Account and Access Reviews

Overview

On an annual basis, FAS Research Computing will send a spreadsheet of accounts that you have sponsored, and group memberships for groups you approve.  The intent is to identify sponsored accounts that may be disabled, and group memberships that may be removed.

Access Review Sheet

These sheets are named YourAccountName-access_date.xlsx.  They describe each member of each group you are an authorized approver for.  The intent is to identify any individuals who should no longer have access granted by the group.

What FASRC Needs

Review each line item.  If any user should be removed from a group, provide FASRC the Group and Username to remove.

Access Review Fields

Many of these are self-described.  For further clarification:

• Fields describing the group you are reviewing:
  • Group – Name of the group
  • GroupPortalDescription – Description of the group from our Portal
  • GroupADDescription – Description of the group from our identity system
  • OtherApprovers – Other authorized approvers for this group
• Fields describing a member of the group you are reviewing:
  • Username – a member of this group, either:
    • Username for the member of this group, or
    • Name of another group granted access to the group you are reviewing (indicated via [nested group])
  • First
  • Last
  • Mail – Mail address on record in our identity system
  • Expires – Date account is set to expire, if any
  • PrimaryGroup – Primary group (generally, their lab’s group) of the user
  • Title
  • Department
  • School
  • IsFASRCAccount – Whether this is a FAS RC Staff account (i.e. you can ignore)
  • Created – Date the account was created
  • LastLogonDate
• Fields used by FASRC to debug, you may ignore these
  • DBGManagedBy
  • DBGPortalGrant
  • DBGApprovesMembership
  • DBGManagedByViaGroup

Account Sponsor Sheet

These sheets are named YourAccountName-sponsor_date.xlsx.  They describe each account you are the sponsor of.  The intent is to identify any account you no longer sponsor, and thus, which accounts should be disabled.

What FASRC Needs

Review each line item.  If you no longer wish to sponsor a user, provide FASRC the Username to disable.

Account Sponsor Fields

Many of these are self-described.  For further clarification:

• Username – Username for the member of this group
• First
• Last
• Mail – Mail address on record in our identity system
• Expires – Date account is set to expire, if any
• PrimaryGroup – Primary group (generally, their lab’s group) of the user
• Title
• Department
• School
• Created – Date the account was created
• LastLogonDate