SRE/LDAP/Groups/Request access

You can request access to an LDAP group through either the Wikimedia IDM system, or by creating a Phabricator task. Access requests are gradually being migrated to Wikimedia IDM. Check the list below to decide where you place your request.

Wikimedia Identity Management system

Access to the following LDAP groups is managed via Wikimedia IDM:

• airflow-ml-ops
• airflow-research-ops
• airflow-search-ops
• airflow-wikidata-ops
• Bitu-account-managers
• logstash-access
• netbox-readonly-access
• spiderpig-access
• wmf

Create your request as follows:

1. Sign in to https://idm.wikimedia.org.
2. Go to Permissions from the menu on the top left.
3. Find the group you want to join in the list, and press Request this permission.
4. Provide a rationale for this access under Comment. Alternatively, if there is a Phabricator task about your access request, you can include this under Ticket.
5. Submit your request by pressing Request access. In most cases, a request will need approval. The administrators of the permission/group are automatically notified of your request. Until this is acted on, your request will be shown as "Pending". Once reviewed by a group admin, it will be shown as Approved or Rejected. If you were approved, you are automatically added to the underlying LDAP group.

Phabricator task

For any other group, create an LDAP-Access-Requests task in Phabricator.

After you fill in the linked form, a task will automatically be created on the LDAP-Access-Requests workboard. These are triaged on a daily basis by SRE Clinic Duty.