Ryan is starting on May 1 2020 with onboarding buddies Trey and Keith
[x] Create shell user (can connect to bastions)
[x] Server root shell (membership in ops group)
[x] Phabricator User + 2FA
[x] Phabricator permissions to see NDA and Ops restricted tickets, and added to trusted users for antivandal exempt:
* https://phabricator.wikimedia.org/project/profile/29/
* https://phabricator.wikimedia.org/project/profile/61/
* https://phabricator.wikimedia.org/project/profile/974/
[x] Add to private IRC channels https://office.wikimedia.org/wiki/IRC#Channel_operators_commands
[x] Add to ops mailing lists (`ops` and `ops-private`)
[x] Add to Exim mail aliases (`root` via `private.git:modules/privateexim/files/wikimedia.org`)
[x] Icinga user and permissions for icinga commands (paging/notifications handled via VO in step below)
[x] Phone/pager setup (via VictorOps, see https://office.wikimedia.org/wiki/Technology/Onboarding/Checklists/Template#Site_Reliability_Engineering)
[x] Add to wmf and ops LDAP groups (for web services)
[x] Confirm access to Office Wiki (OIT grants that)
[x] Confirm gerrit login and +2 on operations/puppet (this is automatic from being added to LDAP groups above)
[] Access to pwstore https://office.wikimedia.org/wiki/Pwstore
* Generate a PGP key (see https://wikitech.wikimedia.org/wiki/PGP_Keys ) and have it signed by onboarding buddy
* Submit signed PGP key to pwstore maintainers (Daniel and Moritz)
[x] Access to Google group for maint-announce mails (add user via "web only participation" option from https://groups.google.com/a/wikimedia.org/forum/#!managemembers/ops-maintenance/add though anyone in wikimedia org should be able to join)
[x] Add to "Ops vendor maintenance" Calendar
[] Setup U2F for the IDP
[] Setup U2F for the Wikimedia Google Account