IDEALIT Passport
Menu

Passport search

Find a lesson or fix

Type at least two characters.

    Browse help by symptomBrowse all references
    How to start
    Public course previewThis is not your assigned passport. No identity, answers, or completion progress are stored here.How to start your passport
    Guided lesson
    01 / 02About 35 minutesaccess planning

    Assign Lessons And A Safe Project Environment

    Select relevant lessons and approval boundaries for a fictional eight-week visitor. This exercise provisions no accounts or system access.

    Where you will workOn this web page
    1. 1Understand
    2. 2Try it yourself
    3. 3Check and submit

    Before you start#

    A Passport lesson list is selected from the person's real work. Training shows lesson completion; it does not grant access. Operational access decisions require the separate owner's approval for a repository, dataset, machine or service.

    Visitor's task Training choice Operational decision
    Edit code Git; Python when needed Repository owner approves access
    Analyse approved measurements with CPU jobs Data and Euler CPU Data owner and compute owner approve use
    Finish an eight-week visit Handover and departure planning Owners review access/end dates and retained work

    Training is complete, but the data owner has not approved access. Can the visitor start using the dataset? Decide the next action before the explanation.

    When training is complete but access is pending

    Record the missing decision privately and contact its named owner. Continue only work already authorized. Completion does not grant access or justify buying an optional service. Review temporary permissions at the agreed date.

    Assign lessons for the stated work and obtain access decisions from their owners.

    Start the practice

    Practice

    Work through the decisions

    Follow in order

    Steps

    A Passport lesson list is selected from the person's real work. Training completion never grants system access. Every operational permission needs a separate decision from the person responsible for that system or information.

    1. 01

      Define the person's work

      Read and answer on this web page

      An eight-week fictional visitor will edit code and analyse approved data using CPU jobs. Choose lessons for that work, not every tool mentioned in the catalogue.

      Look forThe list contains only the relevant lesson groups and their required earlier lessons.

      Explanation and help
      What this means
      Map each responsibility to a system.
      Safe recovery
      Clarify the project role before requesting access.
    2. 02

      Name decision owners

      Read and answer on this web page

      Name the responsible owners in the fictional case. Teaching support helps with lessons; information and system owners approve data and operational access.

      Look forEvery requested system has an accountable owner.

      Explanation and help
      What this means
      Request minimum access.
      Safe recovery
      Do not grant access by implication or convenience.
    3. 03

      Limit scope and duration

      Read and answer on this web page

      The visitor needs only access for the stated work, with an end/review date. Training completion and access approval are separate decisions.

      Look forNo broad or permanent access lacks a task and review date.

      Explanation and help
      What this means
      Name the code and data locations that hold the main approved copies.
      Safe recovery
      Reduce the request or obtain a documented owner exception.
    4. 04

      Document working locations

      Read and answer on this web page

      Use the case's approved code, durable data and temporary compute locations. Do not record real private paths in public exercise answers.

      Look forThe researcher does not need to guess between laptop, GitHub, NAS, Blade, and Euler.

      Explanation and help
      What this means
      Separate training from provisioning.
      Safe recovery
      Decide which approved location will hold the main copy before data is created.
    5. 05

      Record operational approvals separately

      Read and answer on this web page

      In real work, record requests and owner decisions privately. In this exercise, decide how a missing approval is escalated. A passed lesson grants no access.

      Look forProvisioning status and Passport status are separate.

      Explanation and help
      What this means
      Complete the fictional packet questions.
      Safe recovery
      Do not activate access solely because training passed.
    6. 06

      Review the onboarding packet

      Read and answer on this web page

      Answer the seven fictional scenarios. They check decisions, not a completed real onboarding packet.

      Look forEvery scenario has one explicit, least-privilege decision.

      Explanation and help
      What this means
      Run Check my work.
      Safe recovery
      Add the missing owner or decision before approval.

    Finish the lesson

    Check and submit

    Answer these 7 questions, then confirm the work you checked.

    To pass: 100% and every safety question. Completion appears after the automatic GitHub check passes.

    01Does passing the Passport authorize system access?Safety-critical
    02Which Passport responsibilities should be assigned?
    03What access should be requested?Safety-critical
    04Before the researcher creates project data, what must be explicit?Safety-critical
    05A visiting researcher needs access for eight weeks. What should the request include?
    06How should a new researcher receive service access?Safety-critical
    07An access request is approved but provisioning fails. What should the Passport record prove?
    Before submitting
    Open my real passport first

    You can check sample answers here. Open your local Passport to check your practice files and submit the lesson.

    Preview onlyYou can try the questions here. This page does not store or submit your answers.
    Need help?Open recovery steps and AI-review guidance

    If Blocked#

    Do not grant broad access while waiting for a decision. Record the blocker and obtain the information owner, system owner, or lab owner decision. Use lab IT policy for escalation.

    Useful references:

    Understand Before Accepting AI Output#

    An agent may format the packet but cannot authorize access, classify data, approve AI services, choose compute shares, or create policy exceptions.