Article on data access authorization and responsibility

docs/data_management/data_access_authorization.md

@@ -0,0 +1,19 @@
+# Data Access Authorization and Responsibility
+
+Data access authorization and responsibility are critical aspect of managing and securing research data and resources. It ensures that only authorized individuals have access to specific data, maintaining security, compliance, and operational efficiency.
+
+## Cheaha Project directory
+
+A Cheaha Project directory is owned by a PI of a Lab or director of core facility. It is designed for sharing research data among lab members, and collaborators where permissions and access control are typically managed by the PI/director or designated administrators/manager.
+
+{{ read_csv('data_management/res/cheaha_project_directory.csv', keep_default_na=False) }}
+
+## Personal Cheaha Account
+
+Personal cheaha accounts are intended for personal or individual use and are available to all UAB affiliated individuals or UAB employee's sponsored Collaborator. These accounts are tied to the individual’s email and provide 5 TB of home/user directory.
+
+{{ read_csv('data_management/res/cheaha_individual_account.csv', keep_default_na=False) }}
+
+## Security Exceptions for Accessing Former UAB Personnel Data
+
+## Data Handling in Shared and Personal Cheaha Accounts After Leaving UAB?

docs/data_management/res/cheaha_individual_account.csv

@@ -0,0 +1,6 @@
+Permissions/Responsibilities,Research Computing,User, Storage Owner's Supervisor
+Create personal Cheaha account,,Yes ✔️,
+Move unused data to LTS or archive,,Yes ✔️,
+Manage backup plans,,Yes ✔️,
+Data and access control,,Yes ✔️,
+Sponsor external collaborator,Yes ✔️,Yes ✔️,Yes ✔️

docs/data_management/res/cheaha_project_directory.csv

@@ -0,0 +1,10 @@
+Permissions/Responsibilities,Research Computing,Members,Manager,PI
+Create a project directory,Upon PI request,,,
+Request a project directory,,,,Yes ✔️
+Add/remove member to/from the project space,Upon PI approval/Manager request,,,
+Grant access to users to a specific folder,Upon PI approval/Manager request,,Yes ✔️,Yes ✔️
+Periodically check group membership,,,Yes ✔️,Yes ✔️
+Verify and update access controls,,,Yes ✔️,Yes ✔️
+Move unused shared data to LTS/archive,,Yes ✔️,Yes ✔️,Yes ✔️
+Manage backup and recovery,,Yes ✔️,Yes ✔️,Yes ✔️
+Ensure proper usage of shared storage,,Yes ✔️,Yes ✔️,Yes ✔️

mkdocs.yml

@@ -123,6 +123,7 @@ nav:
           - RClone: data_management/transfer/rclone.md
           - FileZilla: data_management/transfer/filezilla.md
       - Code Storage: data_management/code_storage.md
+      - Data access responsibility and Authorization: data_management/data_access_authorization.md
   - Workflow Solutions:
       - Using the Shell: workflow_solutions/shell.md
       - Using Anaconda: workflow_solutions/using_anaconda.md