《《Intranet Permissions》.ppt

Intranet Permissions Current Identity, Access Management and Entitlement service Background – UPI, Services System and Access Intranet File and its uses How it works How to use them Departmental email addresses UPI and Services System New UPI went live from January 2005 Old UPI runs in parallel to be decommissioned this year Provides a single ‘view’ of core person information Name Department Association i.e. staff, student, visitor Start date and end date Telephone Email and UserID Data available in real-time or batch update UPI data used to determine eligibility for some services Services system developed to enable ‘visitors’ to UCL to be assigned a UPI On-line requests for services for people at UCL UPI Architecture ‘Intranet File’ and its uses What is it? Form of automated access control to determine eligibility to access resources Used Group permissions for Departmental websites Eligibility for access to Staff WTS Eligibility for access to restricted software on Staff and Cluster WTS Eligibility for access to Library eJournals Departmental email lists UPI data UserID Department Hierarchy Active user (end date in the future) Report updated daily How does it work? Why the changes? Department list used for defining the group names is maintained by Human Resources. In 2005, the introduction of a new HR personnel system meant that the organisation of departments underwent some significant changes which are yet to be fully reflected in the Intranet group list. There has been a greater demand for access to resources by different groups of people affiliated with UCL - for example, visitors, alumni, short course students. Old and new group names running in parallel for two years Benefits of changes Keep Intranet group access up-to-date so group names need to reflect changes in the organisation structure Provide granularity to groups by reflecting different types of user who may need to be granted access portions of the Intranet. Addition of roles based access