cc_staff
158
edits
Frequently Asked Questions about the CCDB: Difference between revisions
Jump to navigation
Jump to search
Frequently Asked Questions about the CCDB (view source)
Revision as of 13:20, 7 March 2019
, 5 years agono edit summary
No edit summary |
No edit summary |
||
| Line 74: | Line 74: | ||
<b>Default RAP: </b> All of a PI's activated sponsored user roles are always members of the PI's default RAP. That is, confirming sponsorship of a user, confers on them membership in a PI's default RAP. This cannot be modified. However, a PI can at any time deactivate any role they sponsor. | <b>Default RAP: </b> All of a PI's activated sponsored user roles are always members of the PI's default RAP. That is, confirming sponsorship of a user, confers on them membership in a PI's default RAP. This cannot be modified. However, a PI can at any time deactivate any role they sponsor. | ||
<b>RAC RAP:</b> Membership works differently depending for e RAC RAP has HPC or Cloud resources allocated | <b>RAC RAP:</b> Membership works differently depending for e RAC RAP has HPC or Cloud resources allocated: | ||
* | *HPC resources: When a new RAC RAP with HPC resources (e.g. CPU, GPU, project storage, nearline storage, etc.) is created for a PI, all of their sponsored user roles are automatically set up as members of this RAP.
| ||
* | *Cloud resources: When a new RAC RAP with Cloud resources allocated is created for a PI, only the PI is added as a member of that RAP.
| ||
The PI can modify the membership of any of their RAC RAPs. | |||
= How to manage RAP memberships = | |||
The PI can modify the membership of any of their RAC RAPs at any time. Any Compute Canada user with an active account can be added as a members of a RAC RAP. The PI may, for example, want to allow access to user roles they are not sponsoring (i.e. a co-PI) or remove one or more of their sponsored user roles from their RAC RAP and limit them to only be able to access their default RAP. | |||
There are three RAP membership permission levels: | |||
*Owner: The PI is the sole owner of the RAP and all the allocations associated to that RAP. This cannot be changed. The Owner can add or remove RAP managers and members. | |||
*Manager: Members of a RAP can be promoted to Managers by the Owner of the RAP or by another Manager. Managers can also be demoted to Members by the Owner of the RAP or by another Manager. By default, Managers also have the permissions of RAP Members. | |||
* Member: Members can use the PI’s allocation in the corresponding Compute Canada system(s). Members cannot make any modifications to the RAP memberships. | |||
RAP membership is represented as a group in LDAP. It defines a group of users that are authorized to submit jobs against the RAPI (which is the Id of the RAP) and share files within the same Unix group. | |||
= Registering for an account = <!--T:18--> | = Registering for an account = <!--T:18--> | ||