add information on workflow to request ssh gateway access

2024-01-30 13:14:34 +01:00
parent 657446c7b3
commit 6b48035076
6 changed files with 31 additions and 0 deletions
@@ -39,6 +39,19 @@ The list of supported gateways can be found here:
 https://git.psi.ch/linux-infra/ansible/playbooks/lx_ansible/-/blob/main/inventory.yaml#L3


+## Group Membership / Access Groups
+
+The memberships and the approver of the different gateway access groups (naming pattern: unx-gw_XX) can be found on this Service Now page: 
+
+https://psi.service-now.com/now/nav/ui/classic/params/target/sys_user_group_list.do%3Fsysparm_userpref_module%3D92f011c81b440690d6a82f4aab4bcb5f%26sysparm_view%3Dlinux_groups%26sysparm_query%3DnameSTARTSWITHunx%255Eactive%253Dtrue%255EEQ%26sysparm_force_row_count%3D500
+
+### Grant User Access to Gateway
+To grant a user access to a gateway use the same Workflow as described in the [SSH Gateway - User Guide](https://linux.psi.ch/services-user-guide/ssh_gateways.html)
+
+### Remove / Revoke User Access
+Remove a user from a group, please open a normal Incident in service now. (Need to be improved!)
+
+
 ## Troubleshooting

 ### Checklist
@@ -24,3 +24,21 @@ Establishing an SSH connection through the gateway to a machine inside the prote
 ```bash
 ssh -J <gateway-name>-gw <name-of-the-machine-you-want-to-connect>
 ```
+
+## Request Gateway Access
+
+Access to a Gateway can be requested via Service Now with the following workflow:
+
+Open Service Now and  https://psi.service-now.com/psisp and browse to the __Request Gateway Access__ Workflow as follows:
+
+![](sshgw-01.png)
+![](sshgw-02.png)
+
+Alternatively you can search for "Gateway" in the search field.
+
+![](sshgw-04.png)
+
+Afterwards specify the user and the Gateway you request access for:
+![](sshgw-03.png)
+
+Once the request is submitted the responsible person for the Gateway Access List will be informed and requested for approval. Once the Approval is given the user will be automatically added to the necessary AD group.