Document 1password managent and who to contact.

[Carreau]

I have share creds to add to the 1password.
I basically lost every permission in 1 password, and can't even create a shared API key for zulip.
I don't know who to contact.
I don't even know what exists in 1passweord, so can't review for security audit.
I have no clue how to figure out who to ask.

Can we get some info somwhere on governance ?

[choldgraf]

The 1password is here: https://ec.jupyter.org/accounts/#password

The media strategy working group members are here: https://jupyter.org/governance/people.html#jupyter-media-strategy-working-group

My understanding is that the subprojects manage their own 1password sub-groups and control membership to them. These are the folks I see for the JMS vault - could you ask them to either add it or to add you w/ permissions?

We still will need a policy

I don't believe there is a Jupyter policy for who gets access to what. For example:

• Do members of the security WG get access to all vaults because of their role?
• Do subprojects have the option to create their own vaults and manage access to it? Who do they contact to add a new vault?

Suggestion: We ask @Naomi-Wash (or @slandath if that's a better contact) to be the point of contact for questions about the 1Password in general.

[Carreau]

Thanks ! I was not aware of this new URL [EDIT actually forgot] i will have a look at it!

[Carreau]

BTW, I know we talked about JMS on Zulip, I'm not sure my request is for JMS though as it's more globally how to handle that. The creds I want to add is a Zulip API key for github integration so not really JMS.

I think having some mentin of that in governance would be great; as ec.jupyter.org seem to be more for the EC itself.