Managing Pantheon Site Access

Team access to sites in U-M Pantheon is managed via MCommunity groups.  Membership in the "Managing MCommunity Group" provided during Website creation in the ITS Web Services self-service portal determines who has access to a site in the Pantheon dashboard.  Any non-UM email address you add to the MCommunity group will also receive access to the Pantheon dashboard.

The MCommunity group associated with a site can be changed through the ITS Web Services self-service portal.  Changes made through the self-service portal are synced immediately to Pantheon.

MCommunity / Site Team Synchronization Schedule

Membership changes made to the site owner MCommunity group through MCommunity get synced to Pantheon four times per day.  The sync jobs run in UTC, so they will run as follows relative to EDT/EST:

  • EDT (UTC-04)
    • 0000 (12 midnight)
    • 0600 (6am)
    • 1200 (12 noon)
    • 1800 (6pm)
  • EST (UTC-05)
    • 0500 (5am)
    • 1100 (11am)
    • 1700 (5pm)
    • 2300 (11pm)

 

Immediate Access

If someone needs access to the Pantheon dashboard right away, another member of the MCommunity group can give the new person access by clicking on the "Team" button in the upper right of the website's page in the dashboard (do not click on the Team item in the left navigation menu -- that controls access to the site's workspace rather than the site's team).  Anyone who gets added to the site team via the Pantheon dashboard but does not get added to the site's MCommunity group will lose access to the dashboard the next time membership is synchronized.

External Members versus Sponsored Uniqnames

Some site owners prefer to obtain sponsored uniqnames for non-UM people who need access to the Pantheon dashboard and then add them as internal (university) members of the MCommunity group.  Advantages to this over adding people as external (non-UM) members of the MCommunity group include:
 
  • They will need to use U-M Weblogin -- which requires Duo Multifactor Authentication -- to log in to the Pantheon dashboard.  Pantheon logins are username-and-password only (single factor).
     
  • You can set the sponsorship duration.  At the end of the sponsorship, the external person automatically loses access to your site in the Pantheon dashboard.  (You will still need to disable or remove any WordPress or Drupal administrator account they have within your site).
     
  • They get access to other U-M computing services that may be useful for them.
Last Updated
Monday, January 6, 2025