# Create and Publish a Trusted Research Environment

{% hint style="info" %}
Apollo and Trusted Research Environments licenses are required to use Trusted Research Environments on the DNAnexus Platform. [Contact DNAnexus Sales](mailto:sales@dnanexus.com) for more information.
{% endhint %}

Learn how to make your data discoverable using a Trusted Research Environment (TRE) on the DNAnexus Platform.

## Before You Begin

Make sure you've done the preparatory work described in [planning a TRE](/admin/trusted-research-environments/planning-a-tre.md).

Confirm the following before you start creating your TRE:

* Your File Inventory TSV and Data Collections JSON are uploaded to DNAnexus.
* Your Tabular Data Inventory Apollo Dataset is ingested and accessible.
* Your Data Showcase Apollo Dataset is in a **separate project** from your other inventory resources.
* All inventory assets are in the same region as the TRE you are creating.
* You know how many review steps your pipeline needs and who to assign as reviewers.

## Step 1: Create the Research Environment

1. In the platform navigation menu, go to **Orgs** > **Your Org**.
2. Click the **TRE** tab.
3. Click **+ New Research Environment** in the top right corner.
4. Complete the following fields in the **New Research Environment** modal:
   * **TRE ID** — A unique, lowercase, alphanumeric handle for the environment.
   * **Name** — The display name shown to researchers browsing **Data Resources** > **Resource Center**.
   * **Description** — A detailed description of the data offering.
   * **Region** — The cloud region where the data is hosted.
   * **Customized Rate Card** — Controls how compute costs are billed to researchers. Select **Yes** to have the platform create a dedicated billing org (wallet) for each approved data access request, with pricing inherited from the organization hosting the TRE. Leave as **No** to have researchers bill to their own org wallet. This setting cannot be changed after creation. For details and prerequisites, see [planning your billing configuration](/admin/trusted-research-environments/planning-a-tre.md#plan-your-billing-configuration).
5. Click **Create Research Environment**.

{% hint style="warning" %}
The **TRE ID** is permanent and cannot be changed after the TRE is created. In the TRE UI, the **Region** and **Customized Rate Card** fields are also locked after creation, even while the TRE is in the `draft` lifecycle state. The **Name** and **Description** can be updated at any time.
{% endhint %}

## Step 2: Configure Membership

Open the newly created TRE and navigate to the **Membership** section. Add TRE Admins and the initial Authorized Users who you want to be able to discover and access the environment. To add Authorized Users, you must be an Admin in the Data Showcase project, which contains the Data Showcase dataset.

For more details, see how to [manage TRE membership](/admin/trusted-research-environments/configuring-tre-membership.md). Membership can be updated at any time regardless of lifecycle state.

## Step 3: Configure the Resource Inventory

The Resource Inventory links your prepared inventory assets to the TRE. Contact [DNAnexus Professional Services](https://www.dnanexus.com/professional-services) for assistance preparing these files before continuing.

1. Navigate to the **Resource Inventory** section.
2. Provide a semantic **Version** string for this inventory release, for example `1.0.0`.
3. Enter the project ID and object ID for each of the following:
   * **File Inventory** — The file ID of your File Inventory TSV.
   * **Tabular Data Inventory** — The record ID of your tabular Apollo Dataset.
   * **Data Showcase** — The record ID of your showcase Apollo Dataset. **Remember:** This dataset must be in a separate project from your File Inventory and Tabular Data Inventory, because all authorized users automatically receive access to this project.
   * **Data Collections** — The file ID of your Data Collections JSON file.
4. If your TRE includes assay data, add one entry per assay with the entity name, project ID, dataset record ID, and assay database name. Contact [DNAnexus Professional Services](https://www.dnanexus.com/professional-services) for guidance on configuring assays.

{% hint style="warning" %}
Resource Inventory settings can only be configured or updated when the TRE is in the **Draft** or **Maintenance** state. You cannot modify the inventory while the TRE is Active.
{% endhint %}

## Step 4: Configure Data Access Policies

1. Navigate to the **Features & Policies** section.
2. Click **Configure Policies**.
3. For each policy, select one of three options:
   * **Enforce on** — The restriction is enforced on all projects in this TRE, regardless of individual project settings.
   * **Enforce off** — The restriction is explicitly disabled for all projects in this TRE.
   * **Defer to project settings** — Individual project owners control this setting.
4. Click **Save**.

## Step 5: Configure the Review Workflow

Navigate to the **Review Settings** section and add the review steps you planned. Assign at least one reviewer to each step.

For details, see how to [manage review steps and reviewers](/admin/trusted-research-environments/configuring-review-workflow.md). The TRE must have at least one review step with at least one reviewer assigned before you can publish it.

## Step 6: Publish the Research Environment

Once your membership, inventory, policies, and review pipeline are configured, you can publish the TRE to make it visible to Authorized Users. You can also publish with no Authorized Users configured and add them later.

When published, the TRE enters the **Active** state. Authorized Users can immediately discover the environment in **Data Resources** > **Resource Center**, explore the Data Showcase, and submit access requests.

1. Click **Administrative Actions** (gear icon) at the top right.
2. Select **Publish Environment**.
3. Review the confirmation checklist:
   * Your review steps are finalized. After publishing, you cannot add, remove, or reorder steps, but you can update step names and descriptions.
   * Your Resource Inventory is correctly linked with valid file and record IDs.
   * Your data access policies reflect the appropriate restrictions for your data.
4. Click **Confirm and Publish**.

To update the resource inventory after publishing, or to deactivate or delete the TRE, see [Manage TRE Lifecycle](/admin/trusted-research-environments/managing-tre-lifecycle.md).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://documentation.dnanexus.com/admin/trusted-research-environments/creating-a-tre.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
