Team and Projects principle

Team and Projects

In HPC Gateway, the roles and rights of the users are defined by grouping the users in teams and projects.

Team

The Team is a group of users that defines what the user can do or not in the plateforme.

Several components of the plateforme are associated to the teams

  • The applications
  • The addons
  • The scripts used by the addons

Only the members of the associated teams will be able to use these components.

In the upper illustration, the user will be able to use the applications x, y and z because he is a member of the teams A and B.

Project

The Project is a group of users that are typically working on the same subject.

The tasks and task profiles are associated with the projects giving to project members priviledged access:

  • a project member can see the tasks of this project
  • a project member can use a task profile of this project

As illustrated on the upper figure, the projects are also used in the accounting mechanism. One or several accounting codes may be associated with a project. These codes will be proposed to the user when submitting a task.

Roles

The users can have specific roles in the teams and projects.

  • the member has only basic rights
  • the admin has administrative rights on the given project/team
  • the editor can create new applications

The complete description of the user rights is accessible on Roles and Rights in HPC Gateway

In addition there is a super admin role independent from the teams and projects that give unlimited rights to the user. By default, the only super admin is hpcgadmin.



User Management

To modify the teams and projects, an administrator must use the User Management tool.

You can open it from the start menu.

User Management menu

The User Management tool contains 3 sections :

  • Users
  • Teams
  • Projects



Listing the users

Listing the users

The users panel is a simple list of all the users that are declared in HPC Gateway. One can see all the user details by clicking on an entry.

The Users are automatically added to the list of users on first login. The administrator does not need to do an operation to add them.

All the users that can access the HPC headnode with SSH are allowed to login.

On first connection, the users are simply added to the Guest team (configurable). After this first connection, the administrator can add them to other teams to open more rights.



Editing the teams

Editing the teams

The Teams panel is composed of several elements :

  • The list of teams
  • The information panel of the selected team
  • The member list of the selected team

The team admin or a super admin can edit a team By right clicking in the list, the administrator can do the following operations

  • Manage the team members
  • Create a new team (only super admin)
  • Edit the team details
  • Enable/Disable a team

The association of users with team is done by drag and dropping as illustrated in the figure upon.

The administrators can also change the members directly from the member list.

Be careful, a team can be disabled or renamed but it cannot be removed (avoids incoherence in the database).



Editing the projects

Editing the projects

The Projects panel is composed of several elements :

  • The list of projects
  • The information panel of the selected project
  • The member list of the selected project
  • The list of accounting codes of the selected project

As for teams, the project admin or a super admin can edit a team By right clicking in the list, the administrator can do the following operations

  • Manage the project members
  • Create a new project (only super admin)
  • Create a new accounting code
  • Edit the project details
  • Enable/Disable a project

As for teams, the projects cannot be deleted by they can be disabled. A user cannot submit a task on a disabled project.

The accounting codes associated with a project will be proposed to a user when submitting a task on this project.



If followed as part of the training programme return to topics page.