System administrators
For legal and security reasons, the Wikimedia Foundation has decided to require two-factor authentication for this role. |
System administrators perform systems administration work on the Wikimedia servers. Their primary task is to ensure that the Foundation's collection of over 900 wikis continues to function smoothly, so that users can continue to read pages and make changes. Aside from maintaining the hardware and software in the Wikimedia server clusters, they are responsible for updating and configuring the version of the MediaWiki software that runs on the Wikimedia servers, and can perform administrative tasks requiring direct server or database access, such as creating new wikis, closing wikis, changing configuration settings, etc.
The Wikimedia Foundation legally controls the servers; ultimately the Wikimedia Foundation Board of Trustees is responsible for determining who has sysadmin access, and how that responsibility is exercised. However, this power is delegated to various Wikimedia Foundation managers. On a day-to-day basis, various system administrators with root or shell access manage the server clusters.
System administrator actions
Although system administrators are often not active on Wikimedia wikis themselves, they may occasionally need to perform actions for technical reasons, such as blocking users or bots that are consuming unacceptable amounts of system resources, or undoing edits that put heavy strain on the servers. Such actions should not be undone without consulting the system administrator.
To facilitate these changes being made in a transparent fashion with no need of the steward flag, all system administrators who ask can be added to the 'sysadmin'
global group (automatic members lists). This group allows them to set user rights for any user on any wiki, in the same fashion as stewards. So if a system administrator needs to perform an action restricted to administrators (like editing system messages) on a particular wiki, they can simply grant themselves admin status on that wiki to make the action. In addition, the 'sysadmin'
group has access to Special:GlobalGroupPermissions, where system administrators can change the permissions assigned to their global group. So as an alternative, the system administrator could add editinterface
to the global group permissions, and would then be able to edit system messages on all wikis.
System administrators are encouraged to use the latter method of granting permissions, to avoid the lists of administrators/bureaucrats on local wikis becoming cluttered with users who are not 'permanent' members of those groups. These self-promotions may be removed at any time by stewards, as they can be easily restored if needed. However, some system administrators have permissions on certain wikis as a result of due process on that wiki, for instance Tim Starling's adminship on English Wikipedia; such rights should not be removed in this fashion.
Requesting on-wiki access
Approving the on-wiki sysadmin global group to any account (staff and volunteers) is the responsibility of the Trust and Safety team in consultation with Legal at the Foundation. Not all system administrators have this permission. The on-wiki permission can be given to those who already have relevant permission/access in Wikimedia’s technical spaces (i.e. shell access) and can demonstrate a need of doing related on-wiki changes in order to better support the communities.
- The requester needs to submit their request on the Steward requests/Global permissions Meta page. After submitting the request on Meta, the requester needs to send a note with a detailed use case (i.e. what do you need the rights for?) to Trust and Safety through ca
wikimedia.org for approval.
- Once approved by the Legal department, one of the members from the Trust and Safety team will coordinate with the Stewards and will confirm the approval on the Meta request page.
- Once the approval from the Foundation is secured, the Stewards ensure that the 2FA requirement for the user account is met and grant the rights.
- The Stewards will remove the rights if the user wishes to resign and/or loses access to the server, Foundation asks for removal, or in case of abuse and in an emergency situation (i.e. account compromised).
List
The list below is provided for convenience and should not be treated as accurate or complete. Most of the technical Wikimedia Foundation staff have some form of shell access. There are various levels of shell access (through user groups) and many (whether or not overlapping) groups of servers that access is granted to. For simplification the list below considers all servers to be the same and there to be only (regular) "restricted", "deployment", and "ops". Some other users (not necessarily listed here) have the ability to perform highly restricted actions in some miscellaneous services, with varying degrees of visibility to users.
