Frequently Asked Questions about the CCDB: Difference between revisions

From Alliance Doc
Jump to navigation Jump to search
No edit summary
No edit summary
 
(112 intermediate revisions by 7 users not shown)
Line 5: Line 5:
= CCDB basics = <!--T:1-->
= CCDB basics = <!--T:1-->


== What does CCDB stand for? == <!--T:2-->
== What is the CCDB? == <!--T:4-->
 
<!--T:3-->
Compute Canada DataBase. It is a database of researchers who wish to use the Advanced Research Computing (ARC) facilities provided by Compute Canada.
 
== What is the purpose of the CCDB? == <!--T:4-->


<!--T:5-->
<!--T:5-->
There are six consortia providing ARC facilities in Canada. All are funded by the [https://www.innovation.ca/ Canada Foundation for Innovation] (CFI). CFI expects the consortia to work together to provide researchers access to the computing power they need. To do this, and to make it easier for users to gain access to computing facilities across Canada, we have set up the CCDB. The [https://ccdb.computecanada.ca CCDB web site] provides one access point for all the Compute Canada Federation facilities.
The [https://ccdb.alliancecan.ca CCDB is the portal to your account with the Alliance] where you can find information on the roles you have in the projects you are involved in, the resources that are allocated to you, as well as statistics on your use of these resources.


== What can I do on the portal? == <!--T:6-->
== What can I do on the portal? == <!--T:6-->


<!--T:7-->
<!--T:7-->
* register
* Register,
* manage personal information and roles
* Manage personal information and roles,
* link to consortium sites to apply for accounts
* Apply for the Resource Allocation Competition (RAC),
* apply for NRAC allocation
* Manage RAP information and membership.
* manage RAP information and membership


== What is a CCI and why would I want one? == <!--T:8-->
== What is a CCI and why would I want one? == <!--T:8-->


<!--T:9-->
<!--T:9-->
A CCI (Compute Canada Identifier) is a unique personal and national identifier. This is the identity you are required to bring to any of the regional HPC consortia when you apply for a local account. Your CCI is different from the local usernames given to you by the regional consortia. When you register at https://ccdb.computecanada.ca a CCI is created for you.  
A CCI is a unique personal and national identifier. When you register at https://ccdb.alliancecan.ca a CCI is created for you.


== Who is eligible to get a CCI? == <!--T:10-->
== Who is eligible to get a CCI? == <!--T:10-->


<!--T:11-->
<!--T:11-->
In order to register with the CCDB you must
In order to register with the CCDB, you must
* be a faculty member at a Canadian university that is registered with the CCDB, or
* be a faculty member at a Canadian institution that is registered with the CCDB, or
* be sponsored by a faculty member at a Canadian university that is registered with the CCDB.  
* be sponsored by a faculty member at a Canadian institution that is registered with the CCDB.  
People who can be sponsored include graduate students and research staff that report to the sponsoring faculty member.  
People who can be sponsored include, but are not limited to, graduate students and research staff that report to the sponsoring faculty member.


== What is a role? == <!--T:12-->
== What is a role? == <!--T:12-->


<!--T:13-->
<!--T:13-->
A role is an identifier that represents the combination of a person's position (eg. faculty, graduate student, postdoctoral fellow, etc.), institution, and sponsor. In order to access Compute Canada resources one must have a valid and up-to-date role. A Compute Canada Role Identifier (CCRI) is associated with each role and uniquely identifies it. Most people will only have one role at a time, but when you change institution, sponsor, or position you will need to apply for a new role rather than update the old one. We ask you to do this so we can maintain accurate records for usage reporting to our governmental funding agencies.  
A role is an identifier that represents the combination of a person's position (e.g., faculty, graduate student, postdoctoral fellow, etc.), institution, and sponsor. In order to access our computational resources, you must have a valid and up-to-date role. Most people will only have one role at a time, but when you change institution, sponsor, or position you will need to apply for a new role rather than update the old one. We ask you to do this so we can maintain accurate records for usage reporting to our governmental funding agencies.


