SRE/LDAP/Groups/Request access

There are currently two paths to request access to an LDAP group:

• By logging into the Wikimedia Identity Management System at https://idm.wikimedia.org. (See guide below).
• By creating an LDAP-Access-Requests task in Phabricator.

Access requests are gradually being migrated to Wikimedia IDM. Current groups configured to be requested via IDM:

• wmf

All other groups require opening a Phabricator task.

Using the Wikimedia Identity Management System

• Sign in to https://idm.wikimedia.org.
• In the menu in the top left select Permissions and under Request new permissions select Request this permission next to group you want to request
• Please provide a rationale for this access under Comment. Alternatively if there is an existing Phabricator task about your access, you can also provide a reference under Ticket.
• After finalizing your request with Request access it's being processed. In most cases a request will need approval. The administrators of the permission/group are automatically notified about your request. Until this is acted on, your request will be shown in state Pending. Once processed, it will be shown as Approved or Rejected and you will be added to the underlying LDAP group, if approved.