NERSCPowering Scientific Discovery Since 1974

Project Accounts

Overview

Project accounts are designed to facilitate collaborative computing by allowing multiple users to use the same account.  All actions performed by the project account are traceable back to the individual who used the project account to perform those actions via gsisshd accounting logs. 

Requesting a Project Account

Please note: the method described below is currently unavailable.  To request a project account please send an email to consult@nersc.gov describing your needs.

PIs, PI proxies, and project managers are allowed to request a project account.  In NIM do "Actions->Request a Project Account" and fill in the form.  Select the repository that the Project Account is to use from the drop-down menu, "Sponsoring Repository". Enter the name you want for the account (8 characters maximum) and a description of what you will use the account for and then click on the "Request Project Account" button.  You will be notified by email whether or not your request is approved.  There is a limit of one project account per repository.

Managing Project Account Users

PIs, PI proxies, and project managers are also allowed to manage their repo's project account users.  In NIM just do a quick search on the name of your repository and then click on the "Project Access" tab. Under the section on "Assign Project Access Privs to a User", select the username and Certificate DN for the people who should have access to the project account. They will then appear under the "Authorized Users List" section. To disable access for any user simply delete their certificate info by clicking on the "Remove" button. Note that the grid-mapfile gets updated every 30 minutes so it takes a bit of time for changes to take effect.

Project Account Access

To access your project account with your doegrids certificate first login to a PDSF interactive node as yourself and then do the following commands:

module load osg
grid-proxy-init
gsissh localhost -p 2222 -l <project account name>

Alternatively you can get a proxy using myproxy-logon instead of grid-proxy-init:

myproxy-logon -s nerscca.nersc.gov

In this case you use your NIM password instead of your GRID pass phrase.