== What is a CCRI? == <!--T:14-->
== What is a CCRI? == <!--T:14-->


<!--T:15-->
<!--T:15-->
Your CCRI is the unique identifier for your role (see "What is a Role?"). Since one person may have multiple roles over time, one CCI may be associated with more than one CCRI. Every job that runs on a Compute Canada HPC system is attributed to a CCRI.  
A CCRI is the unique identifier for your role (see <i>What is a role?</i>). Since one person may have multiple roles over time, one CCI may be associated with more than one CCRI. Every job that runs on a national cluster is attributed to a CCRI.


== What is a RAP? == <!--T:16-->
= Resource Allocation Projects (RAP) = <!--T:16-->
== What is a RAP? ==


<!--T:17-->
<!--T:17-->
RAP is short for Research Allocation Project. Researchers are usually working on at least one research project. For reporting purposes, we need to be able to provide statistics on how our facilities are used, but the word “project” is too ambiguous, therefore we use a name which does not have any implicit meanings. Also, computing resources are not allocated to individuals, they are allocated to groups of researchers. The RAP is the group of researchers which resources are allocated to. Most users will just have one RAP which gets a base allocation. Some researchers will have additional resource allocations, allocated to an additional RAP.  
Access to our national computational resources are made available to PIs through Resource Allocation Projects (RAP). Each RAP is identified by a RAPI and an associated group name.
 
<!--T:44-->
Researchers are usually working on at least one research project. For reporting purposes, we need to be able to provide statistics on how our facilities are used, but the word <i>project</i> is too ambiguous, therefore we use a name which does not have any implicit meanings. Also, computing resources are not allocated to individuals, they are allocated to groups of researchers. The RAP is the group of researchers which resources are allocated to.
 
<!--T:36-->
In general, there are two main types to RAPs:
*Default RAP: A default RAP is automatically created when a PI role is activated. Default and Rapid Access Service quotas for storage and cloud resources are managed via this default RAP. The Default RAP allows PIs and sponsored users to make opportunistic use of compute resources with the default (that is, the lowest) priority. On CCDB, it uses the convention <code>def-profname</code>.
*RAC RAP: This RAP is created when the PI receives an award through the RAC application process. The RAC RAPI typically takes the form <code>abc-123-ab</code>, with an associated group name typically of the form of <code>rrg-profname-xx</code> or <code>rpp-profname-xx</code> for HPC allocations, and <code>crg-profname-xx</code> or <code>cpp-profname-xx</code> for Cloud allocations, depending on the competition.
 
== What is a group name? == <!--T:45-->
Group name is an alias of the Research Allocation Project Identifier (RAPI). Each RAPI has a unique group name (one-to-one mapping), but it is often easier for users to remember the group name.
 
<!--T:46-->
Typically, group names follow this convention (where “xx” represents some sequence of digits and letters):
*Default RAP: <code>def-[profname][-xx]</code>
* RRG/HPC resource RAP: <code>rrg-[profname][-xx]</code>
* RPP/HPC resource RAP: <code>rpp-[profname][-xx]</code>
* RRG/Cloud resource RAP: <code>crg-[profname][-xx]</code>
* RPP/Cloud resource RAP: <code>cpp-[profname][-xx]</code>
 
<!--T:47-->
The group name is used as a POSIX group name with an associated POSIX group ID and is propagated through LDAP in the dn attribute: <code>dn: cn=rpp-profname,ou=Group,dc=computecanada,dc=ca</code>
 
== Who has access to a RAP? == <!--T:48-->
<b>Default RAP: </b> All of a PI's activated sponsored user roles are always members of the PI's default RAP. That is, confirming sponsorship of a user confers on them membership in a PI's default RAP. This cannot be modified. However, a PI can at any time deactivate any role they sponsor.
 
<!--T:49-->
<b>RAC RAP:</b> Membership works differently depending on whether the RAC RAP has HPC or Cloud resources allocated:
*HPC resources: At the time a new RAP is created with HPC resources (e.g. CPU, GPU, project storage, nearline storage, etc.), CCDB automatically adds as members of the RAP a) all of a PI's sponsored user roles, <i>and</i> b) all associated Co-PI roles, <i>and</i> c) all sponsored users roles of all of the associated Co-PIs. Any new role that the PI sponsors <i>after</i> a RAP has been created will also be automatically added as a member of the RAP.
*Cloud resources: At the time a new RAP is created with Cloud resources allocated, only the PI is added as a member of that RAP.
 
== How to manage membership for a RAC RAP == <!--T:50-->
The PI can modify the membership of any of their RAC RAPs at any time. Any user with an active Alliance account can be added as a member of a RAC RAP. The PI may, for example, want to allow access to user roles they are not sponsoring (i.e., a co-PI) or remove one or more of their sponsored user roles from their RAC RAP and limit them to only be able to access their default RAP.
 
<!--T:51-->
There are three RAP membership permission levels:
*Owner: The PI is the sole owner of the RAP and all the allocations associated to that RAP. This cannot be changed. The owner can add or remove RAP managers and members.
*Manager: An elevated permission (on CCDB only, not on the clusters) delegated by the owner or another manager that allows making membership changes. Managers can also use the PI's allocation in the corresponding cluster(s). Important: Members that have been promoted to <i>Manager</i> on a RAC RAP cannot make changes (e.g., change ownership of the files, apply ACLs, manage permissions on Globus, etc.) on the project/nearline file systems on behalf of the PIs.
* Member: Members can use the PI’s allocation in the corresponding cluster(s). Members cannot make any modifications to the RAP membership.
 
<!--T:52-->
RAP membership is represented as a group in LDAP. It defines a group of users that are authorized to submit jobs against the RAPI (which is the ID of the RAP) and share files within the same Unix group.
 
<!--T:53-->
For detailed instructions about how to add members to a RAC RAP, please visit the [[Using_a_resource_allocation#Information_on_each_resource|Using a resource allocation page]].


= Registering for an account = <!--T:18-->
= Registering for an account = <!--T:18-->


== I had an account in the past, but my position or sponsor has changed or I have lost my password. Should I sign up for a new one? == <!--T:19-->
== <span id="duplicate_accounts" /> I had an account in the past, but my position or sponsor has changed or I have lost my password. Should I sign up for a new one? == <!--T:19-->


<!--T:20-->
<!--T:20-->
It is Compute Canada policy that each person only have one account (CCI). Requests for duplicate CCI's are refused. If you have an existing CCI and have changed position you should apply for a new role (CCRI) instead. To do so, please log in with your existing account and visit the [https://ccdb.computecanada.ca/me/add_role apply for a new role] form. If you have forgotten your password, you may [https://ccdb.computecanada.ca/security/forgot reset it]. If you can no longer access the email address you have on file please email [mailto:accounts@computecanada.ca accounts@computecanada.ca] and we can update it for you.  
Each person can only have one Alliance account (that is, one CCI). Requests for duplicate CCI's are refused. If you have an existing CCI and have changed position, you should apply for a new role (which will have a new CCRI) instead. To do so, please log in with your existing account and visit the [https://ccdb.alliancecan.ca/me/add_role apply for a new role] form. If you have forgotten your password, you may [https://ccdb.alliancecan.ca/security/forgot reset it]. If you can no longer access the email address you have on file please email [mailto:accounts@tech.alliancecan.ca accounts@tech.alliancecan.ca] and we can update it for you.


== How do I sign up? == <!--T:21-->
== How do I sign up? == <!--T:21-->


<!--T:22-->
<!--T:22-->
Go to the [https://ccdb.computecanada.ca/account_application register] link. Note that you will have to accept the [https://ccdb.computecanada.ca/security/aup Compute Canada AUP] (Acceptable Use Policy) to obtain your account.  
Go to the [https://ccdb.alliancecan.ca/account_application register] link. Note that you will have to accept certain policies and agreements to get an account. You can [https://alliancecan.ca/en/services/advanced-research-computing/account-management/policies read these policies on the Alliance website].
 
<!--T:37-->
Once your account has been approved, you will be able to see at any time on CCDB the agreements that you have accepted by going to [https://ccdb.alliancecan.ca/agreements/user_index My Account&nbsp;-->&nbsp;Agreements].


