In this subsection administrators may specify a list of user/group pairs whom proxy certificates will be used for executing actions outside of the DIRAC environment.
- Examples include, but are not limited to::
- issuing transfer requests to an external system (e.g. FTS3)
- querying grid databases (e.g. GOC DB)
| Name | Description | Example |
| <ShifterName> | Name of service managers | Admin ProductionManager DataManager MonteCarloGeneration DataProcessing |
| <ShifterName>/User | DIRAC user name | User = vhamar |
| <ShifterName/Group | DIRAC user group | Group = dirac_admin |
Running agents can use these "shifters" for executing the examples above: agents requiring to act with a credential can specify the option shifterProxy, or using a certain default, like "DataManager".
In general, to force any Agent to execute using a "shifter" credential, instead of the certificate of the server it is only necessary to add a valid shifterProxy option in its configuration (in the /Systems section).