Admin Guides_New Admin - ACCESS-NRI/accessdev-Trac-archive GitHub Wiki

The Accessdev sysadmins are identified by belonging to the group ju7_1:

• Changes to ju7_1 or other sysadmin privileges are made by request of any current sysadmin to [email protected].
• When doing so an Accessdev ticket should be created to record this. https://accessdev.nci.org.au/trac/report/8
• Sysadmins privileges are equal for all sysadmins, there is no hierarchy.

New Accessdev sysadmins additionally need to be given the following permissions:

• Sudo rights: automatically given by adding a user to the ju7_1 group
• OpenStack tenant access (by NCI sysadmins)
• add to root mail alias by updating the list under "bundle::nci::mail_forwarder::aliases_hash" in the "hieradata/project.yaml" file. (by the "master" puppet branch maintainer)
• TRAC_ADMIN privileges: on permissions page of trac wiki https://accessdev.nci.org.au/trac/admin/general/perm
• Sysadmins should also be listed on the wiki page https://accessdev.nci.org.au/trac/wiki/Development

Other admin lists that are controlled from within puppet:

• rosie database admins (sysadmins allowed to write to the trunk of any suite.)

modules/rose/templates/roseconf.erb: super-users

• umui "operator" privilege (will be able to read all other users' private folders)

modules/umui/templates/ghui-config/user: OPERATOR