Page MenuHomePhabricator

Fundraising access request for Caitlin Cogdill
Closed, ResolvedPublic

Description

This is a new access request for Caitlin Cogdill. They already have a valid ssl client certificate from access granted in T368474. They require the following access:

  • civicrm web access
    • standard access
    • donor services access
  • ssh access - if specific hosts: list here
  • mariadb - if specific hosts or databases: list here
  • trino
  • metabase/superset
  • jupyter
  • other: please explain

New User Procedure / Checklist

When adding a new user to the fundraising / fr-tech ecosystem, we have a set of places where we need to create accounts and access.

Prerequisites

Before we can take any action to add a user, we need to verify that they are authorized to have such access. This requires confirmation from their manager and approval from the C level that access is approved.

[x] user_verification
Requires: user request
[x] access_rights: letter to C level (currently Lisa) verifying grant of access
[x] account name/contact info: verify on https://collab.wikimedia.org/wiki/Fundraising#Contact_List
[-] (if not advancement) add to okta notify list: create ITS ticket for adding to fr-tech's entry in the Okta Workflows Table

Accounts and Services

[x] client_ssl_cert
Requires: user_verification
[x] cert_setup: generate cert on frpm1002 using ssl_user_admin
[x] account_setup: sms the user the password for the key
[x] follow_on: assist with certificate installation
[ ] civicrm
Requires: client_ssl_cert
[x] account_setup: Create user account. This will notify the user via email to update their password.
[ ] follow_on: Verify user can log in to https://civicrm.wikimedia.org

Event Timeline

Thanks for this, Lars! For context on my use cases, I would use Civi access to:

  1. Cross-check donor records between Acoustic and Civi when research Donor Relations questions
  2. Check snooze behaviors
  3. View emails that are built and sent from Civi

If there's a view-only set of permissions, that's great for me. I see no reason why I'd need to make changes to anything in the CRM.

cc @AKanji-WMF, assuming that's a good way to get this on a future sprint.

Dwisehaupt moved this task from Triage to In Progress on the fundraising-tech-ops board.
Dwisehaupt subscribed.

Access approval request sent to Lisa.

Approval granted.

Date: Mon, 23 Feb 2026 10:40:51
From: Lisa Seitz Gruwell
To: Dallas Wisehaupt
Cc: Erica Roden, Greg Grossmeier, Caitlin Cogdill
Subject: Re: CiviCRM access request for ccogdill
----------------------------------------

Yes, I approve.

New civi account created with the username ccogdill using the ccogdill-ctr@ email address. granted CiviAdmin role. Not sure if an automated email goes out on account creation so contacting Caitlin to let her know.

Dwisehaupt moved this task from In Progress to Done on the fundraising-tech-ops board.

Closing. If there are issues installing the certificate or with access they can be followed up on.