TARDIS Project

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== Giving a user administrator privileges ======

The process for giving a user administrator privileges is quite manual. A script to do this would be nice.

Checklist:
   * Follow [[howto:specific:edit_ldap|Making changes to the LDAP database]], add the user's username to ''%%uk/tardisproject/groups/timelords%%'' by adding a ''%%memberUid%%'' record. This will give administrator in a variety of services, such as sonic-screwdriver.
   * Add a mail redirect in LDAP in ''%%uk/tardisproject/aliases/sysmans%%'' & ''%%uk/tardisproject/aliases/hello%%'' by adding a ''%%mailDrop%%''.
   * Invite them, as an admin, to the 'Timelords' group on Vaultwarden. Admin Console -> Members -> Invite Member. The user may need to follow a process to create an account. Ensure to give them access to past passwords, not just new additions.
   * Give them administrator on GitLab.
   * Help them setup their SSH config to SSH into internal VMs.
   * Give a brief tour of the infrastructure, explain the new options available on sonic-screwdriver.
   * Give them guidance and perhaps work through making their first infra change with them.