Authority Process & Policy   Advanced CAMP July 9, 2003 Copyright Sandra Senti 2003. This work is the intellectual property of the author. Permission.

Slides:



Advertisements
Similar presentations
Office of Information Technology Affiliates/Guests – Who are these people and how do we give them services? Copyright, Barbara Hope, University of Maryland,
Advertisements

Introduction and Overview.   PowerPoint  Civil Service chapter 10 rules  Planning and evaluation form  Performance notes  Request for review Handouts.
Copyright Tom Parker, Ron DiNapoli, Andrea Beesing, Joy Veronneau This work is the intellectual property of the authors. Permission is granted for.
Design & Development Scott Battaglia Application Developer Enterprise Systems and Services Rutgers, the State University of New Jersey
Copyright Dickinson College This work is the intellectual property of the author. Permission is granted for this material to be shared for non-commercial,
E-Biz Forum 2002 E-Business Forum May 16, 2002 Steve Relyea Vice Chancellor – Business Affairs University of California, San Diego.
Privilege Management with Signet: Steps to an Application Keith Hazelton University of Wisconsin-Madison Internet2 MACE Broomfield, Colorado 1-July-04.
Use of Working Titles Broad unit authority with periodic central HR/unit review Used in directories, verification of work and business cards Working Title.
Lynn McRae Stanford University Lynn McRae Stanford University Stanford Authority Manager Privilege management use.
Project Governance: Avoiding “Administrivia” Lisa Kosanovich Project Manager Center for Instructional Design Brigham Young University
UWM CIO Office A Collaborative Process for IT Training and Development Copyright UW-Milwaukee, This work is the intellectual property of the author.
David Sweeney, Director Brooke Woodruff, IT Manager
Copyright Anthony K. Holden, This work is the intellectual property of the author. Permission is granted for this material to be shared for non-commercial,
MIT ROLES DB Internet 2 Authority Architectures CAMP, June 2004.
Information Security Governance in Higher Education Policy2004 The EDUCAUSE Policy Conference Gordon Wishon EDUCAUSE/Internet 2 Security Task Force This.
Intellectual Property Protocol and Assessment for Distance Learning Liz Johnson Project Manager Advanced Learning Technologies Board of Regents of the.
CAMP Med Mapping HIPAA to the Middleware Layer Sandra Senti Biological Sciences Division University of Chicago C opyright Sandra Senti,
Identity Management – Why and How Experiences at CU-Boulder Copyright Linda Drake, Director of Development and Integration, University of Colorado, Boulder,
Classroom Technologies Re-organization Copyright Kathy Bohnstedt, This work is the intellectual property of the author. Permission is granted for.
EDUCAUSE April 25, 2006Enforcing Compliance with Security Policies … Enforcing Compliance of Campus Security Policies Through a Secure Identity Management.
Basic Challenges of Organizational Design
Copyright Emory University, This work is the intellectual property of the author. Permission is granted for this material to be shared for non-commercial,
Sharing Information and Controlling Content: Continuing Challenges for Higher Education Susanna Frederick Fischer Assistant Professor Columbus School of.
NERCOMP Managing Campus Affiliates Managing Campus Affiliates Faculty? Student? Faculty? Student? Staff? Criss Laidlaw Director of Administrative.
Mandatory Annual ACE Training Fiscal Year 2011 – 2012.
Managing Intellectual Property for Distance Learning Liz Johnson Project Manager Advanced Learning Technologies Board of Regents of the University System.
Middleware 101 Dave Tomcheck UC Irvine. Overview Drivers and Assumptions Objectives The Components of the Business Architecture Implications for Stakeholders.
Office of Information Technology Balancing Technology and Privacy – the Directory Conundrum January 2007 Copyright Barbara Hope and Lori Kasamatsu 2007.
Value & Excitement University Technology Services Oakland University Information Technology Strategic Planning Theresa Rowe October 2004 Copyright Theresa.
Title: Developing a Multimedia Tutorial Style Guide to Expand Student Training Author: Suzie Medders, Student Training Coordinator Educational Technology.
Evolution of Stanford   May 5, 2003.
Signet and Grouper A Use Case Study for Central Authorization at Cornell University March 2006.
December 2001 Internet2 Virtual Briefing - 1 -Stanford University Authority Registry December 12, 2001 Stanford University Lynn McRae.
Portal to the Rescue: First Year Information Copyright William P. Wilson This work is the intellectual property of the author. Permission is granted.
Setting up Privilege Management with Signet Metadata.
1 Copyright Carl Berger This work is the intellectual property of the author. Permission is granted for this material to be shared for non-commercial,
Chapter 10 Structuring Organizations Management 1e Management 1e Management 1e - 2 Management 1e Learning Objectives  Explain how.
Enterprise Service Desk (ESD) Enterprise Service Desk for Notification / Knowledge Article Authors.
Advanced CAMP: BoF Summaries. 2 Role-based Access Control (RBAC)
Integration is Critical for Success Curriculum Course Delivery Ongoing Support Instructor & Learner.
1 Effective Incident Response Presented by Greg Hedrick, Manager of Security Services Copyright Purdue University This work is the intellectual property.
1 Top 10 Challenges of the Academic Technology Community John P. Campbell & Dennis A. Trinkle EDUCAUSE Live! Monday, May 21, :00-2:00 PM Copyright.
Copyright Michael Dieckmann, Geissler Golding, Melanie Haveard This work is the intellectual property of the author. Permission is granted for this material.
Bringing it All Together: Charting Your Roadmap CAMP: Charting Your Authentication Roadmap February 8, 2007 Paul Caskey Copyright Paul Caskey This.
NMI-EDIT and Rice University Federated Identity Management: Managing Access to Resources in Texas Barry Ribbeck Director System Architecture and Infrastructure.
Chief Information Officer Effectiveness in Higher Education Wayne Brown, Ph.D. Copyright Wayne Brown This work is the intellectual property of the.
Copyright Michael White and Sylvia Maxwell, This work is the intellectual property of the author. Permission is granted for this material to be shared.
Introducing Novell ® Identity Manager 4 Insert Presenter's Name (16pt) Insert Presenter's Title (14pt) Insert Company/ (14pt)
© Scottsdale Community College Leveraging the Power of E-Learning Taking your course to a higher level Presented by Sidne Tate Director, Instructional.
SAP R/3 User Administration1. 2 User administration in a productive environment is an ongoing process of creating, deleting, changing, and monitoring.
Copyright Christine E. Haile & Justin D. Sipher This work is the intellectual property of the authors. Permission is granted for this material.
University of Southern California Identity and Access Management (IAM)
Thomas Danford | June 3, #SERC10
Federated Identity Management at Virginia Tech
Julian Hooker Assistant Managing Director Educause Southwest
Management Functions Administration
Defining an IT Workflow, from Request to Support
Working Title Guidelines
IT All Staff M. Mundrane 16 March 2018.
Blaine A. Brownell, President,
University of Southern California Identity and Access Management (IAM)
Privilege Management: the Big Picture
Project for OnLine Instructional Support (POLIS)
myIS.neu.edu – presentation screen shots accompany:
Signet Privilege Management
An App A Day Copyright Tina Oestreich and Brian Yuhnke This work is the intellectual property of the author. Permission is granted for this material.
Technical Topics in Privilege Management
Managing Enterprise Directories: Operational Issues
Signet & Privilege Management
Signet Privilege Management
Presentation transcript:

