User Access Policy

Version 1.0 · Intended audience: CERN EOSC Node users

This User Access Policy (“UAP”) explains who may use the resources and services of the CERN EOSC Node (“Services”), and how you obtain access to them.

1. You sign in with an account from an identity provider that the EOSC Federation recognises. You do not need a CERN account. Signing in proves who you are. It does not by itself give you access to a Service.
2. Some Services are open. You use them anonymously, or immediately after you sign in, with no request needed. The Services catalogue marks which these are.
3. Other Services need an access request. Sign in, open the Services catalogue, and select Request Access on the Service you need. A CERN EOSC Node administrator reviews your request, and you receive the decision by email.
4. Access decisions use your identity and the attributes supplied through the federated AAI, such as your affiliation, your group memberships, your roles, or your Virtual Organisation membership. Each Service operator sets and applies the authorisation rules for that Service, and those rules prevail for that Service.
5. The Node opens in defined rollout stages, and the stage sets the default allocation. Capacity is finite and shared, so anything beyond the default of the current stage is decided case by case rather than granted automatically. The rollout stages state what each stage includes and what it does not.
6. Your access may be restricted, suspended or withdrawn if you no longer meet the authorisation requirements, for administrative, operational, or security reasons, without prior notice and without compensation, or if you do not comply with the Acceptable Use Policy or the applicable CERN policies.

Applicable policies

• [1]CERN EOSC Node Acceptable Use Policy and Conditions of Use
• [2]AARC Blueprint Architecture 2025 (AARC-G080)