is this request complete, or is it missing any required info / approvals? Thanks!

@KHill-WMF It is not complete yet. I haven't seen an approval from Lisa yet. If you have that, please forward it on.

Access approval:

Date: Fri, 3 Oct 2025 12:27:25
From: Lisa Seitz Gruwell
To: Kevin Hill
Cc: Dallas Wisehaupt
Subject: Re: Kevin Hill requesting access to Metabase
----------------------------------------

Approved!

On Fri, Oct 3, 2025 at 7:08 AM Kevin Hill wrote:
      Hi Lisa,Sheetal has asked that I reach out to you directly to request your permission to access Metabase for reporting purposes. Please let me know if this is ok with you.

I believe I've covered the other requirements, with a Phab ticket created and my contact details added to the contact list.

Thanks very much,
Kevin Hill
Dwisehaupt moved this task from Triage to In Progress on the fundraising-tech-ops board.

Certificate created and sent to khill along with instructions on how to install it. Password sent via SMS. Verified that a metabase account has already been created.

@KHill-WMF If you need to reset your password you can use: https://metabase.frdev.wikimedia.org/auth/forgot_password

Dwisehaupt claimed this task.
Dwisehaupt updated the task description. (Show Details)
Dwisehaupt moved this task from In Progress to Done on the fundraising-tech-ops board.

Verified Kevin has accepted the metabase invite. closing.