Configure TRE Admins and Authorized Users

Manage TRE Admins and Authorized Users for a Trusted Research Environment on the DNAnexus Platform.

Apollo and Trusted Research Environments licenses are required to use Trusted Research Environments on the DNAnexus Platform. Contact DNAnexus Sales for more information.

TRE membership controls who can administer a Trusted Research Environment and who can discover it and submit data access requests. You can update membership at any time regardless of the TRE lifecycle state.

TREs use two membership categories:

• TRE Admins can modify TRE settings, configure the resource inventory, manage review steps, and transition lifecycle states.

• Authorized Users can discover the TRE in Data Resources > Resource Center, explore the Data Showcase (if one exists), and submit data access requests.

Add a TRE Admin

Only individual users can be TRE Admins. You can add one user at a time. Each TRE supports up to 100 TRE Admins.

1. In your org details, navigate to the TRE tab.

2. Click the TRE you want to edit.

3. Under Membership, click Manage TRE Admins.

4. Enter a user ID or email address.

5. Click + Add.

Remove a TRE Admin

1. In your org details, navigate to the TRE tab.

2. Click the TRE you want to edit.

3. Under Membership, click Manage TRE Admins.

4. Hover over the user, then click Remove User.

You cannot remove yourself from the TRE Admin list. Another TRE Admin must remove you if needed.

Add an Authorized User

You can add individual users or entire organizations. Adding an organization grants all its members Authorized User access. You can add one entry at a time. The TRE supports up to 1,000 authorized users.

If the TRE has a Data Showcase, you must be an Admin in the Data Showcase project to add Authorized Users.

1. In your org details, navigate to the TRE tab.

2. Click the TRE you want to edit.

3. Under Membership, click Manage Authorized Users.

4. Enter a user ID, user email, or organization ID.

5. Click + Add.

Remove an Authorized User

1. In your org details, navigate to the TRE tab.

2. Click the TRE you want to edit.

3. Under Membership, click Manage Authorized Users.

4. Hover over the user or organization, then click Remove User.

Make the TRE Public

By default, access is restricted to Authorized Users. To make the TRE discoverable by all platform users, set its visibility to Public. For considerations on planning TRE visibility, see planning membership and visibility.

1. In your org details, navigate to the TRE tab.

2. Click the TRE you want to edit.

3. Under Membership, click Manage Authorized Users.

4. Under Visibility & Access, select Public from the dropdown.

5. Review the warning and click Make Public.

Switching to Public immediately removes all users and organizations from the Authorized Users list. If you later restrict access, you must re-add authorized users individually or by organization.

When the TRE is set to Public, any platform user can discover the environment in Data Resources > Resource Center, explore its Data Showcase (if one exists), and submit a data access request.

Being a TRE Admin does not grant you Authorized User access. If you do not add your own account as an Authorized User, you cannot see this TRE in Data Resources > Resource Center.

For a complete breakdown of TRE personas and their platform permissions, see TRE roles and permissions.