Project accounts are designed to facilitate collaborative computing by allowing multiple users to use the same account. All actions performed by the project account are traceable back to the individual who used the project account to perform those actions via gsisshd accounting logs.
Requesting a Project Account
PI's, PI proxies and project managers are allowed to request a project account. In NIM do "Actions->Request a Project Account" and fill in the form. Select the repository that the Project Account is to use from the drop-down menu, "Sponsoring Repository". Enter the name you want for the account (8 characters maximum) and a description of what you will use the account for and then click on the "Request Project Account" button. You will be notified by email as to whether or not your request is approved. There is a limit of one project account per repository.
Managing Project Account Users
PI's, PI proxies and project managers are also allowed to manage their repo's project account users. In NIM just do a quick search on the name of your repository and then click on the "Project Access" tab. Under the section on "Assign Project Access Privs to a User", select the username and Certificate DN for the people who should have access to the project account. They will then appear under the "Authorized Users List" section. To disable access for any user simply delete their certificate info by clicking on the "Remove" button. Note that the grid-mapfile gets updated every 30 minutes so it takes a bit of time for changes to take effect.
Project Account Access
To access your project account with your doegrids certificate first login to a PDSF interactive node as yourself and then do the following commands:
module load osg
/usr/common/nsg/gsissh/bin/ssh localhost -p 2222 -l <project account name>
Alternatively you can get a proxy using myproxy-logon instead of grid-proxy-init:
myproxy-logon -s nerscca.nersc.gov
In this case you use your NIM password instead of your GRID pass phrase.