diff --git a/services-admin-guide/ssh_gateways.md b/services-admin-guide/ssh_gateways.md index 02bfe0da..e1509e94 100644 --- a/services-admin-guide/ssh_gateways.md +++ b/services-admin-guide/ssh_gateways.md @@ -39,6 +39,19 @@ The list of supported gateways can be found here: https://git.psi.ch/linux-infra/ansible/playbooks/lx_ansible/-/blob/main/inventory.yaml#L3 +## Group Membership / Access Groups + +The memberships and the approver of the different gateway access groups (naming pattern: unx-gw_XX) can be found on this Service Now page: + +https://psi.service-now.com/now/nav/ui/classic/params/target/sys_user_group_list.do%3Fsysparm_userpref_module%3D92f011c81b440690d6a82f4aab4bcb5f%26sysparm_view%3Dlinux_groups%26sysparm_query%3DnameSTARTSWITHunx%255Eactive%253Dtrue%255EEQ%26sysparm_force_row_count%3D500 + +### Grant User Access to Gateway +To grant a user access to a gateway use the same Workflow as described in the [SSH Gateway - User Guide](https://linux.psi.ch/services-user-guide/ssh_gateways.html) + +### Remove / Revoke User Access +Remove a user from a group, please open a normal Incident in service now. (Need to be improved!) + + ## Troubleshooting ### Checklist diff --git a/services-user-guide/ssh_gateways.md b/services-user-guide/ssh_gateways.md index d079d68b..6115c289 100644 --- a/services-user-guide/ssh_gateways.md +++ b/services-user-guide/ssh_gateways.md @@ -24,3 +24,21 @@ Establishing an SSH connection through the gateway to a machine inside the prote ```bash ssh -J -gw ``` + +## Request Gateway Access + +Access to a Gateway can be requested via Service Now with the following workflow: + +Open Service Now and https://psi.service-now.com/psisp and browse to the __Request Gateway Access__ Workflow as follows: + +![](sshgw-01.png) +![](sshgw-02.png) + +Alternatively you can search for "Gateway" in the search field. + +![](sshgw-04.png) + +Afterwards specify the user and the Gateway you request access for: +![](sshgw-03.png) + +Once the request is submitted the responsible person for the Gateway Access List will be informed and requested for approval. Once the Approval is given the user will be automatically added to the necessary AD group. \ No newline at end of file diff --git a/services-user-guide/sshgw-01.png b/services-user-guide/sshgw-01.png new file mode 100644 index 00000000..1025c4cc Binary files /dev/null and b/services-user-guide/sshgw-01.png differ diff --git a/services-user-guide/sshgw-02.png b/services-user-guide/sshgw-02.png new file mode 100644 index 00000000..ca2cc873 Binary files /dev/null and b/services-user-guide/sshgw-02.png differ diff --git a/services-user-guide/sshgw-03.png b/services-user-guide/sshgw-03.png new file mode 100644 index 00000000..a6758004 Binary files /dev/null and b/services-user-guide/sshgw-03.png differ diff --git a/services-user-guide/sshgw-04.png b/services-user-guide/sshgw-04.png new file mode 100644 index 00000000..a3a95c24 Binary files /dev/null and b/services-user-guide/sshgw-04.png differ