== What position do I select when applying for a role? == <!--T:23-->
== What position do I select when applying for a role? == <!--T:23-->


<!--T:24-->
<!--T:24-->
There are two types of role:
There are two main types of roles:
* ''sponsor'' roles, often referred to as Primary Investigators or PIs, and
* <i>sponsor</i> roles, often referred to as Primary Investigators or PIs, and
* ''sponsored'' roles.  
* <i>sponsored</i> roles.  
Only faculty members can be sponsors. Administrators who are not faculty but who lead research projects must contact [mailto:accounts@computecanada.ca accounts@computecanada.ca] so that we can make appropriate accommodations. Faculty roles are only granted to faculty from Canadian post-secondary academic institutions who are eligible for CFI funding.
Only faculty members can be sponsors. Administrators who are not faculty but who lead research projects must contact [mailto:accounts@tech.alliancecan.ca accounts@tech.alliancecan.ca] so that we can make appropriate accommodations. Faculty roles are only granted to faculty from Canadian post-secondary academic institutions who are eligible for CFI funding.


<!--T:25-->
<!--T:25-->
Sponsored roles fall into two groups, internal and external. The difference is in whether the applicant is part of the supervisors local group, or a collaborator from a different institution.
Sponsored roles fall into two groups: internal and external. The difference is in whether the applicant is part of the supervisors local group, or a collaborator from a different institution. Available roles are:


<!--T:26-->
<!--T:26-->
All students in the group should select the appropriate student position (undergraduate, masters, doctoral).
* students: undergraduate, masters, doctoral;
* researchers affiliated with the same institution as the PI: postdoctoral fellow, researcher (but only if the person is paid by the PI's institution);
* non-research staff (e.g., administrators, secretaries, etc.—people who do not typically need access to compute resources);
* collaborators affiliated with a different institution than the PI: external collaborator.


<!--T:27-->
<!--T:28-->
Non-students should select the appropriate position from postdoctoral fellow, researcher (but only if the person is actually paid by the PI's institution to work as part of the group—all other associates should apply as "External Collaborator") or non-research staff (e.g. administrators, secretaries, etc.—people who do not typically need access to compute resources).
An external collaborator is anyone working with the group whom the PI is willing to sponsor. However, please note that external collaborators must specify an institution different from that of the PI.


<!--T:28-->
<!--T:54-->
All collaborators who are not formally part of the PI's group should apply as external collaborators. An external collaborators is anyone working with the group who the PI is willing to sponsor. Note however that external collaborators must specify an institution different from that of the PI. If they are eligible for another role corresponding to a different position then they should select that position instead.
The full list of roles is [https://alliancecan.ca/en/services/advanced-research-computing/account-management/user-roles-access-resources-and-services-federation available on our website].


== What happens after I submit my request? == <!--T:29-->
== What happens after I submit my request? == <!--T:29-->


<!--T:30-->
<!--T:30-->
You will receive an e-mail with a link to confirm the e-mail address you provided. If you are a principal investigator (typically, a faculty member), your application will be approved by consortium staff. Otherwise your application will need to be confirmed by the principal investigator you identified as your sponsor before it is approved by consortium staff.
You will receive an email with a link to confirm the email address you provided. If you are a principal investigator (typically, a faculty member), your application will be approved by a Federation staff; otherwise, it will need to be confirmed by the principal investigator you identified as your sponsor before it is approved by a Federation staff.
 
== How do I get an account at a consortium? == <!--T:31-->
 
<!--T:32-->
Click on [https://ccdb.computecanada.ca/me/facilities Facilities] and it will give you a list of the consortia with links to click on to get an account at that consortium.  


= Further Help = <!--T:33-->
= Further help = <!--T:33-->


== How can I get help for something not covered in this FAQ? == <!--T:34-->
== How can I get help for something not covered in this FAQ? == <!--T:34-->


<!--T:35-->
<!--T:35-->
For any questions not covered here, send email to [mailto:accounts@computecanada.ca accounts@computecanada.ca].
For any questions not covered here, send email to [mailto:accounts@tech.alliancecan.ca accounts@tech.alliancecan.ca].


</translate>
</translate>

Latest revision as of 16:49, 28 April 2023

Other languages:


CCDB basics[edit]

What is the CCDB?[edit]

The CCDB is the portal to your account with the Alliance where you can find information on the roles you have in the projects you are involved in, the resources that are allocated to you, as well as statistics on your use of these resources.

What can I do on the portal?[edit]

  • Register,
  • Manage personal information and roles,
  • Apply for the Resource Allocation Competition (RAC),
  • Manage RAP information and membership.

What is a CCI and why would I want one?[edit]

A CCI is a unique personal and national identifier. When you register at https://ccdb.alliancecan.ca a CCI is created for you.

Who is eligible to get a CCI?[edit]

In order to register with the CCDB, you must

  • be a faculty member at a Canadian institution that is registered with the CCDB, or
  • be sponsored by a faculty member at a Canadian institution that is registered with the CCDB.

People who can be sponsored include, but are not limited to, graduate students and research staff that report to the sponsoring faculty member.

What is a role?[edit]

A role is an identifier that represents the combination of a person's position (e.g., faculty, graduate student, postdoctoral fellow, etc.), institution, and sponsor. In order to access our computational resources, you must have a valid and up-to-date role. Most people will only have one role at a time, but when you change institution, sponsor, or position you will need to apply for a new role rather than update the old one. We ask you to do this so we can maintain accurate records for usage reporting to our governmental funding agencies.

What is a CCRI?[edit]

A CCRI is the unique identifier for your role (see What is a role?). Since one person may have multiple roles over time, one CCI may be associated with more than one CCRI. Every job that runs on a national cluster is attributed to a CCRI.

Resource Allocation Projects (RAP)[edit]

What is a RAP?[edit]

Access to our national computational resources are made available to PIs through Resource Allocation Projects (RAP). Each RAP is identified by a RAPI and an associated group name.

Researchers are usually working on at least one research project. For reporting purposes, we need to be able to provide statistics on how our facilities are used, but the word project is too ambiguous, therefore we use a name which does not have any implicit meanings. Also, computing resources are not allocated to individuals, they are allocated to groups of researchers. The RAP is the group of researchers which resources are allocated to.

In general, there are two main types to RAPs:

  • Default RAP: A default RAP is automatically created when a PI role is activated. Default and Rapid Access Service quotas for storage and cloud resources are managed via this default RAP. The Default RAP allows PIs and sponsored users to make opportunistic use of compute resources with the default (that is, the lowest) priority. On CCDB, it uses the convention def-profname.
  • RAC RAP: This RAP is created when the PI receives an award through the RAC application process. The RAC RAPI typically takes the form abc-123-ab, with an associated group name typically of the form of rrg-profname-xx or rpp-profname-xx for HPC allocations, and crg-profname-xx or cpp-profname-xx for Cloud allocations, depending on the competition.

What is a group name?[edit]

Group name is an alias of the Research Allocation Project Identifier (RAPI). Each RAPI has a unique group name (one-to-one mapping), but it is often easier for users to remember the group name.

Typically, group names follow this convention (where “xx” represents some sequence of digits and letters):

  • Default RAP: def-[profname][-xx]
  • RRG/HPC resource RAP: rrg-[profname][-xx]
  • RPP/HPC resource RAP: rpp-[profname][-xx]
  • RRG/Cloud resource RAP: crg-[profname][-xx]
  • RPP/Cloud resource RAP: cpp-[profname][-xx]

The group name is used as a POSIX group name with an associated POSIX group ID and is propagated through LDAP in the dn attribute: dn: cn=rpp-profname,ou=Group,dc=computecanada,dc=ca

Who has access to a RAP?[edit]

Default RAP: All of a PI's activated sponsored user roles are always members of the PI's default RAP. That is, confirming sponsorship of a user confers on them membership in a PI's default RAP. This cannot be modified. However, a PI can at any time deactivate any role they sponsor.

