IDM/Account Blocking

Trusted administrators (select stewards and SREs) are allowed to block user account via the Bitu IDM.

Navigate to https://idm.wikimedia.org and select: "Block/unblock accounts" for the navigation menu.

Using the search field, locate the user who are to be blocked or unblocked. You can search for Wikimedia Developer Account, shell account or email.

Once you have located the correct user, click block or unblock. Fill in a comment, stating why the user have been blocked/unblocked, and click Block or Unblock.

You will now be returned to the search page, with the relevant user already listed in the results. Use the "View Logs" to verify that all systems have been blocked, or unblocked.

Only select users can utilize the "Block/unblock accounts" feature. These are either users defined in ACCOUNT_MANAGERS settings, see: https://gerrit.wikimedia.org/r/plugins/gitiles/operations/puppet/+/refs/heads/production/modules/idm/templates/idm-django-settings.erb#320 or users in the LDAP group: "cn=bitu-account-managers,ou=groups,dc=wikimedia,dc=org". To get added, please reach out to the Infrastructure Foundations SRE team.