Azure SRE Service – Researchers FAQ

The Secure Research Enclave (SRE) is designed to meet the requirements of analyzing datasets that require approval for data movement in or out of the environment. These datasets often have restrictions on visibility, storage, and access. The SRE model supports any use case needing remote access and strict controls on data exfiltration.

About This Service

Roles

• Analysis or Researcher Role: Individuals who use the software and resources in the SRE to analyze restricted datasets.

SRE Researcher Guide - FAQ

Accessing your Secure Research Enclave

• Launch the Microsoft Remote Desktop application, or download Microsoft Remote Desktop.
• Select + Add -> Workspace from the application menu bar.
• Enter your University of Pittsburgh Primary Email Address or enter https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery.
• Click the ‘Subscribe’ button.
• Authenticate with Microsoft via Pitt Passport.
• Wait for the Workspaces view to refresh and for Research Enclave Access to appear.
• Expand the Research Enclave Access workspace to reveal the Remote Desktop Connection.
• Launch the Remote Desktop Connection.
• Authenticate the RDP login popup using your Pitt Username and Password.
• You will be authenticated and should see the SRE Data Science VM Login Screen.

Adding Research Data to the SRE Workspace

• Data is moved into the SRE through a secure process involving Azure Storage Accounts. Contact the SRE Project Data Steward to start the process of bringing research data into the SRE and making it available on the Data Science VM.

Moving or Sharing Data Outside the SRE

• The SRE environment has restrictions on internet access and potential data exfiltration. During the SRE Project Onboarding, some members were designated as Project Data Stewards. These individuals can move data out of the SRE and act as Honest Brokers for de-identifying data being exported. Contact the Project Data Steward for instructions on implementing a data egress request.

Managing Research Data Scratch Space

• Your User Profile on the VM must remain within a maximum size limit, especially if multiple team members access the Data Science Virtual Machine. Work with the SRE Project Data Steward to determine appropriate locations to move/copy or write temporary data on the Data Science VM.

Support - Getting Help

• Login
  • Unable to log in to the Remote Desktop Workspace or Data Science Virtual Machine (xrdp) prompts? Use the
• Data
  • For questions about research data or files - moving data into the SRE, requesting approval to move data out, or concerns about data storage - contact the SRE Project Data Steward. If the Data Steward cannot assist, ask them to contact the SRE Service Team with your inquiry.
• Software
  • For questions about software, utilities, or libraries for applications on the Data Science Virtual Machine, contact the SRE Project Data Steward. The Data Steward can escalate the request to the SRE Service Team if necessary.
• Virtual Machine
  • For repository or package manager updates needed for research analysis on the Data Science Virtual Machine, the SRE Project Data Steward can help install or update these packages.
  • For operating system updates for the Data Science Virtual Machine, request that the Data Steward contact the SRE Service Team to determine the appropriate actions.
• Looking for Something Else?
  • All SRE Project inquiries can be submitted directly to the IT Help Desk by clicking the Request Help button on the upper right-hand corner of the Azure SRE Service page.