Authority Process & Policy   Advanced CAMP July 9, 2003 Copyright Sandra Senti This work is the intellectual property of the author. Permission is granted for this material to be shared for non-commercial, educational purposes, provided that this copyright statement appears on the reproduced materials and notice is given that the copying is by permission of the author. To disseminate otherwise or to republish requires written permission from the author.

Vision  Provide a central, shared repository of authority data that can be used across Stanford administrative systems and other enterprise applications which reflects a business view of managing privileges, not a system view.  A University manager wishing to enable staff to do a job should be able to activate privileges together, without needing detailed knowledge of the set of privileges. Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to:

Goals  Simplification of authority policy, management and interpretation.  Consistent application of authority rules and synchronization of administrative authority data across systems.  Integration of authority data with enterprise reference data.  Role-based authority, that is, management of privileges based on job function and assignments rather than attached to individuals. Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to:

Policy Issues  Must have common context across systems  Organizational structure  Eligibility for services  Authority definitions  Must have clear picture of where authority starts and how it is delegated  Must always use the central authority system Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to:

Tools which provide:  Support for scoping of authority to organizational boundaries, i.e. a hierarchy of privileges based on a common definition of organizations.  Support for authority subsystems, like financial authority.  Support for privilege enabling based on departmental affiliation. This provides automatic revocation of privileges when one switches departments or leaves Stanford. Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to:

Tools which support (cont.):  Support for sponsorship of privileges outside home organization, with effective and expiration dates. This supports cases of shared personnel, or temporary retention of duties during transition periods between departments.  Integration with provisioning services to provide automatic activation, deactivation and appropriate notifications to those both assigning and receiving authority. Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to:

Tools which support (cont.):  Support for prerequisites to enabling authority, such as "completed Cost Policy Training".  Support qualifying information, such as dollar limits, to be part of the assigned privileges.  Support for Delegation (extending privileges you have to others) and Proxy (granting temporary "acting for" privileges to cover vacation or other absences). Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to:

Authority Representation Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to:

Definitions  Roles – reusable authority profiles. Common roles can be created through assignment of suitable functions.  Functions - represent common admin activities of a department, division or other University organization. They are defined such that a typical job can be represented as a collection of related functions assigned to a person. Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to:

Definitions (cont.)  Tasks - more specific units of work that go together in support of a function -- register a student, hire a new employee, etc.  Entitlements - units of authority control representing specific operations, which will be translated by the applications into specific access management settings. Entitlements are expressed at the lowest level of resolution that applications and services need to manage access but are not system specific. Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to:

Building & Managing Authority  Driven by the business owner  Iterative process melding business requirements with authority, organization and application definitions  Initial seeding of top level authority  Web-based application to facilitate assignment of authority for managers Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to:

What’s underneath  New ERP implementations  Automated identity management and service provisioning  A set of registries that manifest the common, aggregated view of person, organization and authority data  Data administration function  Clear management support for the registries as the common integration point Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to:

Questions? Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: Because you may have titles that are two lines, the horizontal red bar is not part of the master slide. You can copy and paste it on each slide or you can choose “Duplicate Slide” from the Insert menu. You may select and reposition the horizontal bar as necessary. Remember, if you have suggestions for improving this template, please send mail to: