Request membership to an IAM group

Introduction

User authorization in INFN-Cloud is largely based on IAM groups. The general rule is that users belong to sub-groups of three root groups:

• admins: is the root group for system administrator users. Check our dedicated guide out to learn how to gain the nomination.
• priv-admins: is the root group for users that want to deploy services on private network.
• users: is the root group for unprivileged users.

By being member of IAM groups, each INFN-Cloud user can gain access to services.

As an example, the users/cygno group allows its members to access certain S3 buckets containing data of the CYGNO experiment, access to the CYGNO Jupyter notebooks and HTCondor clusters.

There are also exceptions: the users/ai-infn group, for example, is a root group used to authorize its members to access certain GPU and FPGA resources in INFN-Cloud.

How to request group membership

The steps are here reported:

1. log into IAM;
2. click on the Join a group button (see fig. 1);

   

3. fill properly the form that shows up (see fig.2-3), then click on the blue Join group(s) button;

   

   

4. a support ticket will be automatically opened. Wait for the approval by a IAM admin (for admins/* group-membership requests) or by a Group Manager (for users/* requests);

Pending group-membership requests are listed in the box above the Join a group button (see fig. 4).

If you applied to a group by mistake, you can cancel your request by clicking the corresponding red button (see fig. 4).