Requesting access to analytics-private-users for aramirezwmf
Closed, ResolvedPublicRequest
Actions

Assigned To

Authored By

	ARamirez_WMF
	Aug 4 2026, 4:23 PM

Project Tags

Referenced Files

None

Subscribers

Description

Requestor provided information and prerequisites

Complete ALL items below as the individual person who is requesting access:

Wikimedia developer account username: aramirezwmf
Email address: aramirez@wikimedia.org
SSH public key (must be a separate key from Wikimedia cloud SSH access):
Requested group membership: analytics-privatedata-users
Reason for access: Superset dashboard
Name of approving party (manager for WMF/WMDE staff): @MaCollins-WMF
Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: YES
Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

- User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
- User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
- User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)

[] - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
~~[] - The provided SSH key has been confirmed out of band and is verified not being used in WMCS.~~

- access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
- access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

Related Changes in Gerrit:

	Subject	Author	Repo	Branch	Lines +/-
	admin: add aramirezwmf to analytics-privatedata	AOkoth	operations/puppet	production	+8 -1

Customize query in gerrit

Event Timeline

ARamirez_WMF created this task.Aug 4 2026, 4:23 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 4 2026, 4:23 PM

Hi - confirming we need Aida to have access to the FY26-27 Metrics Superset dashboard.

Arnoldokoth changed the task status from Open to In Progress.Aug 5 2026, 8:55 AM

Arnoldokoth updated the task description. (Show Details)

Arnoldokoth updated the task description. (Show Details)Aug 5 2026, 9:02 AM

Change #1321519 had a related patch set uploaded (by AOkoth; author: AOkoth):

[operations/puppet@production] admin: add aramirezwmf to analytics-privatedata

https://gerrit.wikimedia.org/r/1321519

gerritbot added a project: Patch-For-Review.Aug 5 2026, 9:17 AM

Arnoldokoth updated the task description. (Show Details)Aug 5 2026, 9:20 AM

Change #1321519 merged by AOkoth:

[operations/puppet@production] admin: add aramirezwmf to analytics-privatedata

https://gerrit.wikimedia.org/r/1321519

I believe this should be good to go. @ARamirez_WMF Could you kindly test and confirm?

Arnoldokoth assigned this task to ARamirez_WMF.Aug 5 2026, 3:27 PM

Maintenance_bot removed a project: Patch-For-Review.Aug 5 2026, 3:31 PM

Dzahn moved this task from Untriaged to Awaiting User Input on the SRE-Access-Requests board.Aug 5 2026, 7:46 PM

• jcrespo changed the task status from In Progress to Open.Aug 7 2026, 11:58 AM

• jcrespo triaged this task as Medium priority.

• jcrespo moved this task from Backlog to Radar on the SRE board.

We waited for a week and we didn't receive confirmation- it is ok, maybe the person is unavailable, busy or on their personal time off. However, there is not much else for SRE to do here. Please provive feedback that it is working as expected when you can @ARamirez_WMF and if not, you can reopen this ticket or contact the person in SRE Clinic duty to get further help. Resolving otherwise.

Hello, I can't make it past the https://idp.wikimedia.org/login page.

I can login into CAS, and have a message that says, "you have successfully logged into the Central Authentication Service. However, you are seeing this page because CAS does not know about your target destination and how to get you there. Examine the authentication request again and make sure a target service/application that is authorized and registered with CAS is specified."

I can see that you haven't been added to the wmf group. I belive that's needed to access superset at all.

In any case, what you suffered is normal, you should be able to login directly to the service, e.g. superset.wikimedia.org and it will use cas automatically. But I think you still need wmf ldap rights (which wasn't on the original request). Please add your developer/ldap account on your phabricator profile to avoid further delays like this in the future.

• jcrespo claimed this task.Aug 12 2026, 8:39 PM

@ARamirez_WMF I've added you to the wmf ldap group. Could you try again logging in into superset.wikimedia.org ? It should work now.

• jcrespo moved this task from Awaiting User Input to Ready To Go on the SRE-Access-Requests board.Aug 13 2026, 7:32 AM

• jcrespo removed • jcrespo as the assignee of this task.Aug 13 2026, 8:39 AM

I'm tentatively closing this. If you still experience issues accessing superset, please feel free to reopen. Thanks!

JMeybohm closed this task as Resolved.Aug 14 2026, 1:13 PM

JMeybohm claimed this task.

Requesting access to analytics-private-users for aramirezwmfClosed, ResolvedPublicRequestActions