Documentation for facility managers using fileshare services managed by ChemIT and provisioned by CIT (Active Directory and SFS file shares). Includes reminder notes for Chemistry IT staff. |
How do I, as a facility manager, add a person to the facility's file share?
Facility staff contacts ChemIT with the following specific information:
- User's NetID and name.
- Specify which research group user belongs to. Confirm it already exists, or request one get created, as appropriate.
- If not in a research group which should exist, specify "OtherUsers".
No need to specify equipment needed. NMR: Note that NMR's Linux accounts are not done through ChemIT. Thus, those NMR instrument accounts are provisioned directly by Ivan, in NMR. ChemIT does not need to know about them.
ChemIT staff's steps:
- At <http://www.cornell.edu/search/people.cfm>, confirm name matches NetID, as an error-check.
- In AD (Quest), add NetID of person to research group.
- Example: AS-CHM-NMR-ShareWolczanski
- For NMR requests: Within NMR's fileshare (CIT's SFS), use own ADM account to create folder with group's folder, using NetID as the folder's name.
- User can't do this from an instrument computer; they or NMR staff would first have to create the folder before the first use of the instrument. Hence, ChemIT staff doing so as a courtesy, even though not strictly required.
How can a facility manager quickly check what groups are already in AD?
Using the AD website lookup tool:
What rights do my users have on my facility's file share?
- Read and write.
- Accessible fro their private computers.
- From off-campus, must use VPN.
What rights do my instrument accounts have on the facility's file share?
Read, Create(?) permissions, but not Change. This allows browsing wherever needed regardless of user, but no ability to change or remove anyone's work.
- Thus, although can create a folder within a permitted folder, can't rename the folder from the instrument.
- Removing or changing anything must be done from within a user's (or Admin's) account, and then is restricted to whatever that user can do (thus, only within their research group's folder).
How do I add a group? (ChemIT)
ChemIT staff's steps:
- Confirm group does not exist in AD and on the fileshare structure.
- In AD (Quest), add research group.
- Example: AS-CHM-NMR-ShareGroupname
- For NMR requests: Within NMR's fileshare (CIT's SFS), use own ADM account to create folder with group's folder, using NetID as the folder's name.
- User can't do this from an instrument computer; they or NMR staff would first have to create the folder before the first use of the instrument. Hence, ChemIT staff doing so as a courtesy, even though not strictly required.
How does my user access my facility's file share?
You need to add your own folder's name to the path, which is usually the PI's last name in place of "Groupname" in the examples below:
For Windows:
- NMR ---> \\files.cornell.edu\AS\CHM\NMR\Groupname
- X-ray—> \\files.cornell.edu\AS\CHM\Xray\FinalizedData\Groupname
For Mac using Mac OS 10.7 (Lion) and above:
- NMR ---> smb://files.cornell.edu/AS/CHM/NMR/Groupname
- X-ray—> smb://files.cornell.edu/AS/CHM/Xray/FinalizedData/Groupname
See the facilities documentation for more details.
- NMR's documentation: (where is it?)
- X-ray's documentation: (where is it?)
For NMR, most users user files are under a research group, so will use the appropriate group name (in place of "Groupname", above). The few users who are not in a group are to use the following as their group name:
ChemIT's general instructions to connect to a file share:
How will we clean out users given access to our facility's share who no longer should have access? How do I remove a group?
- Facility's staff should work with ChemIT staff to go through their list of file share users and groups.