...
If they should have readonly DB access, you can modify the Ansible script temporarily to create a MySQL user for them, and then run "GRANT 'squaresdb-ro' TO $NEWUSER@localhost; SET DEFAULT ROLE ALL TO $NEWUSER@localhost;" to give them permissions.
...
SendGrid
We use SendGrid for outgoing mail; see Passwords for information on administering it.
We need to authenticate each sender, starting May 2023. SendGrid doesn't obviously expose the list of attempted senders, but we can get some from Postfix's logs:
adehnert@instance-2:~$ zgrep -oE "from=<[^>]*>" /var/log/mail.log* | cut -d : -f 2 | sort | uniq -c
5 from=<root>
10 from=<root@tech-squares-photos.mit.edu>
32 from=<squaresdb>
9 from=<squares-db-auto@mit.edu>
32 from=<squaresdb@tech-squares-photos.mit.edu>
10 from=<squares@mit.edu>