Re: Multiple of Single User Accounts

[Daniel Bennett <dbennett () PCT EDU>]

A follow up question... For those who only use one account, do you do anything for those accounts when accessing 
sensitive information as part of their job function?

Dan


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Basgen, 
Brian
Sent: Wednesday, October 21, 2009 4:27 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Multiple of Single User Accounts

 We also do what Matt has indicated below with a single account, multiple roles, and a primary role.

~~~~~~~~~~~~~~~~~~
Brian Basgen
Information Security
Pima Community College
Office: 520-206-4873


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Matthew 
Gracie
Sent: Wednesday, October 21, 2009 1:20 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Multiple of Single User Accounts

Daniel Bennett wrote:
> What do you do when you have students who are also employees or vice
> versa?  Do you create two unique network and e-mail accounts for them or
> do they use a single account?

We use a single account. There are two attributes in LDAP, one of which
holds their primary role (staff, faculty, student, grad student, etc.)
and the second of which is a collection of all their roles.

-- 
Matt Gracie                         (716) 888-8378
Information Security Administrator  graciem () canisius edu
Canisius College ITS                Buffalo, NY
http://www2.canisius.edu/~graciem/graciem_public_key.gpg