RAC RAP: Membership works differently depending on whether the RAC RAP has HPC or Cloud resources allocated:

  • HPC resources: At the time a new RAP is created with HPC resources (e.g. CPU, GPU, project storage, nearline storage, etc.), CCDB automatically adds as members of the RAP a) all of a PI's sponsored user roles, and b) all associated Co-PI roles, and c) all sponsored users roles of all of the associated Co-PIs. Any new role that the PI sponsors after a RAP has been created will also be automatically added as a member of the RAP.
  • Cloud resources: At the time a new RAP is created with Cloud resources allocated, only the PI is added as a member of that RAP.

How to manage membership for a RAC RAP[edit]

The PI can modify the membership of any of their RAC RAPs at any time. Any user with an active Alliance account can be added as a member of a RAC RAP. The PI may, for example, want to allow access to user roles they are not sponsoring (i.e., a co-PI) or remove one or more of their sponsored user roles from their RAC RAP and limit them to only be able to access their default RAP.

There are three RAP membership permission levels:

  • Owner: The PI is the sole owner of the RAP and all the allocations associated to that RAP. This cannot be changed. The owner can add or remove RAP managers and members.
  • Manager: An elevated permission (on CCDB only, not on the clusters) delegated by the owner or another manager that allows making membership changes. Managers can also use the PI's allocation in the corresponding cluster(s). Important: Members that have been promoted to Manager on a RAC RAP cannot make changes (e.g., change ownership of the files, apply ACLs, manage permissions on Globus, etc.) on the project/nearline file systems on behalf of the PIs.
  • Member: Members can use the PI’s allocation in the corresponding cluster(s). Members cannot make any modifications to the RAP membership.

RAP membership is represented as a group in LDAP. It defines a group of users that are authorized to submit jobs against the RAPI (which is the ID of the RAP) and share files within the same Unix group.

For detailed instructions about how to add members to a RAC RAP, please visit the Using a resource allocation page.

Registering for an account[edit]

I had an account in the past, but my position or sponsor has changed or I have lost my password. Should I sign up for a new one?[edit]

Each person can only have one Alliance account (that is, one CCI). Requests for duplicate CCI's are refused. If you have an existing CCI and have changed position, you should apply for a new role (which will have a new CCRI) instead. To do so, please log in with your existing account and visit the apply for a new role form. If you have forgotten your password, you may reset it. If you can no longer access the email address you have on file please email accounts@tech.alliancecan.ca and we can update it for you.

How do I sign up?[edit]

Go to the register link. Note that you will have to accept certain policies and agreements to get an account. You can read these policies on the Alliance website.

Once your account has been approved, you will be able to see at any time on CCDB the agreements that you have accepted by going to My Account --> Agreements.

What position do I select when applying for a role?[edit]

There are two main types of roles:

  • sponsor roles, often referred to as Primary Investigators or PIs, and
  • sponsored roles.

Only faculty members can be sponsors. Administrators who are not faculty but who lead research projects must contact accounts@tech.alliancecan.ca so that we can make appropriate accommodations. Faculty roles are only granted to faculty from Canadian post-secondary academic institutions who are eligible for CFI funding.

Sponsored roles fall into two groups: internal and external. The difference is in whether the applicant is part of the supervisors local group, or a collaborator from a different institution. Available roles are:

  • students: undergraduate, masters, doctoral;
  • researchers affiliated with the same institution as the PI: postdoctoral fellow, researcher (but only if the person is paid by the PI's institution);
  • non-research staff (e.g., administrators, secretaries, etc.—people who do not typically need access to compute resources);
  • collaborators affiliated with a different institution than the PI: external collaborator.

An external collaborator is anyone working with the group whom the PI is willing to sponsor. However, please note that external collaborators must specify an institution different from that of the PI.

The full list of roles is available on our website.

What happens after I submit my request?[edit]

You will receive an email with a link to confirm the email address you provided. If you are a principal investigator (typically, a faculty member), your application will be approved by a Federation staff; otherwise, it will need to be confirmed by the principal investigator you identified as your sponsor before it is approved by a Federation staff.

Further help[edit]

How can I get help for something not covered in this FAQ?[edit]

For any questions not covered here, send email to accounts@tech.alliancecan.ca.