REVIEW-82: XCI-691 COmanage Group Management phase 1/beta - Design & Security Review

Groups of XSEDE users and staff can be used to coordinate research teams, manage authorization to resources, communication, and project management. XSEDE's User Requirements and Prioritization (UREP) team prioritized Group Management Use Cases GRP-02 through GRP-16 which led to a technology readiness assessment to identify, evaluate, and then recommend a group management technology solution. The assessment recommended to design and build a group management service centered on using the COmanage Registry hosted service from CILogon. XSEDE senior management approved the selection and service subscription costs.

Phase 1/beta of the group management service implemented using the COmanage Registry focuses on group management for XSEDE WBS staff and includes: managing authorization to the XSEDE Confluence Wiki (Confluence), the XSEDE project and issue tracking JIRA service (JIRA), the XSEDE Amazon Web Services Management Console (AWS), and XSEDE email lists driven using the Majordomo mailing list manager.

This design and security review gives key XSEDE stakeholders an opportunity to review the most important functional, design and security characteristics of XSEDE's CoManage Registry phase 1/beta implementation. Feedback from the review may affect the proposed design. A design that addresses the most important feedback items will be approved for delivery to production.

Reviewers feedback that was addressed:

• Handling duplicate people
• Clarify COmanage responsibilities for WBS Managers, Project Managers, and Delegated XSEDE staff
• Suggest a Nagios or Inca test
• Clarify COmanage logging capabilities
• Suggestion for automatically aggregating all L3 WBS active member into an L2 WBS active group
• Clarify who executes the onboarding enrollment flow
• Clarify how to JIRA and Confluence access will be managed since not all staff should get accounts

• XCI-691 Design Document: COmanage Group Management Phase 1/beta of XSEDE WBS/staff List v1.1

• XCI-691 Design Document: COmanage Group Management Phase 1/beta of XSEDE WBS/staff List

1. Do the Behavior and Detailed Designs satisfy XSEDE's needs for managing WBS groups
2. Does the Interface Design provide an intuitive user interface for managing WBS groups
3. Does the entire design satisfy XSEDE security guidelines and standards
4. Does the entire design mitigate significant risks appropriately
5. Does the entire design satisfy XSEDE operational requirements