Ryan is starting on May 1 2020 with onboarding buddies Trey and Keith
[x] Create shell user (can connect to bastions)
[x] Server root shell (membership in ops group)
[x] Phabricator User + 2FA
[x] Phabricator permissions to see NDA and Ops restricted tickets, and added to trusted users for antivandal exempt:
* https://phabricator.wikimedia.org/project/profile/29/
* https://phabricator.wikimedia.org/project/profile/61/
* https://phabricator.wikimedia.org/project/profile/974/
[x] Add to private IRC channels https://office.wikimedia.org/wiki/IRC#Channel_operators_commands
[x] Add to ops mailing lists (`ops` and `ops-private`)
[] Add to Exim mail aliases (`root` via `private.git:modules/privateexim/files/wikimedia.org`)
[] Icinga user and permissions (icinga commands, paging/notifications)
[] Phone/pager setup (via VictorOps, see https://office.wikimedia.org/wiki/Technology/Onboarding/Checklists/Template#Site_Reliability_Engineering)
[x] Add to wmf and ops LDAP groups (for web services)
[x] Confirm access to Office Wiki (OIT grants that)
[x] Confirm gerrit login and +2 on operations/puppet (this is automatic from being added to LDAP groups above)
[] Access to pwstore
[x] Access to Google group for maint-announce mails (add user via "web only participation" option from https://groups.google.com/a/wikimedia.org/forum/#!managemembers/ops-maintenance/add though anyone in wikimedia org should be able to join)
[x] Add to "Ops vendor maintenance" Calendar
[] Setup U2F for the IDP
[] Setup U2F for the Wikimedia Google Account