Admin Guides_New Admin - ACCESS-NRI/accessdev-Trac-archive GitHub Wiki
The Accessdev sysadmins are identified by belonging to the group ju7_1:
- Changes to ju7_1 or other sysadmin privileges are made by request of any current sysadmin to [email protected].
- When doing so an Accessdev ticket should be created to record this. https://accessdev.nci.org.au/trac/report/8
- Sysadmins privileges are equal for all sysadmins, there is no hierarchy.
New Accessdev sysadmins additionally need to be given the following permissions:
- Sudo rights: automatically given by adding a user to the ju7_1 group
- OpenStack tenant access (by NCI sysadmins)
- add to root mail alias by updating the list under "bundle::nci::mail_forwarder::aliases_hash" in the "hieradata/project.yaml" file. (by the "master" puppet branch maintainer)
- TRAC_ADMIN privileges: on permissions page of trac wiki https://accessdev.nci.org.au/trac/admin/general/perm
- Sysadmins should also be listed on the wiki page https://accessdev.nci.org.au/trac/wiki/Development
Other admin lists that are controlled from within puppet:
- rosie database admins (sysadmins allowed to write to the trunk of any suite.)
modules/rose/templates/roseconf.erb: super-users
- umui "operator" privilege (will be able to read all other users' private folders)
modules/umui/templates/ghui-config/user: OPERATOR