generated from jhudsl/OTTR_Template
-
Notifications
You must be signed in to change notification settings - Fork 4
/
04-consortia.Rmd
166 lines (100 loc) · 8.93 KB
/
04-consortia.Rmd
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
# Consortia
This chapter is targeted towards people who are part of a consortium and plan to use AnVIL as part of their activities. You will find here:
<br>
<!-- The capital letter above alters the formatting for the bullet points below -->
- **Account Setup Overview** -- Goals for this guide and help choosing a role in the consortium
- **Account Setup Steps** -- Step-by-step instructions to create your first accounts as part of the consortium on AnVIL
::: {.notice}
Please click on the subsection headers in the left hand
navigation bar (e.g., 2.1, 4.3) a second time to expand the
table of contents and enable the `scroll_highlight` feature
([see more](introduction.html#scroll-highlight)).
:::
## Account Setup Overview {#overview-consortia}
### Goals for This Guide
```{r, echo=FALSE, fig.alt="List of goals for this guide: 1) Choose your consortium role, 2) Get your accounts, and 3) Link external accounts."}
ottrpal::include_slide("https://docs.google.com/presentation/d/1H6LfwdDpYxlZ_BhaRKIZnvqr_V_NxE2MfrZuXva8m-8/edit#slide=id.gd5c49c5c55_0_165")
```
### Choosing a Role
Consortia are usually made up of scientists taking on different research roles. This guide will be most helpful to you if you target the section most closely related to your role. The sections are summarized by role below:
**Data Manager**
The data manager is responsible for controlling access of consortium members. To protect data security, data managers ensure that consortium members only have access to appropriate datasets. If there are multiple datasets, the data manager will manage consortium member access as appropriate to a subset of those datasets. These limited access permissions are organized via distinct [Terra Authorization Domains](authorization-domains.html).
**Principal Investigator / Lab Manager**
Principal Investigators are responsible for managing billing expenses accrued by members of the consortium. Within the consortium, PIs can add members to [Workspaces](workspaces.html) managed under specific Google Billing Accounts and Billing Projects, providing centralized control over computing and data storage expenses. Principal Investigators will need to work with data managers to ensure their team members have correct data access via [Terra Authorization Domains](authorization-domains.html), where necessary.
**Data Analyst / Researcher**
A consortium data analyst might describe someone who is performing analyses or writing code, but isn't responsible for managing dataset access or billing expenses. The Analyst should be able to identify the PI or data manager point of contact in the consortium. Analysts will not be able to run analyses or access data without explicit permission from consortium management. This role also describes research leaders who will participate in activities but will not be managing personnel or expenses as part of the consortium.
**Data Submitter**
Data submitters are responsible for working with the AnVIL Data Ingestion Team as well as the National Center for Biotechnology Information (NCBI) to make data available on AnVIL. Data submitters will work with the data manager to ensure the data is protected via the appropriate [Terra Authorization Domains](authorization-domains.html).
### Consortia Responsibilities
It is important for consortium members of all roles to have a common understanding of the consortium’s security and data access policies. Consortia leadership are responsible for the following:
- Drafting Memorandums of Understanding (MOUs) and Data Use Agreements (DUAs)
- Arranging IRB oversight
- Drafting policy and protocol for data security and management incidents
- Ensuring all consortium members are aware of all data use limitations and the terms of the consortium agreements
- Defining what it means to be a consortium member
- Developing clear timelines and milestones for sharing data with the community rapidly, completely, and in NIH-designated data repositories
- Creating a timeline for closing out the consortium and thus the consortium-managed, streamlined access for consortium members
- Communicating the timeline with relevant NHGRI program staff and provide AnVIL with 6 months' notice of when the consortium's data access is expected to end
## Consortium Data Managers
### Managing Security and Privacy Policies
As a data manager, you are responsible for managing access to sensitive data. You should be involved in managing the following:
- Drafting Memorandums of Understanding (MOUs) and Data Use Agreements (DUAs)
- Arranging and managing IRB oversight
- Drafting policy and protocol for reporting data security and management incidents
- Managing data use limitations and conditions of consortium membership
### Account Setup
To set up your account on AnVIL, please see the chapter for [PIs and Lab Managers](pis-and-lab-managers.html#overview-pis). Once the setup is complete, return to this page to continue.
