October 31, 2024
Obtaining a PAS group
Prerequisite Training
Take the "Keygiving - PAS" training if you have not done so already. Please follow the following instructions, using course code IST064 (Keygiving - PAS):
Keygiving - PAS training is required to obtain access to the Personnel Authorization System (PAS) system and become a Keygiver. This training is available as a self-paced course in HealthStream. Here’s how it works:
|
Search |
Sign in to HealthStream. Go to:
Search for "MGBE PAS & Keygiving Training" in the course catalog. |
|
Complete |
Once you find the course, click Enroll. Complete the course and required knowledge check whenever and wherever it’s most convenient for you! |
|
Receive |
PAS access is granted weekly on Thursdays to those who complete the course before Wednesday at 11:59 pm. On Thursday afternoon, students will receive an email confirming their PAS access. You'll also receive instructions for obtaining Keygiver rights to specific systems and SFAs. If you have an open ticket for a new SFA, it will be updated to confirm you’ve completed training. As long as both Keygivers listed have PAS access, the SFA will be created. Upon setup, you’ll automatically be made a Keygiver. |
Escalation (where to get help)
- If further assistance is needed, please contact the Service Desk (https://rc.partners.org/ticket)
- Configuration Item: PAS (For ITIL Users)
- or email @email
Requesting a PAS group
-
- Replace ONLY the BOLD parts
- In the GALEN GROUP NAME entry below, replace INST with your institution code (e.g. MGH or BWH) and PROJECT with a short name for your lab or project.
- Do NOT replace the ending -ERIS
- Do NOT request OKTA/SSO integration, since otherwise the resulting group may not be detected on some cluster nodes.
Description: PAS group to manage ERIS Briefcase
REQUESTING SITE: All other sites
ASSIGNMENT GROUP: HPC SciC Linux Clusters (or hpc - ERIS)
GALEN NAME: INST-PROJECT-ERIS
REQUESTING DEPARTMENT: Department Name
PRIMARY KEYGIVER: Full Name - PartnersID
SECONDARY KEYGIVER: Full Name - PartnersID
DESCRIPTION: Group to administer access to shared space for INST-PROJECT on the SciC Linux Clusters.
Once your PAS group has been provisioned, please see the rest of this page for user management.
Making a request for Storage
After your PAS group is created, visit https://rcservices.partners.org and sign up for "SciC Linux Clusters BriefCASE" storage, providing the PAS group name in the request form.
Giving a user access via PAS Group
Permission for Partners Authentication System (PAS) groups is shared by designated key givers through the following steps.
- Go to workspace.partners.org
- Look for the Personal Authorization System app
- On the PAS app, Search for the recipient's username.
- Select Account, then Edit SFA Authorizations.
- Find the correct group and click the access being requested, followed by the add button
- Click Apply and enter credentials to complete the process
A more detailed guide to using the PAS app can be found here
Gaining Access to a PAS Group
- To become a keygiver for a PAS group, you can follow the steps listed here.
- If you only need read or write access to a PAS group, you can ask a keygiver for these permissions. If you cannot find who the current keygivers for a PAS group are, you can ask via email to @email
Local Group Access
Access to local groups can be requested when creating a SciC Linux Account and it will be automatically forwarded to the group admin. Since 2019 all-new groups have used the PAS system to control access instead of local groups.
If you already have an account but not group access send an email with the request to @email and CC your PI or Admin of the group for confirmation.
FAQ/Help
If you are unable to access group nodes or group file systems within the Scientific Computing (SciC) Linux Clusters, the problem could be that you do not have the correct group permissions. You can check what groups you are a part of by using the command:
$ groups
You can identify a group as a local group if it is all lowercase (ex. eristwo, scicomp, fuse). PAS groups will be all uppercase with dashes separating each part (ex. BWH-RESEARCH).
If you need to request access to a group please find first the type of group that you need access local/PAS and do the following: