Documentation for facility managers using fileshare services managed by ChemIT and provisioned by CIT (Active Directory and SFS file shares). Includes reminder notes for Chemistry IT staff. |
How do I, as a facility manager, add a person to the facility's file share?
Facility staff contacts ChemIT with the following specific information:
- User's NetID and name.
- Specify which research group user belongs to. Confirm it already exists, or request one get created, as appropriate.
- If not in a research group which should exist, specify "OtherUsers".
No need to specify equipment needed. NMR: Note that NMR's Linux accounts are not done through ChemIT. Thus, those NMR instrument accounts are provisioned directly by Ivan, in NMR. ChemIT does not need to know about them.
ChemIT staff's steps:
- At <http://www.cornell.edu/search/people.cfm>, confirm name matches NetID, as an error-check.
- In AD (Quest), add NetID of person to research group.
- Example: AS-CHM-NMR-ShareWolczanski
- For NMR requests: Within NMR's fileshare (CIT's SFS), use own ADM account to create folder with group's folder, using NetID as the folder's name.
- User can't do this from an instrument computer; they or NMR staff would first have to create the folder before the first use of the instrument. Hence, ChemIT staff doing so as a courtesy, even though not strictly required.
How can a facility manager quickly check what groups are already in AD?
Use the AD website lookup tool:
What rights do my users have on my facility's file share, from their accounts?
- Read and write.
- Accessible from their private computers.
- Not accessible from the instrument computers, which have their own instrument accounts with different rights.
- From off-campus, user must use VPN. (File share protocol.)
What rights do my instrument accounts have on the facility's file share?
Read, Create(?) permissions. Not Change.
- This allows directory browsing when using an instrument to whatever is the required folder to deposit resulting instrument files, regardless of user. And no ability to change or remove anyone's work, including one's own.
- Caveat: Although user can create a folder within a permitted folder, can't rename the folder from the instrument.
- Make such changes on the desktop before moving files to server. Or, make the changes using user's account.
- Removing or changing anything must be done from within a user's account, and this is restricted to the location of the permitted directory (folder) for that user. (Thus, only within that user's research group's folder).
- Same thing for the facility manager's Admin account, but without the directory (folder) restrictions.
How do I add a group? (ChemIT)
ChemIT staff's steps:
- Confirm group does not exist in AD and on the fileshare structure.
- In AD (Quest), add research group.
- Example: AS-CHM-NMR-ShareGroupname
- For NMR requests: Within NMR's fileshare (CIT's SFS), use own ADM account to create folder with group's folder, using NetID as the folder's name.
- User can't do this from an instrument computer; they or NMR staff would first have to create the folder before the first use of the instrument. Hence, ChemIT staff doing so as a courtesy, even though not strictly required.
What are the NMR instruments this pertains to? (ChemIT)
- GC Mate
- Location: Old Protein Lab space, B78 ST Olin. (Used to be in B-level Baker.)
- Exactive/ DART
- Location: Old Protein Lab space, B78 ST Olin. (Used to be on the 4th floor, in ST Olin.)
- Bruker/ AV500
- Location: B63 ST Olin.
- Note: This system's billing kiosk is located in the old Protein Lab space, B78 ST Olin.
What is the X-Ray instrument this pertains to? (ChemIT)
How does my user access my facility's file share?
Your users must add their own folder's name to the path structures show below. This is usually the PI's last name in place of "Groupname" in the examples below:
For Windows:
- NMR ---> \\files.cornell.edu\AS\CHM\NMR\Groupname
- X-ray—> \\files.cornell.edu\AS\CHM\Xray\FinalizedData\Groupname
For Mac using Mac OS 10.7 (Lion) and above:
- NMR ---> smb://files.cornell.edu/AS/CHM/NMR/Groupname
- X-ray—> smb://files.cornell.edu/AS/CHM/Xray/FinalizedData/Groupname
See the facilities documentation for more details.
- NMR's documentation: (where is it?)
- X-ray's documentation: (where is it?)
For NMR, most users user files are under a research group, so will use the appropriate group name (in place of "Groupname", above). The few users who are not in a group are to use the following as their group name:
ChemIT's general instructions to connect to a file share:
How will we clean out users given access to our facility's share who no longer should have access? How do I remove a group?
- Facility's staff should work with ChemIT staff to go through their list of file share users and groups.