# Globus

The University of Minnesota participates in the Globus data transfer service. Globus is a service that allows for fast transfer of data between computer systems, using a convenient web interface. Globus data transfer speeds are typically significantly faster than data transfer speeds using other methods. Globus also contains data sharing capability, which allows users to share data with collaborators at UMN or other institutions.

## Storage Endpoints

There are a few Globus endpoints available to users:
* `UMN MSI Home`
    * Project spaces on `/projects/standard/<project name>`
    * Private home directories on `/users/{0-9}/<UMN internetid>`
* `UMN MSI Tier2`
    * Tier 2 Storage

```{note}
**Regulated projects** - projects spaces are not accessible using Globus at this time. Any future updates will be added to this page as they become available.
```

## Accessing File Manager

1. Navigate to https://www.globus.org
2. Select Organization 'University of Minnesota' and sign in with your UMN account
3. On left navigation menu, select 'File Manager'
4. On top right, change view to 'set two pane'
5. Load the shared collections mentioned above
    * E.g., Loading project space by selecting the collection `UMN MSI Home` and setting the path to your project space.

```{warning}
Globus automatically retries failed transfers over a period of 24 hours following an initial transfer request. If a transfer request contains an error such that it will never succeed, it is beneficial to delete the request using the activity panel, to prevent continued failed transfer attempts.

Users are advised against using one endpoint as both source and destination for a single transfer, as this slows the endpoint, and more effective techniques for moving data within MSI are available.
```

## Transfer Restrictions

As with other transfer methods, users may only transfer data for which they have normal filesystem read access, and may only place new data in directories for which they have normal filesystem write access. Globus is bound by filesystem permissions in the usual way.

Additionally, a user may only perform Globus transfers involving data within their home directory and other locations such as their group/project shared directory. Other directories such as /scratch.global are available as well. If a path is unavailable and you would like it to be made available, contact the Help Desk.

On MSI systems Globus will deny transfers involving home directory hidden, aka ‘dot’, files.

## Transfer Data to a Local Machine

Users may download directly from a Globus endpoint by adding their local machine as a local endpoint that can be selected from the File Manager interface.

Follow the instructions on [installing Globus Connect Personal](https://www.globus.org/globus-connect-personal)

### External Storage

By default, Globus only has access to certain folders and drives. If you need to transfer a file or folder on a different path without manually copying it over, you can do the following steps. They may differ depending on the OS:

1. Start Globus Connect Personal if it is not already running in the background.
1. Click ‘Show Hidden Icons’ on your taskbar to expand the menu. Right click on the Globus Connect Personal icon and select ‘Options’.
1. On the ‘Access’ tab of the Options popup, click the small '+' button towards the bottom right of the window.
1. Select the new folder or drive that you wish to give Globus access to.
1. Click ‘Save’ on the bottom of the screen.

### Sharing Data Using Guest Collections

See the official documentation on setting up a [Guest Collection](https://docs.globus.org/guides/tutorials/manage-files/share-files/)

```{warning}
Globus shared directories remain shared until sharing is removed using the Globus interface. Any material within a Globus shared directory (including newly added material) is shared via Globus. For security, it is recommended that users disable sharing when their need for sharing has ended.
```

**Globus write-sharing** is extremely limited on MSI systems by default - the only location enabled for this is if you create a directory named "globus-incoming" within your project "shared" folder on primary storage. Attempts to write to any other MSI directories via sharing will fail.

* Tier 1 will look similar to `/projects/standard/msistaff/globus-incoming`
* Tier 2 will look similar to `s3://<bucket name>/globus-incoming`

Write sharing is also available for Tier 2 using a similar pattern to primary storage: a subdirectory within a bucket named 'globus-incoming' needs to be created before external collaborators can write to the bucket. e.g. /mybucket/globus-incoming