Departing admin SOP

From time to time admins depart the project, this SOP checks any access they may no longer need.

Contact Information

Owner

Fedora Infrastructure Team

Contact

#fedora-admin, sysadmin-main

Location

Everywhere

Servers

all

Description

From time to time people with admin access to various parts of the project may leave the project or no longer wish to contribute. This SOP attempts to list the process for removing access they no longer need.

  1. First, make sure that this SOP is needed. Verify the person has left the project and what areas they might wish to still contibute to.

  2. Gather info: fas username, email address, knowledge of passwords.

  3. Check the following areas with the following commands:

    email address in ansible
    • Check: git grep email@address

    • Remove: git commit

    koji admin
    • Check: koji list-permissions --user=username

    • Remove: koji revoke-permission permissionname username

    wiki pages
    packages
    fas account
    • Check: check username in fas

    • Remove: set user inactive

      If there are scripts or files needed, save homedir of user.

    passwords
    • Check: if departing admin knew sensitive passwords.

    • Remove: Change passwords.

      root pw, management interfaces, etc