Frequently Asked Questions about the CCDB: Difference between revisions
No edit summary |
No edit summary |
||
(33 intermediate revisions by 2 users not shown) | |||
Line 5: | Line 5: | ||
= CCDB basics = <!--T:1--> | = CCDB basics = <!--T:1--> | ||
== What | == What is the CCDB? == <!--T:4--> | ||
<!--T:5--> | <!--T:5--> | ||
The | The [https://ccdb.alliancecan.ca CCDB is the portal to your account with the Alliance] where you can find information on the roles you have in the projects you are involved in, the resources that are allocated to you, as well as statistics on your use of these resources. | ||
== What can I do on the portal? == <!--T:6--> | == What can I do on the portal? == <!--T:6--> | ||
<!--T:7--> | <!--T:7--> | ||
* | * Register, | ||
* | * Manage personal information and roles, | ||
* | * Apply for the Resource Allocation Competition (RAC), | ||
* Manage RAP information and membership. | |||
* | |||
== What is a CCI and why would I want one? == <!--T:8--> | == What is a CCI and why would I want one? == <!--T:8--> | ||
<!--T:9--> | <!--T:9--> | ||
A | A CCI is a unique personal and national identifier. When you register at https://ccdb.alliancecan.ca a CCI is created for you. | ||
== Who is eligible to get a CCI? == <!--T:10--> | == Who is eligible to get a CCI? == <!--T:10--> | ||
<!--T:11--> | <!--T:11--> | ||
In order to register with the CCDB you must | In order to register with the CCDB, you must | ||
* be a faculty member at a Canadian institution that is registered with the CCDB, or | * be a faculty member at a Canadian institution that is registered with the CCDB, or | ||
* be sponsored by a faculty member at a Canadian institution that is registered with the CCDB. | * be sponsored by a faculty member at a Canadian institution that is registered with the CCDB. | ||
People who can be sponsored include, but | People who can be sponsored include, but are not limited to, graduate students and research staff that report to the sponsoring faculty member. | ||
== What is a role? == <!--T:12--> | == What is a role? == <!--T:12--> | ||
<!--T:13--> | <!--T:13--> | ||
A role is an identifier that represents the combination of a person's position (e.g., faculty, graduate student, postdoctoral fellow, etc.), institution, and sponsor. In order to access | A role is an identifier that represents the combination of a person's position (e.g., faculty, graduate student, postdoctoral fellow, etc.), institution, and sponsor. In order to access our computational resources, you must have a valid and up-to-date role. Most people will only have one role at a time, but when you change institution, sponsor, or position you will need to apply for a new role rather than update the old one. We ask you to do this so we can maintain accurate records for usage reporting to our governmental funding agencies. | ||
== What is a CCRI? == <!--T:14--> | == What is a CCRI? == <!--T:14--> | ||
<!--T:15--> | <!--T:15--> | ||
A CCRI is the unique identifier for your role (see <i>What is a role?</i>). Since one person may have multiple roles over time, one CCI may be associated with more than one CCRI. Every job that runs on a national cluster is attributed to a CCRI. | |||
= Resource Allocation Projects (RAP) = <!--T:16--> | = Resource Allocation Projects (RAP) = <!--T:16--> | ||
Line 51: | Line 45: | ||
<!--T:17--> | <!--T:17--> | ||
Access to our national computational resources are made available to PIs through Resource Allocation Projects (RAP). Each RAP is identified by a RAPI and an associated group name. | |||
<!--T:44--> | <!--T:44--> | ||
Researchers are usually working on at least one research project. For reporting purposes, we need to be able to provide statistics on how our facilities are used, but the word | Researchers are usually working on at least one research project. For reporting purposes, we need to be able to provide statistics on how our facilities are used, but the word <i>project</i> is too ambiguous, therefore we use a name which does not have any implicit meanings. Also, computing resources are not allocated to individuals, they are allocated to groups of researchers. The RAP is the group of researchers which resources are allocated to. | ||
<!--T:36--> | <!--T:36--> | ||
In general, there are two main types to RAPs: | In general, there are two main types to RAPs: | ||
*Default RAP: A default RAP is automatically created when a PI role is activated. Default and Rapid Access Service quotas for storage and cloud resources are managed via this default RAP. The Default RAP allows PIs and sponsored users to make opportunistic | *Default RAP: A default RAP is automatically created when a PI role is activated. Default and Rapid Access Service quotas for storage and cloud resources are managed via this default RAP. The Default RAP allows PIs and sponsored users to make opportunistic use of compute resources with the default (that is, the lowest) priority. On CCDB, it uses the convention <code>def-profname</code>. | ||
*RAC RAP: This RAP is created when the PI receives an award through | *RAC RAP: This RAP is created when the PI receives an award through the RAC application process. The RAC RAPI typically takes the form <code>abc-123-ab</code>, with an associated group name typically of the form of <code>rrg-profname-xx</code> or <code>rpp-profname-xx</code> for HPC allocations, and <code>crg-profname-xx</code> or <code>cpp-profname-xx</code> for Cloud allocations, depending on the competition. | ||
== What is a group name? == <!--T:45--> | == What is a group name? == <!--T:45--> | ||
Line 65: | Line 59: | ||
<!--T:46--> | <!--T:46--> | ||
Typically, group names | Typically, group names follow this convention (where “xx” represents some sequence of digits and letters): | ||
*Default RAP: < | *Default RAP: <code>def-[profname][-xx]</code> | ||
* RRG/HPC resource RAP: < | * RRG/HPC resource RAP: <code>rrg-[profname][-xx]</code> | ||
* RPP/HPC resource RAP: < | * RPP/HPC resource RAP: <code>rpp-[profname][-xx]</code> | ||
* RRG/Cloud resource RAP: < | * RRG/Cloud resource RAP: <code>crg-[profname][-xx]</code> | ||
* RPP/Cloud resource RAP: < | * RPP/Cloud resource RAP: <code>cpp-[profname][-xx]</code> | ||
<!--T:47--> | <!--T:47--> | ||
The group name is used as a POSIX group name with an associated POSIX group ID and is propagated through LDAP in the dn attribute: <code>dn: cn=rpp- | The group name is used as a POSIX group name with an associated POSIX group ID and is propagated through LDAP in the dn attribute: <code>dn: cn=rpp-profname,ou=Group,dc=computecanada,dc=ca</code> | ||
== Who has access to a RAP? == <!--T:48--> | == Who has access to a RAP? == <!--T:48--> | ||
Line 80: | Line 74: | ||
<!--T:49--> | <!--T:49--> | ||
<b>RAC RAP:</b> Membership works differently depending on whether the RAC RAP has HPC or Cloud resources allocated: | <b>RAC RAP:</b> Membership works differently depending on whether the RAC RAP has HPC or Cloud resources allocated: | ||
*HPC resources: At the time a new RAP is created with HPC resources (e.g. CPU, GPU, project storage, nearline storage, etc.), CCDB automatically adds as members of the RAP a) all of a PI's sponsored user roles, <i>and</i> b) all associated Co-PI roles, <i>and</i> c) all sponsored users roles of all of the associated Co-PIs. Any new role that the PI sponsors <i>after</i> a RAP has been created will also be automatically added as member of the RAP. | *HPC resources: At the time a new RAP is created with HPC resources (e.g. CPU, GPU, project storage, nearline storage, etc.), CCDB automatically adds as members of the RAP a) all of a PI's sponsored user roles, <i>and</i> b) all associated Co-PI roles, <i>and</i> c) all sponsored users roles of all of the associated Co-PIs. Any new role that the PI sponsors <i>after</i> a RAP has been created will also be automatically added as a member of the RAP. | ||
*Cloud resources: At the time a new RAP is created with Cloud resources allocated, only the PI is added as a member of that RAP. | *Cloud resources: At the time a new RAP is created with Cloud resources allocated, only the PI is added as a member of that RAP. | ||
== How to manage | == How to manage membership for a RAC RAP == <!--T:50--> | ||
The PI can modify the membership of any of their RAC RAPs at any time. Any | The PI can modify the membership of any of their RAC RAPs at any time. Any user with an active Alliance account can be added as a member of a RAC RAP. The PI may, for example, want to allow access to user roles they are not sponsoring (i.e., a co-PI) or remove one or more of their sponsored user roles from their RAC RAP and limit them to only be able to access their default RAP. | ||
<!--T:51--> | <!--T:51--> | ||
There are three RAP membership permission levels: | There are three RAP membership permission levels: | ||
*Owner: The PI is the sole owner of the RAP and all the allocations associated to that RAP. This cannot be changed. The | *Owner: The PI is the sole owner of the RAP and all the allocations associated to that RAP. This cannot be changed. The owner can add or remove RAP managers and members. | ||
*Manager: An elevated permission (on CCDB only, not on the clusters) delegated by the | *Manager: An elevated permission (on CCDB only, not on the clusters) delegated by the owner or another manager that allows making membership changes. Managers can also use the PI's allocation in the corresponding cluster(s). Important: Members that have been promoted to <i>Manager</i> on a RAC RAP cannot make changes (e.g., change ownership of the files, apply ACLs, manage permissions on Globus, etc.) on the project/nearline file systems on behalf of the PIs. | ||
* Member: Members can use the PI’s allocation in the corresponding | * Member: Members can use the PI’s allocation in the corresponding cluster(s). Members cannot make any modifications to the RAP membership. | ||
<!--T:52--> | <!--T:52--> | ||
RAP membership is represented as a group in LDAP. It defines a group of users that are authorized to submit jobs against the RAPI (which is the | RAP membership is represented as a group in LDAP. It defines a group of users that are authorized to submit jobs against the RAPI (which is the ID of the RAP) and share files within the same Unix group. | ||
<!--T:53--> | <!--T:53--> | ||
For detailed instructions about how to add members to a RAC RAP, please visit the [[Using_a_resource_allocation#Information_on_each_resource|Using a resource allocation page]] | For detailed instructions about how to add members to a RAC RAP, please visit the [[Using_a_resource_allocation#Information_on_each_resource|Using a resource allocation page]]. | ||
