Ticket 5766 - limit admin and operator roles to specific accounts
Summary: limit admin and operator roles to specific accounts
Status: RESOLVED INFOGIVEN
Alias: None
Product: Slurm
Classification: Unclassified
Component: Accounting (show other tickets)
Version: 17.11.7
Hardware: Linux Linux
: 4 - Minor Issue
Assignee: Jason Booth
QA Contact:
URL:
Depends on:
Blocks:
 
Reported: 2018-09-21 12:33 MDT by Robert Yelle
Modified: 2018-10-31 15:46 MDT (History)
0 users

See Also:
Site: University of Oregon
Slinky Site: ---
Alineos Sites: ---
Atos/Eviden Sites: ---
Confidential Site: ---
Coreweave sites: ---
Cray Sites: ---
DS9 clusters: ---
Google sites: ---
HPCnow Sites: ---
HPE Sites: ---
IBM Sites: ---
NOAA SIte: ---
NoveTech Sites: ---
Nvidia HWinf-CS Sites: ---
OCF Sites: ---
Recursion Pharma Sites: ---
SFW Sites: ---
SNIC sites: ---
Tzag Elita Sites: ---
Linux Distro: ---
Machine Name:
CLE Version:
Version Fixed:
Target Release: ---
DevPrio: ---
Emory-Cloud Sites: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this ticket.
Description Robert Yelle 2018-09-21 12:33:02 MDT 
Hello,

Is it possible to limit the roles of Slurm admin or operators to certain accounts, or accounts that they belong to?  We have a situation where it would be desirable for a PI to manage the jobs within their group but not jobs outside their group.  For example, the ability to hold/release/cancel jobs in their own group but not other groups.  Is this currently possible, and if so, how is this done?

Thanks,

Rob
Comment 2 Jason Booth 2018-09-21 14:29:33 MDT 
Hi Robert,

This is known as a coordinator.


Coordinator
A special privileged user, usually an account manager or such, that can add users or sub-accounts to the account they are coordinator over. This should be a trusted person since they can change limits on account and user associations inside their realm.

Set using a table in Slurm's database defining user's and accounts for which they can serve as coordinators. For configuration information, see the sacctmgr man page.

For example:

sacctmgr modify account set coordinator=jason where account=staff


sacctmgr list account staff withcoord
   Account                Descr                  Org       Coord Accounts 
---------- -------------------- -------------------- -------------------- 
     staff                staff                staff                jason 

-Jason
Comment 3 Jason Booth 2018-09-21 14:49:56 MDT 
Hi Robert,

 I should have set this issue to 'info given' with my last response. I am doing so now. Please feel free to reopen if needed.

-Jason
Comment 4 Robert Yelle 2018-09-21 15:00:17 MDT 
Thanks Jason!

I’ll give the coordinator role a try.

Rob


On Sep 21, 2018, at 1:49 PM, bugs@schedmd.com<mailto:bugs@schedmd.com> wrote:

Jason Booth<mailto:jbooth@schedmd.com> changed bug 5766<https://bugs.schedmd.com/show_bug.cgi?id=5766>
What    Removed Added
Status  UNCONFIRMED     RESOLVED
Resolution      ---     INFOGIVEN

Comment # 3<https://bugs.schedmd.com/show_bug.cgi?id=5766#c3> on bug 5766<https://bugs.schedmd.com/show_bug.cgi?id=5766> from Jason Booth<mailto:jbooth@schedmd.com>

Hi Robert,

 I should have set this issue to 'info given' with my last response. I am doing
so now. Please feel free to reopen if needed.

-Jason

________________________________
You are receiving this mail because:

  *   You reported the bug.
Comment 5 Robert Yelle 2018-10-31 11:51:39 MDT 
Hello,

I need to reopen this ticket.  I am trying to add a coordinator for an account as follows:

sacctmgr modify account set coordinator=ryelle where account=hpcrcf

But I get the following output:

Unknown option: coordinator=ryelle
Use keyword ‘where’ to modify condition

It seems that the syntax is wrong and I have tried other combinations without success. What is the correct way for doing this?  I am using Slurm 17.11.10.

Thanks,

Rob


On Sep 21, 2018, at 2:00 PM, Rob Yelle <ryelle@uoregon.edu<mailto:ryelle@uoregon.edu>> wrote:

Thanks Jason!

I’ll give the coordinator role a try.

Rob


On Sep 21, 2018, at 1:49 PM, bugs@schedmd.com<mailto:bugs@schedmd.com> wrote:

Jason Booth<mailto:jbooth@schedmd.com> changed bug 5766<https://bugs.schedmd.com/show_bug.cgi?id=5766>
What    Removed Added
Status  UNCONFIRMED     RESOLVED
Resolution      ---     INFOGIVEN

Comment # 3<https://bugs.schedmd.com/show_bug.cgi?id=5766#c3> on bug 5766<https://bugs.schedmd.com/show_bug.cgi?id=5766> from Jason Booth<mailto:jbooth@schedmd.com>

Hi Robert,

 I should have set this issue to 'info given' with my last response. I am doing
so now. Please feel free to reopen if needed.

-Jason

________________________________
You are receiving this mail because:

  *   You reported the bug.
Comment 6 Jason Booth 2018-10-31 14:38:10 MDT 
Hi Rob,

 I apologize for the miscommunication.

Please try the following:
sacctmgr add coordinator user=ryelle account=hpcrcf

-Jason
Comment 7 Robert Yelle 2018-10-31 15:32:29 MDT 
Hi Jason,

Thanks, that did the trick.

Rob


On Oct 31, 2018, at 1:38 PM, bugs@schedmd.com<mailto:bugs@schedmd.com> wrote:


Comment # 6<https://bugs.schedmd.com/show_bug.cgi?id=5766#c6> on bug 5766<https://bugs.schedmd.com/show_bug.cgi?id=5766> from Jason Booth<mailto:jbooth@schedmd.com>

Hi Rob,

 I apologize for the miscommunication.

Please try the following:
sacctmgr add coordinator user=ryelle account=hpcrcf

-Jason

________________________________
You are receiving this mail because:

  *   You reported the bug.
Comment 8 Jason Booth 2018-10-31 15:46:42 MDT 
Resolving this issue.