Globus Release 2025-04-16

[Paul Hinton]

HIGHLIGHTS

We released several new cross-cutting features today.

Subscription verified collections and groups

Users can rely on verification status to ensure they are selecting subscriber endorsed data collections and groups. By configuring the verification status of a collection or group, a subscription administrator can indicate to users that the resource is operated and maintained by the subscribing organization. 

Notification of guest collection activity for administrators

Guest collections can be configured to notify administrators, activity managers, and activity monitors when a transfer occurs against the collection, allowing users to be notified when a collaborator has transferred data.

New privileges for monitoring and managing flow runs

To better support monitoring and troubleshooting flow runs, flow administrators and owners have permission to monitor and manage all runs of their flows. They may also grant additional users and groups the same run monitoring and management permissions using the new flow run manager and flow run monitor roles. Please see Flows Permissions for additional details about these roles and permissions.

Flow restricted data access

An administrator can configure a flow to be run when a user transfers data to or from a subscribed collection. When a user attempts to transfer data, either as a transfer task or through HTTPS, they are directed to perform the transfer by running the flow defined by the administrator.  Please see the Globus Connect Server changelog for more information.

The web application simplifies the user interaction by allowing the users to submit transfers via the File Manager interface, and guiding them through to flow run, if the policy requires it. With this feature, institutions can shield their users from the complexities of preparing data for a specific storage system or ensure compliance to technical or policy requirements, while users can use the same familiar interface to move data.  

Compute for high assurance subscription tiers

The Compute service is now eligible in the high assurance subscription tiers. Support for Compute in the BAA subscription tier will be released shortly.

Compute Multi-User Endpoint Console

Administrators can monitor multi-user compute endpoints using the Web App Console. The compute console provides a view of active users, worker utilization, and the details of each spawned user endpoint process.  

Web Application

• Compute: Added keyword-based search for compute endpoints.

• Collections

• Added support for editing Guest Collection Activity Policy

• Added support for editing Subscription Administrator Verified

• File Manager: The File Manager will now prompt users to start a corresponding Flow when a user attempts to initiate a transfer that would trigger a collection’s associated flow policy. Applicable transfer options and selection state, will be preserved and passed to the flow as input.

• Groups: Added support for editing Subscription Administrator Verified

• Flows: Added support for new flow run manager and flow run monitor roles.

Transfer

• Added support for requiring a specified flow be used when transferring to or from a collection.

Compute

• Compute endpoints that are configured as high assurance endpoints support session authentication timeouts, audit logging, 90-day task and result data expiration, and enforced intra-cluster encryption.

Globus Connect Server

• Support for associating a flow client ID with a collection which limits transfers to or from the collection to the associated flow.

For more information on GCS releases, see the changelog.

Please contact sup...@globus.org if you have any questions or concerns.