= Registering for an account = <!--T:18--> | = Registering for an account = <!--T:18--> | ||
Line 103: | Line 97: | ||
<!--T:20--> | <!--T:20--> | ||
Each person can only have one Alliance account (that is, one CCI). Requests for duplicate CCI's are refused. If you have an existing CCI and have changed position, you should apply for a new role (which will have a new CCRI) instead. To do so, please log in with your existing account and visit the [https://ccdb.alliancecan.ca/me/add_role apply for a new role] form. If you have forgotten your password, you may [https://ccdb.alliancecan.ca/security/forgot reset it]. If you can no longer access the email address you have on file please email [mailto:accounts@tech.alliancecan.ca accounts@tech.alliancecan.ca] and we can update it for you. | |||
== How do I sign up? == <!--T:21--> | == How do I sign up? == <!--T:21--> | ||
<!--T:22--> | <!--T:22--> | ||
Go to the [https://ccdb. | Go to the [https://ccdb.alliancecan.ca/account_application register] link. Note that you will have to accept certain policies and agreements to get an account. You can [https://alliancecan.ca/en/services/advanced-research-computing/account-management/policies read these policies on the Alliance website]. | ||
<!--T:37--> | <!--T:37--> | ||
Once your account has been approved, you will be able to see at any time on CCDB the agreements that you have accepted by going to | Once your account has been approved, you will be able to see at any time on CCDB the agreements that you have accepted by going to [https://ccdb.alliancecan.ca/agreements/user_index My Account --> Agreements]. | ||
== What position do I select when applying for a role? == <!--T:23--> | == What position do I select when applying for a role? == <!--T:23--> | ||
Line 120: | Line 111: | ||
<!--T:24--> | <!--T:24--> | ||
There are two main types of roles: | There are two main types of roles: | ||
* | * <i>sponsor</i> roles, often referred to as Primary Investigators or PIs, and | ||
* | * <i>sponsored</i> roles. | ||
Only faculty members can be sponsors. Administrators who are not faculty but who lead research projects must contact [mailto:accounts@ | Only faculty members can be sponsors. Administrators who are not faculty but who lead research projects must contact [mailto:accounts@tech.alliancecan.ca accounts@tech.alliancecan.ca] so that we can make appropriate accommodations. Faculty roles are only granted to faculty from Canadian post-secondary academic institutions who are eligible for CFI funding. | ||
<!--T:25--> | <!--T:25--> | ||
Line 129: | Line 120: | ||
<!--T:26--> | <!--T:26--> | ||
* students: undergraduate, masters, doctoral; | * students: undergraduate, masters, doctoral; | ||
* researchers affiliated with the same institution as the PI: | * researchers affiliated with the same institution as the PI: postdoctoral fellow, researcher (but only if the person is paid by the PI's institution); | ||
* non-research staff (e.g. administrators, secretaries, etc.—people who do not typically need access to compute resources); | * non-research staff (e.g., administrators, secretaries, etc.—people who do not typically need access to compute resources); | ||
* collaborators affiliated with a different institution than the PI: external collaborator. | * collaborators affiliated with a different institution than the PI: external collaborator. | ||
<!--T:28--> | <!--T:28--> | ||
An external collaborator is anyone working with the group whom the PI is willing to sponsor. | An external collaborator is anyone working with the group whom the PI is willing to sponsor. However, please note that external collaborators must specify an institution different from that of the PI. | ||
<!--T:54--> | |||
The full list of roles is [https://alliancecan.ca/en/services/advanced-research-computing/account-management/user-roles-access-resources-and-services-federation available on our website]. | |||
== What happens after I submit my request? == <!--T:29--> | == What happens after I submit my request? == <!--T:29--> | ||
<!--T:30--> | <!--T:30--> | ||
You will receive an | You will receive an email with a link to confirm the email address you provided. If you are a principal investigator (typically, a faculty member), your application will be approved by a Federation staff; otherwise, it will need to be confirmed by the principal investigator you identified as your sponsor before it is approved by a Federation staff. | ||
= Further help = <!--T:33--> | = Further help = <!--T:33--> | ||
Line 151: | Line 140: | ||
<!--T:35--> | <!--T:35--> | ||
For any questions not covered here, send email to [mailto:accounts@ | For any questions not covered here, send email to [mailto:accounts@tech.alliancecan.ca accounts@tech.alliancecan.ca]. | ||
</translate> | </translate> |
Latest revision as of 16:49, 28 April 2023
CCDB basics[edit]
What is the CCDB?[edit]
The CCDB is the portal to your account with the Alliance where you can find information on the roles you have in the projects you are involved in, the resources that are allocated to you, as well as statistics on your use of these resources.
What can I do on the portal?[edit]
- Register,
- Manage personal information and roles,
- Apply for the Resource Allocation Competition (RAC),
- Manage RAP information and membership.
What is a CCI and why would I want one?[edit]
A CCI is a unique personal and national identifier. When you register at https://ccdb.alliancecan.ca a CCI is created for you.
Who is eligible to get a CCI?[edit]
In order to register with the CCDB, you must
- be a faculty member at a Canadian institution that is registered with the CCDB, or
- be sponsored by a faculty member at a Canadian institution that is registered with the CCDB.
People who can be sponsored include, but are not limited to, graduate students and research staff that report to the sponsoring faculty member.
What is a role?[edit]
A role is an identifier that represents the combination of a person's position (e.g., faculty, graduate student, postdoctoral fellow, etc.), institution, and sponsor. In order to access our computational resources, you must have a valid and up-to-date role. Most people will only have one role at a time, but when you change institution, sponsor, or position you will need to apply for a new role rather than update the old one. We ask you to do this so we can maintain accurate records for usage reporting to our governmental funding agencies.
What is a CCRI?[edit]
A CCRI is the unique identifier for your role (see What is a role?). Since one person may have multiple roles over time, one CCI may be associated with more than one CCRI. Every job that runs on a national cluster is attributed to a CCRI.
Resource Allocation Projects (RAP)[edit]
What is a RAP?[edit]
Access to our national computational resources are made available to PIs through Resource Allocation Projects (RAP). Each RAP is identified by a RAPI and an associated group name.
Researchers are usually working on at least one research project. For reporting purposes, we need to be able to provide statistics on how our facilities are used, but the word project is too ambiguous, therefore we use a name which does not have any implicit meanings. Also, computing resources are not allocated to individuals, they are allocated to groups of researchers. The RAP is the group of researchers which resources are allocated to.
In general, there are two main types to RAPs:
- Default RAP: A default RAP is automatically created when a PI role is activated. Default and Rapid Access Service quotas for storage and cloud resources are managed via this default RAP. The Default RAP allows PIs and sponsored users to make opportunistic use of compute resources with the default (that is, the lowest) priority. On CCDB, it uses the convention
def-profname
. - RAC RAP: This RAP is created when the PI receives an award through the RAC application process. The RAC RAPI typically takes the form
abc-123-ab
, with an associated group name typically of the form ofrrg-profname-xx
orrpp-profname-xx
for HPC allocations, andcrg-profname-xx
orcpp-profname-xx
for Cloud allocations, depending on the competition.
What is a group name?[edit]
Group name is an alias of the Research Allocation Project Identifier (RAPI). Each RAPI has a unique group name (one-to-one mapping), but it is often easier for users to remember the group name.
Typically, group names follow this convention (where “xx” represents some sequence of digits and letters):
- Default RAP:
def-[profname][-xx]
- RRG/HPC resource RAP:
rrg-[profname][-xx]
- RPP/HPC resource RAP:
rpp-[profname][-xx]
- RRG/Cloud resource RAP:
crg-[profname][-xx]
- RPP/Cloud resource RAP:
cpp-[profname][-xx]
The group name is used as a POSIX group name with an associated POSIX group ID and is propagated through LDAP in the dn attribute: dn: cn=rpp-profname,ou=Group,dc=computecanada,dc=ca
Who has access to a RAP?[edit]
Default RAP: All of a PI's activated sponsored user roles are always members of the PI's default RAP. That is, confirming sponsorship of a user confers on them membership in a PI's default RAP. This cannot be modified. However, a PI can at any time deactivate any role they sponsor.