::: {.dictionary}
[Go to PIs and Lab Managers chapter](pis-and-lab-managers.html#overview-pis)
:::
### Two Factor Authentication
Note that you must establish [two factor authentication](https://support.google.com/accounts/answer/185839?co=GENIE.Platform%3DDesktop&hl=en) on your Google Account for added security.
### Set Up Terra Authorization Domains
Terra Authorization Domains help keep sensitive genomic data secure while still allowing easy sharing with collaborators. See the Security section on [Terra Authorization Domains](authorization-domains.html) for more information on setting up these secure access groups.
### Granting Access
Data managers should confirm that **all other consortium members** have two factor authentication set up on their Google accounts prior to granting access to datasets.
Granting member access to datasets should be controlled via [Terra Authorization Domains](authorization-domains.html).
### Revoking Access
Revoking access to datasets, either when a member leaves the consortium or the consortium concludes, should be controlled via [Terra Authorization Domains](authorization-domains.html).
## Consortium PIs and Lab Managers
### Be Aware of Security Policies
As part of a consortium on AnVIL, you should be aware of the following:
- Memorandums of Understanding (MOUs) and Data Use Agreements (DUAs)
- IRB oversight of the consortium
- Policy and protocol for reporting data security and management incidents
### Account Setup
To set up your account on AnVIL, please see the chapter for [PIs and Lab Managers](pis-and-lab-managers.html#overview-pis). Once the setup is complete, return to this page to continue.
::: {.dictionary}
[Go to PIs and Lab Managers chapter](pis-and-lab-managers.html#overview-pis)
:::
### Two Factor Authentication
Note that you must establish [two factor authentication](https://support.google.com/accounts/answer/185839?co=GENIE.Platform%3DDesktop&hl=en) on your Google Account for added security.
## Consortium Data Analysts and Researchers
### Be Aware of Security Policies
As part of a consortium on AnVIL, you should be aware of the following:
- Memorandums of Understanding (MOUs) and Data Use Agreements (DUAs)
- IRB oversight of the consortium
- Policy and protocol for reporting data security and management incidents
### Account Setup
To set up your account on AnVIL, please see the chapter for [Data Analysts](data-analysts.html#overview-analysts). Once the setup is complete, return to this page to continue.
::: {.dictionary}
[Go to Data Analysts chapter](data-analysts.html#overview-analysts)
:::
### Two Factor Authentication
Note that you must establish [two factor authentication](https://support.google.com/accounts/answer/185839?co=GENIE.Platform%3DDesktop&hl=en) on your Google Account for added security.
## Consortium Data Submitters
### Be Aware of Security Policies
As part of a consortium on AnVIL, you should be aware of the following:
- Memorandums of Understanding (MOUs) and Data Use Agreements (DUAs)
- IRB oversight of the consortium
- Policy and protocol for reporting data security and management incidents
### Account Setup
To set up your account on AnVIL, please see the documentation for [Data Submitters](https://anvilproject.org/learn/data-submitters/submission-guide/data-submitters-overview). Once the setup is complete, return to this page to continue.
::: {.dictionary}
[Go to Data Submitters documentation](https://anvilproject.org/learn/data-submitters/submission-guide/data-submitters-overview)
:::
### Two Factor Authentication
Note that you must establish [two factor authentication](https://support.google.com/accounts/answer/185839?co=GENIE.Platform%3DDesktop&hl=en) on your Google Account for added security.
## Wrap-Up {#consortia-wrap-up}
**Congratulations! You have successfully set up your AnVIL account!**
You should now be able to move forward with your consortium activities, such as adding personnel to appropriate datasets or working in a Workspace. Remember that you will need to coordinate with other members of the consortium to establish appropriate permissions for datasets, Terra Billing Projects, and Workspaces.