Request membership to an IAM group

Introduction

User authorization in INFN-Cloud is largely based on IAM groups. The general rule is that users belong to sub-groups of three root groups:

  • admins: is the root group for system administrator users. Check our dedicated guide out to learn how to gain the nomination.
  • priv-admins: is the root group for users that want to deploy services on private network.
  • users: is the root group for unprivileged users.

By being member of IAM groups, each INFN-Cloud user can gain access to services.

As an example, the users/cygno group allows its members to access certain S3 buckets containing data of the CYGNO experiment, access to the CYGNO Jupyter notebooks and HTCondor clusters.

There are also exceptions: the ml-infn-platform group, for example, is a root group used to authorize its members to access certain GPU and FPGA resources in INFN-Cloud.

How to request group membership

The steps are here reported:

  1. log into IAM;
  2. click on the Join a group button (see fig. 1);
../../_images/button_request.png

Figure 1: Button to start a group-membership request.

  1. fill properly the form that shows up (see fig.2-3), then click on the blue Join group(s) button;
../../_images/request.png

Figure 2: Group-membership request form.

../../_images/request_filled.png

Figure 3: Example of a group-membership request form filled.

  1. a support ticket will be automatically opened. Wait for the approval by a IAM admin (for admins/* group-membership requests) or by a Group Manager (for users/* requests);

Pending group-membership requests are listed in the box above the Join a group button (see fig. 4).

If you applied to a group by mistake, you can cancel your request by clicking the corresponding red button (see fig. 4).

../../_images/list_requests.png

Figure 4: List of pending group-membership requests