Jump to content

Help:Cloud VPS user roles and rights

From Wikitech

This page contains information about Wikimedia Cloud VPS user roles and rights.

Accounts you will need

This document can be improved to have clearer sequencing with related docs: phab:T347637

To access Toolforge, Cloud VPS, or other Wikimedia developer tools, you need the following two types of accounts:

Account Type Description Where to sign up
Wikimedia account Also known as "Wikimedia single user login (SUL)" account. Allows you to log into general wikis like Wikipedia, MediaWiki, and MetaWiki. Create Wikimedia account
Wikimedia developer account Username (also called LDAP username) is used to log in on Wikitech (this wiki), Gerrit, and the Toolforge admin console. In GitLab it is your displayed name, so you may want it to be your full name. You will not be able to change this later!

Shell username is used to log into Toolforge, other Wikimedia VPS or Wikimedia production hosts using SSH.

Create Wikimedia developer account

Users and permissions

Permission Logged-in users Project reader[note 1] Project member[note 2] Cloud admins
Add and manage your public SSH keys X X X X
SSH to project instances X X X
Manage project membership and user roles X X
Create or manage instances X X
Allocate and associate public IP addresses, and add public DNS entries to instances X X
Manage security groups and rules X X
Manage available puppet classes and variables X X
Manage sudo policies X X
Create/delete Cloud VPS projects X
Create and manage DNS domains X


  1. Formerly known as members
  2. Formerly known as project admins

Gaining specific permissions

The following people can grant Project reader or member rights:

  • Project members. Project members can grant access on projects they are members of. You can find Project members listed on the individual pages for their projects.
  • Cloud VPS admins. Cloud admins, including Wikimedia Cloud Services staff and trusted community volunteers, can manage membership and Project admin status in any project.

Communication and support

Support and administration of the WMCS resources is provided by the Wikimedia Foundation Cloud Services team and Wikimedia movement volunteers. Please reach out with questions and join the conversation:

Discuss and receive general support
Stay aware of critical changes and plans
Track work tasks and report bugs

Use a subproject of the #Cloud-Services Phabricator project to track confirmed bug reports and feature requests about the Cloud Services infrastructure itself

Read stories and WMCS blog posts

Read the Cloud Services Blog (for the broader Wikimedia movement, see the Wikimedia Technical Blog)