Making Sense of Banner Security Ed Siegle, Swarthmore College

Thank you for your cooperation General Announcements: Please turn off all cell phones/pagers If you must leave the session early, please do so as discreetly as possible Please avoid side conversations during the session Questions will be answered ….. Thank you for your cooperation

CPE Credits - We’ve gone electronic! To receive CPE credits for this session (if eligible), complete the CPE Attendance Form on the PABUG Annual Conference website http://pabug.org/pennsylvania-banner-users-group-annual-conference/cpe-credits/ or via the PABUG conference app. For additional questions please contact Kim Fremont CPE - Coordinator http://pabug.org/contact-us/

Overview Banner security is extensive and cumbersome, wanted a way to streamline and simplify Auditing purposes Answer to liaison question “Who has access to what?” How to group users with liaisons? Distributed security, fully implemented, would be overkill for us We are already using FGA, but what other features should we consider?

Distributed Security GSASECR access for specific users & forms Create new user (bansecr_username) GSADSUM – assign privileges, grants, restrictions GSADSEC – associate groups with the user Drawbacks for us More user accounts to maintain Don’t want to give GSASECR access, even minimal Still doesn’t solve the streamline issue

Distributed Security cont’d Even though the full implementation was not feasible for us I did see some things that we could use Security Groups for users and liaisons would allow for one to one mapping Application Express (APEX) would be our delivery solution to present the information in a concise and usable format for our liaisons

Grouping users with liaisons Form GSADESC – Security Groups tab Created a security group for the liaisons, LIASON, and assigned each departmental power user to this group. Created security groups for all college areas ADMISSIONS, ALUMNI, FINAID, FINANCE , etc. – 37 in total

Grouping users with liaisons cont’d Form GSADESC – Group Details tab Assigned each liaison to a departmental group. Assigned each user, based on Banner From permissions, to at least one departmental security group. All subsequent users can be assigned to security groups within GSASECR, Banner Rules

Making sense of it all…

Grouping users with liaisons cont’d The following sql will return the liaisons for the FINAID (Financial Aid) security group : SELECT DISTINCT gurugrp_user FROM spriden, gobeacc, bansecr.gurugrp WHERE spriden_pidm = gobeacc_pidm AND gobeacc_username = gurugrp_user AND spriden_change_ind IS NULL AND gurugrp_sgrp_code = 'FINAID' AND gurugrp_user IN (SELECT gurugrp_user FROM bansecr.gurugrp WHERE gurugrp_sgrp_code = 'LIASON') ORDER BY 1;

Grouping users with liaisons cont’d The following sql will return all users in the FINAID (Financial Aid) security group: SELECT gurugrp_user FROM spriden, gobeacc, bansecr.gurugrp WHERE spriden_pidm = gobeacc_pidm AND gobeacc_username = gurugrp_user AND spriden_change_ind IS NULL AND gurugrp_sgrp_code = 'FINAID' ORDER BY 1

Oracle Account Summary

Oracle Account Summary cont’d

Banner Account Summary In GSASECR, this layout would be two separate tabs

Banner Account Summary cont’d

Class Detail

Class Detail cont’d

All Users in Specific Class

All Users in Specific Class cont’d

Object Detail

Object Detail cont’d

Accounts Ready for Deletion

Accounts Ready for Deletion cont’d

Calendars Banner Security provides the ability for date and time Banner access

Calendar cont’d This sequence will allow Banner access only between the times of 8:00 AM and 7:00 PM Monday through Friday from June 5, 2014 through August 29, 2014.

Calendar cont’d This sequence will disallow Banner access completely on Saturday and Sunday.

Calendar cont’d Users are associated to Calendars in GSASECR Active From & To dates must be populated and To Date should be well into the future, otherwise user will have regular INB access (Defect?)

Summary Distributed Security may be an option Security Groups allow for user/liaison mapping We use APEX to deliver consolidated, scalable GSASECR reports Calendars allow for Time/Date access restrictions

Swarthmore College Ed Siegle esiegle1@Swarthmore.edu

Open to the Floor Questions Comments

Please take time to complete our Conference and Session evaluations Please take time to complete our Conference and Session evaluations. YOUR INPUT MATTERS!!!