This page provides information on the "WMF Office IT" (wmf-officeit) group on Meta.
For Legal and Security reasons the Wikimedia Foundation has decided that Two factor authentication is required for this role
The WMF Office IT group was created to allow members of the Wikimedia Foundation Office IT team to create and lock WMF Staff accounts, centrally logged on Meta.
Rights
This usergroup gives a user the following rights:
Right
Beschrijving
Reden
createaccount
Allow the user to create new accounts.
While in general users already have this right it is granted both as security in case that changes for some reason and because one of the core purposes of the group is to create accounts for new WMF staff members.
centralauth-lock
Allows users to lock or unlock global accounts.
This allows the staff members to lock WMF accounts when they are no longer with staff. It will also allow them to unlock both to fix mistakes or for staff who are returning after previously being a member of staff.
noratelimit
Allows users to not be subject to account/IP based rate limits.
This is mostly to allow the staff members to create multiple accounts without hitting the rate limit if, for some reason or another, a large number are required to be created on one day or if they are using the API to create them relatively quickly.
tboverride
Allows users to override the title or username blacklist.
The pattern "WMF" is blocked from being created by regular users. This will allow the staff members to create work accounts with the required WMF tag.