RAC RAP: Membership works differently depending on whether the RAC RAP has HPC or Cloud resources allocated:
- HPC resources: At the time a new RAP is created with HPC resources (e.g. CPU, GPU, project storage, nearline storage, etc.), CCDB automatically adds as members of the RAP a) all of a PI's sponsored user roles, and b) all associated Co-PI roles, and c) all sponsored users roles of all of the associated Co-PIs. Any new role that the PI sponsors after a RAP has been created will also be automatically added as a member of the RAP.
- Cloud resources: At the time a new RAP is created with Cloud resources allocated, only the PI is added as a member of that RAP.
How to manage membership for a RAC RAP[edit]
The PI can modify the membership of any of their RAC RAPs at any time. Any user with an active Alliance account can be added as a member of a RAC RAP. The PI may, for example, want to allow access to user roles they are not sponsoring (i.e., a co-PI) or remove one or more of their sponsored user roles from their RAC RAP and limit them to only be able to access their default RAP.
There are three RAP membership permission levels:
- Owner: The PI is the sole owner of the RAP and all the allocations associated to that RAP. This cannot be changed. The owner can add or remove RAP managers and members.
- Manager: An elevated permission (on CCDB only, not on the clusters) delegated by the owner or another manager that allows making membership changes. Managers can also use the PI's allocation in the corresponding cluster(s). Important: Members that have been promoted to Manager on a RAC RAP cannot make changes (e.g., change ownership of the files, apply ACLs, manage permissions on Globus, etc.) on the project/nearline file systems on behalf of the PIs.
- Member: Members can use the PI’s allocation in the corresponding cluster(s). Members cannot make any modifications to the RAP membership.
RAP membership is represented as a group in LDAP. It defines a group of users that are authorized to submit jobs against the RAPI (which is the ID of the RAP) and share files within the same Unix group.
For detailed instructions about how to add members to a RAC RAP, please visit the Using a resource allocation page.
Registering for an account[edit]
I had an account in the past, but my position or sponsor has changed or I have lost my password. Should I sign up for a new one?[edit]
Each person can only have one Alliance account (that is, one CCI). Requests for duplicate CCI's are refused. If you have an existing CCI and have changed position, you should apply for a new role (which will have a new CCRI) instead. To do so, please log in with your existing account and visit the apply for a new role form. If you have forgotten your password, you may reset it. If you can no longer access the email address you have on file please email accounts@tech.alliancecan.ca and we can update it for you.
How do I sign up?[edit]
Go to the register link. Note that you will have to accept certain policies and agreements to get an account. You can read these policies on the Alliance website.
Once your account has been approved, you will be able to see at any time on CCDB the agreements that you have accepted by going to My Account --> Agreements.
What position do I select when applying for a role?[edit]
There are two main types of roles:
- sponsor roles, often referred to as Primary Investigators or PIs, and
- sponsored roles.
Only faculty members can be sponsors. Administrators who are not faculty but who lead research projects must contact accounts@tech.alliancecan.ca so that we can make appropriate accommodations. Faculty roles are only granted to faculty from Canadian post-secondary academic institutions who are eligible for CFI funding.
Sponsored roles fall into two groups: internal and external. The difference is in whether the applicant is part of the supervisors local group, or a collaborator from a different institution. Available roles are:
- students: undergraduate, masters, doctoral;
- researchers affiliated with the same institution as the PI: postdoctoral fellow, researcher (but only if the person is paid by the PI's institution);
- non-research staff (e.g., administrators, secretaries, etc.—people who do not typically need access to compute resources);
- collaborators affiliated with a different institution than the PI: external collaborator.
An external collaborator is anyone working with the group whom the PI is willing to sponsor. However, please note that external collaborators must specify an institution different from that of the PI.
The full list of roles is available on our website.
What happens after I submit my request?[edit]
You will receive an email with a link to confirm the email address you provided. If you are a principal investigator (typically, a faculty member), your application will be approved by a Federation staff; otherwise, it will need to be confirmed by the principal investigator you identified as your sponsor before it is approved by a Federation staff.
Further help[edit]
How can I get help for something not covered in this FAQ?[edit]
For any questions not covered here, send email to accounts@tech.alliancecan.ca.