Add Jmoore111 to analytics-admins
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	mpopov
	Apr 10 2026, 6:00 PM

Project Tags

Referenced Files

None

Subscribers

Description

In T408164#11809352, @JMoore-WMF wrote:

hi- i'm unable to access https://superset.wikimedia.org/superset/dashboard/409/?native_filters_key=0nOyfZX2obcPi68hX8Ote4F6VfWIOWVp2R2P4RTS0w_nLFBLznvdH9R_fLWq7AB1 dashboard, and need my access expanded so i can view this and other relevant dashboards for data platform issues

Acceptance criteria

Jmoore111 is in analytics-admins POSIX group

SRE Clinic Duty Confirmation Checklist for Access Requests

- User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
- User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
- access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
- paging @MMiller_WMF
- access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml
- signed off by @BTullis

Details

Other Assignee: atsuko

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	admin: Add jmoore111 to the analytics-admin group	operations/puppet	production	+1 -1

Customize query in gerrit

Related Objects

Mentioned In: T424006: Make /wmf/data/hdfs/usage accessible for non-admins
T408164: Requesting access to Superset, Turnilo, Spark, Presto, Hive, Hadoop, Jupyter for Jmoore111
Mentioned Here: T408164: Requesting access to Superset, Turnilo, Spark, Presto, Hive, Hadoop, Jupyter for Jmoore111

Event Timeline

mpopov created this task.Apr 10 2026, 6:00 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 10 2026, 6:00 PM

Requires approval from @BTullis (as approver for the group according to https://gerrit.wikimedia.org/r/plugins/gitiles/operations/puppet/+/refs/heads/production/modules/admin/data/data.yaml)

Gehel triaged this task as High priority.Apr 21 2026, 7:57 AM

Gehel edited projects, added: Data-Platform-SRE (2026-03-27 - 2026-04-17); removed: Data-Platform-SRE.

Gehel moved this task from Backlog - project to Quick Wins on the Data-Platform-SRE (2026-03-27 - 2026-04-17) board.

analytics-admins also gives a bunch of fairly powerful privileges at the server level. I'm not sure how superset access are configured. Would analytics_privatedata_users be sufficient in this case? Or should we modify the dashboard permissions to be visible to all analytics_privatedata_users?

From Slack discussion with @JAllemandou:

I have some context o give around this request: the dashboard Justin is trying to access is about HDFS folders data sizes. The underlying dataset contains all HDFS data, including user-folders, so we decided to restrict access to preserve some level of privacy. The need is not at superset level: there are roles in superset, but not for data access, only for dashboard/SQL access/modification. The need is indeed here to add justin to the analytics-admin group so that he can read the data on HDFS.

Approved. Apologies for the delay.

atsuko changed the task status from Open to In Progress.Apr 21 2026, 9:24 AM

atsuko claimed this task.

atsuko moved this task from Quick Wins to In Progress on the Data-Platform-SRE (2026-03-27 - 2026-04-17) board.

atsuko updated the task description. (Show Details)Apr 21 2026, 9:33 AM

Change #1275826 had a related patch set uploaded (by Atsuko; author: Atsuko):

[operations/puppet@production] admin: Add jmoore111 to the analytics-admin group

https://gerrit.wikimedia.org/r/1275826

gerritbot added a project: Patch-For-Review.Apr 21 2026, 9:35 AM

atsuko added projects: SRE, SRE-Access-Requests.Apr 21 2026, 9:38 AM