Name | Wikimedia account | IRC | Affiliation | Ops[note 1] | Deployment[note 2] | Restricted[note 3] |
---|---|---|---|---|---|---|
Aaron Schulz | Aaron Schulz (WMF) | AaronSchulz
|
WMF | • | ||
Alexandros Kosiaris | AKosiaris (WMF) | akosiaris
|
WMF | • | ||
Andrew Bogott | Andrew Bogott | andrewbogott
|
WMF | • | ||
Andrew Otto | AOtto (WMF) | ottomata
|
WMF | • | ||
Ariel T. Glenn | ArielGlenn | apergos
|
WMF | • | ||
Arturo Borrero Gonzalez | ABorrero (WMF) | arturo
|
WMF | • | ||
Arzhel Younsi | AYounsi (WMF) | XioNoX
|
WMF | • | ||
Brandon Black | BBlack (WMF) | bblack
|
WMF | • | ||
Brooke Storm | BStorm (WMF) | bstorm_
|
WMF | • | ||
Chris Danis | CDanis (WMF) | cdanis
|
WMF | • | ||
Chris Johnson | Cmjohnson1 (WMF) | cmjohnson
|
WMF | • | ||
Daniel Zahn | Mutante | mutante
|
WMF | • | ||
Emanuele Rocca | ERocca (WMF) | ema
|
WMF | • | ||
Faidon Liambotis | Faidon Liambotis (WMF) | paravoid
|
WMF | • | ||
Filippo Giunchedi | FGiunchedi (WMF) | godog
|
WMF | • | ||
Giuseppe Lavagetto | GLavagetto (WMF) | _joe_
|
WMF | • | ||
Guillaume Lederrey | GLederrey (WMF) | gehel
|
WMF | • | ||
Jaime Crespo | JCrespo (WMF) | jynus
|
WMF | • | ||
Janis Meybohm | JMeybohm (WMF) | jayme
|
WMF | • | ||
Jeff Green | Jgreen (wmf) | jeff_green
|
WMF | • | ||
Keith Herron | KHerron (WMF) | herron
|
WMF | • | ||
Luca Toscano | LToscano (WMF) | elukey
|
WMF | • | ||
Manuel Arostegui | MArostegui (WMF) | marostegui
|
WMF | • | ||
Mark Bergsma | Mark Bergsma | mark
|
WMF | • | ||
Moritz Muehlenhoff | MMuhlenhoff (WMF) | moritzm
|
WMF | • | ||
Ori Livneh | Ori Livneh | ori
|
Volunteer | • | ||
Reuven Lazarus | RLazarus (WMF) | rzl
|
WMF | • | ||
Riccardo Coccioli | RCoccioli (WMF) | volans
|
WMF | • | ||
Rob Halsell | RobH | RobH
|
WMF | • | ||
Tim Starling | Tim Starling | TimStarling
|
WMF | • | ||
Aaron Halfaker | Halfak (WMF) | halfak
|
WMF | • | ||
Adam Baso | ABaso (WMF) | dr0ptp4kt
|
WMF | • | ||
Adam Shorland | Adam Shorland (WMDE) | addshore
|
WMDE | • | ||
Adam Wight | Awight (WMF) | awight
|
WMF | • | ||
Amir Sarabadani | Ladsgroup | Amir1
|
Volunteer, WMDE | • | ||
Andrew Green | AGreen (WMF) | AndyRussG
|
WMF | • | ||
Antoine Musso | Amusso (WMF) | hashar
|
WMF | • | ||
Arthur Richards | Awjrichards (WMF) | awjrichards
|
WMF | • | ||
Brion Vibber | Brion Vibber (WMF) | brion
|
WMF | • | ||
Bryan Davis | BDavis (WMF) | bd808
|
WMF | • | ||
C. Scott Ananian | CAnanian (WMF) | cscott
|
WMF | • | ||
Chad Horohoe | ^demon | ostriches
|
Volunteer | • | ||
Dan Andreescu | Milimetric (WMF) | millimetric
|
WMF | • | ||
Dan Duvall | DDuvall (WMF) | marxarelli
|
WMF | • | ||
Daniel Kinzler | Daniel Kinzler (WMDE) | duesen
|
WMF | • | ||
David Causse | DCausse (WMF) | dcausse
|
WMF | • | ||
Elliott Eggleston | EEggleston (WMF) | ejegg
|
WMF | • | ||
Eric Evans | EEvans (WMF) | urandom
|
WMF | • | ||
Erik Bernhardson | EBernhardson (WMF) | ebernhardson
|
WMF | • | ||
Gergo Tisza | Tgr (WMF) | tgr
|
WMF | • | ||
