1. Making Sense of Banner Security
Ed Siegle, Swarthmore College

2. Thank you for your cooperation
General Announcements:
Please turn off all cell phones/pagers
If you must leave the session early, please do so as discreetly as possible
Please avoid side conversations during the session
Questions will be answered …..
Thank you for your cooperation

3. CPE Credits - We’ve gone electronic!
To receive CPE credits for this session (if eligible), complete the CPE Attendance Form on the PABUG Annual Conference website
or via the PABUG conference app.
For additional questions please contact
Kim Fremont CPE - Coordinator

4. Overview
Banner security is extensive and cumbersome, wanted a way to streamline and simplify
Auditing purposes
Answer to liaison question “Who has access to what?”
How to group users with liaisons?
Distributed security, fully implemented, would be overkill for us
We are already using FGA, but what other features should we consider?

5. Distributed Security GSASECR access for specific users & forms
Create new user (bansecr_username)
GSADSUM – assign privileges, grants, restrictions
GSADSEC – associate groups with the user
Drawbacks for us
More user accounts to maintain
Don’t want to give GSASECR access, even minimal
Still doesn’t solve the streamline issue

6. Distributed Security cont’d
Even though the full implementation was not feasible for us I did see some things that we could use
Security Groups for users and liaisons would allow for one to one mapping
Application Express (APEX) would be our delivery solution to present the information in a concise and usable format for our liaisons

7. Grouping users with liaisons
Form GSADESC – Security Groups tab
Created a security group for the liaisons, LIASON, and assigned each departmental power user to this group.
Created security groups for all college areas
ADMISSIONS, ALUMNI, FINAID, FINANCE , etc. – 37 in total

8. Grouping users with liaisons cont’d
Form GSADESC – Group Details tab
Assigned each liaison to a departmental group.
Assigned each user, based on Banner From permissions, to at least one departmental security group.
All subsequent users can be assigned to security groups within GSASECR, Banner Rules

11. Making sense of it all…

12. Grouping users with liaisons cont’d
The following sql will return the liaisons for the FINAID (Financial Aid) security group :
SELECT DISTINCT gurugrp_user
FROM spriden, gobeacc, bansecr.gurugrp
WHERE spriden_pidm = gobeacc_pidm
AND gobeacc_username = gurugrp_user
AND spriden_change_ind IS NULL
AND gurugrp_sgrp_code = 'FINAID'
AND gurugrp_user IN
(SELECT gurugrp_user
FROM bansecr.gurugrp
WHERE gurugrp_sgrp_code = 'LIASON')
ORDER BY 1;

13. Grouping users with liaisons cont’d
The following sql will return all users in the FINAID (Financial Aid) security group:
SELECT gurugrp_user
FROM spriden, gobeacc, bansecr.gurugrp
WHERE spriden_pidm = gobeacc_pidm
AND gobeacc_username = gurugrp_user
AND spriden_change_ind IS NULL
AND gurugrp_sgrp_code = 'FINAID'
ORDER BY 1

14. Oracle Account Summary

15. Oracle Account Summary cont’d

16. Banner Account Summary
In GSASECR, this layout would be two separate tabs

17. Banner Account Summary cont’d

18. Class Detail

19. Class Detail cont’d

20. All Users in Specific Class

21. All Users in Specific Class cont’d

22. Object Detail

23. Object Detail cont’d

24. Accounts Ready for Deletion

25. Accounts Ready for Deletion cont’d

26. Calendars
Banner Security provides the ability for date and time Banner access

27. Calendar cont’d
This sequence will allow Banner access only between the times of 8:00 AM and 7:00 PM Monday through Friday from June 5, 2014 through August 29, 2014.

28. Calendar cont’d
This sequence will disallow Banner access completely on Saturday and Sunday.

29. Calendar cont’d Users are associated to Calendars in GSASECR
Active From & To dates must be populated and To Date should be well into the future, otherwise user will have regular INB access (Defect?)

30. Summary Distributed Security may be an option
Security Groups allow for user/liaison mapping
We use APEX to deliver consolidated, scalable GSASECR reports
Calendars allow for Time/Date access restrictions

31. Swarthmore College
Ed Siegle

32. Open to the Floor
Questions
Comments

33. Please take time to complete our Conference and Session evaluations
Please take time to complete our Conference and Session evaluations. YOUR INPUT MATTERS!!!