Page MenuHomePhabricator

Grant Access to analytics-privatedata-users for AJAVED-WMF
Closed, ResolvedPublic

Description

The username of your existing LDAP account on https://idm.wikimedia.org or https://gerrit.wikimedia.org: AJAVED-WMF

Do you currently have shell access?: Unsure, but it displays /bin/bash as shell path

Purpose (Specify which service you need to get access to, e.g. Icinga, Grafana, Superset etc):

I need to be added as a member of the WMF group (to access Superset at all) and as a a level 1 member of the analytics-privatedata-users group per https://wikitech.wikimedia.org/wiki/Data_Platform/Data_access#Dashboards_in_Superset_that_do_access_private_data_(level_1)


  • Wikimedia developer account username: AJaved
  • Wikitech username: AJaved-WMF
  • Email address: ajaved@wikimedia.org

* SSH public key (must be a separate key from Wikimedia cloud SSH access):

  • Requested group membership: I need to be added as a member of the WMF group (to access Superset at all) and as a a level 1 member of the analytics-privatedata-users group per https://wikitech.wikimedia.org/wiki/Data_Platform/Data_access#Dashboards_in_Superset_that_do_access_private_data_(level_1)
  • Reason for access: As a project manager on the 25 years of Wikipedia, I need to be able to access the WP25 microsite stats dashboard on Superset.
  • Name of approving party (manager for WMF/WMDE staff): Carla Casilli
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document:
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)

[] - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
[] - The provided SSH key has been confirmed out of band and is verified not being used in WMCS.

  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)

[] - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

Hello @AJaved-WMF

let's start with the "WMF group" part of your request. This has actually moved to a self-service workflow, the Wikimedia Identity Management System.

Please take a look here:

https://wikitech.wikimedia.org/wiki/SRE/LDAP/Groups/Request_access#Using_the_Wikimedia_Identity_Management_System

https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#WMF_Group

The analytics-privatedata-users part still has to be done here for now, so this Phabricator task should also stay open regardless.

Change #1238070 had a related patch set uploaded (by Dzahn; author: Dzahn):

[operations/puppet@production] admin: add ajaved-wmf to analytics-privatedata, level 1

https://gerrit.wikimedia.org/r/1238070

tappof moved this task from Untriaged to Awaiting User Input on the SRE-Access-Requests board.
tappof subscribed.

Hello @AJaved-WMF,
Could you please edit the task and help fill in the missing details in the list I added to it, namely the Wikimedia developer account username, Wikitech account username, and the name of the approving party?

I would also ask you to please read https://wikitech.wikimedia.org/wiki/Analytics/Data_access#User_responsibilities .
Thank you

  • L3 has been signed
  • group approver not needed for WMF staff (confirmed staff status in Dayforce)
  • does need manager approval - manager @ccasilli

@ccasilli Do you approve of this access request for Aiman? thanks!

Hi @Dzahn apologies for not making the edits earlier, I've done so now. I also checked directly with Carla and this access request was approved by her.

Hi! Could you make her leave a quick comment here on the ticket? Thanks

Hi there, approved, thanks, all. Aiman you should have access now!

Change #1238070 merged by Dzahn:

[operations/puppet@production] admin: add ajaved-wmf to analytics-privatedata, level 1

https://gerrit.wikimedia.org/r/1238070

Dzahn updated the task description. (Show Details)

@AJaved-WMF You have been added to the requested group. Please give it about 30 minutes (max) and you should be able to see the dashboard.