Greg Grossmeier | Greg (WMF) | greg-g
|
WMF | • | ||
Joseph Allemandou | JAllemandou (WMF) | joal
|
WMF | • | ||
Kartik Mistry | KartikMistry | kart_
|
WMF | • | ||
Katie Filbert | Katie Filbert (WMDE) | aude
|
Volunteer, WMDE | • | ||
Kunal Mehta | Legoktm (WMF) | legoktm
|
WMF | • | ||
Marcel Ruiz Forns | Mforns (WMF) | mforns
|
WMF | • | ||
Marius Hoch | Hoo man | hoo
|
Volunteer, WMDE | • | ||
Mark Holmquist | MarkTraceur (WMF) | marktraceur/rdwrer
|
WMF | • | ||
Marko Obrovac | Mobrovac | mobrovac
|
WMF | • | ||
Matthias Mullie | Mmullie (WMF) | mlitn
|
WMF | • | ||
Martin Urbanec | Martin Urbanec | Urbanecm
|
Volunteer, WMF | • | ||
Mukunda Modell | MModell (WMF) | twentyafterfour
|
WMF | • | ||
Niharika Kohli | NKohli (WMF) | niharika
|
WMF | • | ||
Niklas Laxstrom | Nikerabbit | Nikerabbit
|
WMF | • | ||
Nuria Ruiz | NRuiz (WMF) | nuria
|
WMF | • | ||
Petr Pchelko | PPchelko (WMF) | Pchelolo
|
WMF | • | ||
Piotr Miazga | PMiazga (WMF) | raynor
|
WMF | • | ||
Roan Kattouw | Roan Kattouw (WMF) | RoanKattouw
|
WMF | • | ||
Sam Reed | Reedy | Reedy
|
WMF | • | ||
Sam Smith | SSmith (WMF) | phuedx
|
WMF | • | ||
Subramanya Sastry | SSastry (WMF) | subbu
|
WMF | • | ||
Timo Tijhof | Krinkle | Krinkle
|
WMF | • | ||
Tyler Cipriani | TCipriani (WMF) | thcipriani
|
WMF | • | ||
Taavi Väänänen | Majavah | majavah
|
Volunteer | • | ||
Amir Aharoni | Aaharoni-WMF | aharoni
|
WMF | • | ||
Chelsy Xie | CXie (WMF) | chelsyx
|
WMF | • | ||
Erik Zachte | Erik Zachte (WMF) | ezachte
|
WMF | • | ||
James Alexander | Jamesofur | jamesofur
|
Volunteer | • | ||
Joe Sutherland | JSutherland (WMF) | foks
|
WMF | • | ||
Jon Robson | Jon (WMF) | jdlrobson
|
WMF | • | ||
Leon Ziemba | MusikAnimal (WMF) | musikanimal
|
WMF | • | ||
Mikhail Popov | MPopov (WMF) | bearloga
|
WMF | • | ||
Santhosh Thottingal | Sthottingal-WMF | santhosh
|
WMF | • | ||
|
History
Initially, it was Jimmy Wales who installed software, ran update programs, etc., on the servers. In March 2002, he proposed to give login accounts to some developers ("Trusted user access to machine", Wikitech-l).
System administrators formerly had an important role in the Wikipedia power structure, since they were the only ones able to promote and demote sysops and lock user accounts (before the "block" feature of MediaWiki existed).
Some sysadmins had shell access to the old California servers, but due to inactivity, weren't given shell access on the "new" (since decommissioned) Florida servers. Magnus Manske, April King, Lee Daniel Crocker, Axel Boldt, Matthias Jordan, Neil Harris and Ed Poor were all in this category.
See also
- System administrators: global permission · global groups (toolforge) · member list · group changelog
- Special global permissions
- A perfectly up to date list of sysadmins is also visible in the operations/puppet.git Git repository e.g. [1].
- Issue tracker permissions are no longer dealt with on this page. See the MediaWiki page instead.
|