1.0 PURPOSE
This procedure outlines the process for obtaining administrative rights on a College owned device and equipment.
2.0 SCOPE
The procedure applies to all users of information technology within the College.
3.0 PROCEDURE
User access rights are driven by a “Least Privilege” model. Least Privilege is established as the permission provided to the minimal required access by users based on roles, responsibilities and job description guidance.
Maintenance and support of all college computers is the sole responsibility of the Information Services (IS) Department. All other individuals are prohibited from installing or modifying computer hardware or software on college owned computers unless prior authorization has been granted by the Chief Information Officer (CIO), or designee, within the IS Department.
In order to reduce the risks associated with malicious software compromising College systems, non-licensed installs, or changes to configurations, College computers are deployed with basic user rights.
Under special circumstances, some employees may require local administrative privileges. Special circumstance may include:
- Where administrative rights are required to access and use certain software which otherwise is unable to be reasonably supported through IS administration.
- When an employee frequently works away from campus and requires local administrative rights to carry out duties.
- Requirements to complete specific job functions and tasks associated with job description and duties.
Employees may request administrative rights for their College issued device by filling out a Computer Administrative Rights Request Form available from the Support Center. The employees will need to explain the request for administrative rights. Signoff review and approval is required from the data manager/immediate supervisor, respective President’s Staff member and the CIO on the request. Data managers responsibilities follow the same expectations identified in Procedure 3102 Access Control with request and approval of employee/subordinate access.
As a condition of receiving administrative rights, the employee must agree to the terms on the Computer Administrative Rights Request Form and comply with all college expectations, behavior, ethics and standards while maintaining such rights. Employee administrative rights will be reviewed periodically by IS and subject to access removal if conditions warrant.
Information Services may revoke administrative rights from any employee at any time, for any valid reason, and without prior notice at the direction of the College President or CIO.
