Requesting access to analytics_privatedata_users and SQL Lab for Leif WMDE
Closed, ResolvedPublicRequest
Actions

Assigned To

Authored By

	Leif_WMDE
	Dec 5 2025, 5:42 PM

Description

Requestor provided information and prerequisites

Complete ALL items below as the individual person who is requesting access:

Wikimedia developer account username: Leif WMDE
Email address: leif.lobinsky@wikimedia.de
SSH public key (must be a separate key from Wikimedia cloud SSH access): ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFQa6tDwN1jup5jC5iy+RoV2X00vFyZQCxZj+7g/OfSX leif.lobinsky@wikimedia.de
Requested group membership: analytics_privatedata_users and SQL Lab
Reason for access: I am a product manager at Wikimedia and need access to Superset dashboards that use data from the private data lake
Name of approving party (manager for WMF/WMDE staff): Lena_WMDE
Ensure you have signed the L3 Wikimedia Server Access Responsibilities document:
Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

- User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
- User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
- User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
- User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)

[N/A] - The provided SSH key has been confirmed out of band and is verified not being used in WMCS. SSH-less access

- access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)

[N/A] - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml implicity permission for WMDE employee

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	admin: Add Leif_WMDE access to the analytics-privatedata-users	operations/puppet	production	+8 -1

Customize query in gerrit

Related Objects

Mentioned Here: T411977: Requesting access to analytics_privatedata_users and Superset for Solenne_Lazare_WMDE

Event Timeline

Leif_WMDE created this task.Dec 5 2025, 5:42 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 5 2025, 5:42 PM

Leif_WMDE assigned this task to Lena_WMDE.Dec 5 2025, 5:42 PM

Pppery renamed this task from Requesting access to <ENTER RESOURCE NAME> for <ENTER YOUR USERNAME> to Requesting access to analytics_privatedata_users and SQL Lab for Leif WMDE.Dec 5 2025, 6:21 PM

Hello @Leif_WMDE

you can kick-off the process early by sending an email to Katie Francis from your WMDE work email and say that you would like to sign an NDA in reference to this ticket. She will follow-up with you and that unblocks this ticket in a bit.

Cheers,

Daniel

Dzahn added a subscriber: KFrancis.Dec 5 2025, 7:40 PM

I can confirm that @Leif_WMDE is a product manager at Wikimedia Deutschland.

Lena_WMDE removed Lena_WMDE as the assignee of this task.Dec 8 2025, 8:33 AM

Lena_WMDE subscribed.

Hello @Dzahn

thanks for the update and connecting to Katie. The NDA is signed.

Cheers,
Leif

We don't yet have the confirmation from Legal on file, waiting for that.

@Leif_WMDE Do you need actual SSH access, or just web, like T411977 ?

Additionally, @Leif_WMDE we haven't found an LDAP (developer) account with the provided name, but we have found another with your email. Could you confirm the latter is the one you want, for example, by linking it in your Phabricator profile, so we know it is you @ https://phabricator.wikimedia.org/settings/user/Leif_WMDE/page/external/ ?

jcrespo triaged this task as High priority.Dec 9 2025, 9:50 AM

jcrespo updated the task description. (Show Details)

jcrespo moved this task from Untriaged to Manager/NDA Approval/Confirmation on the SRE-Access-Requests board.

Hi all, confirming the NDA is complete! Thanks!

@jcrespo Thanks for the update.

I just need web access (I'm not a dev).

I confirm the LDAP account and linked it to my Phabricator profile.

jcrespo updated the task description. (Show Details)Dec 10 2025, 8:46 AM

jcrespo updated the task description. (Show Details)Dec 10 2025, 8:49 AM

@WMDE-leszek May I ask for approval?

jcrespo added a project: LDAP-Access-Requests.Dec 10 2025, 12:31 PM

jcrespo moved this task from Backlog to Manager Approval Pending on the LDAP-Access-Requests board.

I approve on WMDE's end. Thank you!
(sorry for being late, didn't realize there were multiple WMDE requests lately)

The user should also be added to LDAP groups "nda" (now that it's signed) and "wmde" like other WMDE staff.

jcrespo updated the task description. (Show Details)Dec 11 2025, 8:29 AM

In T411883#11449463, @Dzahn wrote:

The user should also be added to LDAP groups "nda" (now that it's signed) and "wmde" like other WMDE staff.

I just added them to those groups, after manager approval.

Change #1217462 had a related patch set uploaded (by Jcrespo; author: Jcrespo):

[operations/puppet@production] admin: Add Leif_WMDE access to the analytics-privatedata-users

https://gerrit.wikimedia.org/r/1217462

gerritbot added a project: Patch-For-Review.Dec 11 2025, 8:53 AM

Change #1217462 merged by Jcrespo: