Ticket 13247 - Adminlevel = Operator no longer can view jobs.
Summary: Adminlevel = Operator no longer can view jobs.
Status: RESOLVED INFOGIVEN
Alias: None
Product: Slurm
Classification: Unclassified
Component: slurmdbd (show other tickets)
Version: 21.08.5
Hardware: Linux Linux
: 3 - Medium Impact
Assignee: Albert Gil
QA Contact:
URL:
Depends on:
Blocks:
 
Reported: 2022-01-24 10:02 MST by Bill Broadley
Modified: 2022-02-02 03:24 MST (History)
0 users

See Also:
Site: NREL
Slinky Site: ---
Alineos Sites: ---
Atos/Eviden Sites: ---
Confidential Site: ---
Coreweave sites: ---
Cray Sites: ---
DS9 clusters: ---
Google sites: ---
HPCnow Sites: ---
HPE Sites: ---
IBM Sites: ---
NOAA SIte: ---
NoveTech Sites: ---
Nvidia HWinf-CS Sites: ---
OCF Sites: ---
Recursion Pharma Sites: ---
SFW Sites: ---
SNIC sites: ---
Tzag Elita Sites: ---
Linux Distro: ---
Machine Name:
CLE Version:
Version Fixed:
Target Release: ---
DevPrio: ---
Emory-Cloud Sites: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this ticket.
Description Bill Broadley 2022-01-24 10:02:53 MST 
Everything worked as expected with Slurm version 20.02.5.  We recently upgraded to slurm 21.08.5.

We have a hpcmon user that monitors slurm jobs, from a sacctmgr dump of the user database:
Parent - 'cscdav'
User - 'hpcmon':DefaultAccount='cscdav':AdminLevel='Operator':Fairshare=1

I verified this hasn't changes recently.

So running sacct as user hpcmon used to list all jobs.

Now:
$ id
uid=130420(hpcmon) gid=130420(hpcmon) groups=130420(hpcmon),130986(esp-csc),131178(lex-access),131239(aiops),131715(ay21),132160(ay22),249927(cscdav)

$ sacct
JobID           JobName  Partition    Account  AllocCPUS      State ExitCode 
------------ ---------- ---------- ---------- ---------- ---------- -------- 
$ 

Expected?  Suggested fix?
Comment 1 Albert Gil 2022-01-25 06:58:28 MST 
Hi Bill,

In both 20.02 and 21.08 the default behavior of sacct is to return only the jobs of the user running the command. To get the job of all users you need to specify -a,--allusers.
The parameter PrivateData can be used to limit who can see all the jobs information, though.

If your user hpcmon runs "sacct -a", does it get all the jobs?

Regards,
Albert
Comment 2 Bill Broadley 2022-02-01 11:53:14 MST 
Yes, I thought -a was the default, in case no matter, -a works.  Thanks, closing this ticket.