Admin GuideWorkspace

Workspace

Workspace creation process

  • Each workspace costs about $20K — check with Saima before reaching out to V7 for creation.

  • Workspace creation can be requested via two methods:

    1. Reach out to @James Hudson via the Slack channel ext-ecdi-v7 for a workspace creation request, or follow step 2.
    2. Log on to V7, click Support on the bottom right, and request a workspace creation request.
  • Once approved, an email is sent; whoever creates the workspace becomes the owner of the workspace.

  • Request V7 to change the Owner to Parthi KT.

  • The owner has permission to drop a workspace in addition to all admin permissions, so it should be owned by Ace-Infra.

Workspace naming standards

  • It should be org, department, and team. See the ECDI ACE AI team as an example: gene gred ecdi ace ai.
  • Spaces in the workspace name are internally converted to -.

Workspace local upload disable

  • By default a workspace has permission to upload files from a local machine.
  • Local file upload violates Roche security policy since the file will be uploaded to the V7 S3 bucket.
  • Reach out to @James Hudson via the Slack channel ext-ecdi-v7 or the support channel, and request to disable local upload capability.

Workspace AD group naming standards

  • Always start with v7ws-.
  • Typical naming: v7ws-<workspacename> after replacing spaces with -.
  • Example: the gene gred ecdi ace ai workspace will have the AD group v7ws-gene-gred-ecdi-ace-ai.
  • Create an owner group v7ws-gene-gred-ecdi-ace-ai-owners with Miao, Adam, and Parthi as the owners. Make this non-requestable on CIDM.
  • Create the AD group v7ws-gene-gred-ecdi-ace-ai with v7ws-gene-gred-ecdi-ace-ai-owners as the group owners.

With the above approach, Miao/Adam approve the request and we know the user counts for each workspace.

User per-workspace limitation

  • Currently we have 100 licenses. If we go beyond it, we need to pay $2000 per user.