Maniphest T411977

Requesting access to analytics_privatedata_users and Superset for Solenne_Lazare_WMDE
Closed, ResolvedPublicRequest
Actions

Assigned To

Authored By

	Solenne_Lazare_WMDE
	Dec 8 2025, 9:24 AM

Description

Requestor provided information and prerequisites

Complete ALL items below as the individual person who is requesting access:

Wikimedia developer account username: Solenne_Lazare_WMDE
Email address: solenne.lazare@wikimedia.de
SSH public key (must be a separate key from Wikimedia cloud SSH access): do not apply (not a developer / no need for deployment I think)
Requested group membership: analytics_privatedata_users and SQL Lab

Reason for access: I am head of product strategy and need access to the data for analytics reason
Name of approving party (manager for WMF/WMDE staff): Lena Meintrup
Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: yes
Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

- User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
- User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
- User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)

[N/A] - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.) SSH-less access
[N/A] - The provided SSH key has been confirmed out of band and is verified not being used in WMCS. SSH-less access

- access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)

[N/A] - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml implicit permision for WMDE employees

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	admin: Add production access to Solenne_Lazare_WMDE	operations/puppet	production	+9 -1

Customize query in gerrit

Related Objects

Mentioned In: T411883: Requesting access to analytics_privatedata_users and SQL Lab for Leif WMDE

Event Timeline

Solenne_Lazare_WMDE created this task.Dec 8 2025, 9:24 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 8 2025, 9:24 AM

@Lena_WMDE

I can confirm that @Solenne_Lazare_WMDE is head of product strategy at Wikimedia Deutschland.

Lena_WMDE removed Lena_WMDE as the assignee of this task.Dec 8 2025, 9:32 AM

Lena_WMDE subscribed.

jcrespo updated the task description. (Show Details)Dec 9 2025, 8:32 AM

jcrespo added a project: LDAP-Access-Requests.Dec 9 2025, 8:37 AM

While we process your request, to speed up the current and future requests, could I ask you, @Solenne_Lazare_WMDE, to add your LDAP developer account to your Phabricator profile, here: https://phabricator.wikimedia.org/settings/user/Solenne_Lazare_WMDE/page/external/

Hi, @Lena_WMDE we don't have you on the list of approval managers for WMDE: https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#WMDE_Group , could you ask one of the people on this list to request to add you (so you can approve future requests)? A message here saying you can approve would be enough.

Hi, @KFrancis requesting an NDA filing for the email show on the header above for the given WMDE employee: solenne.lazare@wikimedia.de

jcrespo updated the task description. (Show Details)Dec 9 2025, 9:05 AM

jcrespo updated the task description. (Show Details)Dec 9 2025, 9:12 AM

jcrespo updated the task description. (Show Details)

jcrespo moved this task from Backlog to NDA Pending on the LDAP-Access-Requests board.Dec 9 2025, 9:26 AM

jcrespo triaged this task as High priority.Dec 9 2025, 9:33 AM

jcrespo mentioned this in T411883: Requesting access to analytics_privatedata_users and SQL Lab for Leif WMDE.Dec 9 2025, 9:41 AM

I approve this request on WMDE's end. Thank you

Thank you!

jcrespo updated the task description. (Show Details)Dec 9 2025, 10:22 AM

jcrespo moved this task from Untriaged to Manager/NDA Approval/Confirmation on the SRE-Access-Requests board.Dec 9 2025, 5:01 PM

Hi all, I have sent the NDA out to be signed. I'll confirm when it's complete.

@jcrespo Done for the LDAP profile added to my phabircator profile
@KFrancis also just signed the NDA

Hi all, legal counsel has also signed the NDA. It's complete. Thanks!

jcrespo claimed this task.Dec 10 2025, 9:28 AM

jcrespo updated the task description. (Show Details)

jcrespo moved this task from NDA Pending to Code Review Pending on the LDAP-Access-Requests board.

@Solenne_Lazare_WMDE You have been added to the NDA and WMDE LDAP groups, which means you should have already login access to the apps, but not yet to private data (managing the access request and access to analytics_privatedata_users next).

Change #1217135 had a related patch set uploaded (by Jcrespo; author: Jcrespo):

[operations/puppet@production] admin: Add production access to Solenne_Lazare_WMDE

https://gerrit.wikimedia.org/r/1217135

gerritbot added a project: Patch-For-Review.Dec 10 2025, 10:34 AM

Change #1217135 merged by Jcrespo: