About this requirement
Date of last update:
May 25, 2024
Requirement Statement
The College manages a large collection of servers, workstations, virtual machines, mobile devices, cloud services, and networked applications. The management of accounts on these systems will follow all IU computing policies and industry best practices, including:
- End-User accounts on servers, workstations, and virtual machines will use IU ADS for authentication when possible.
- Non-IU personnel needing accounts on College servers, workstations, and virtual machines will be added only after the creation of an IU Affiliate or Academic No-Pay account so the user has an IU username and ADS identity.
- When a group account owner requests addition of users to an existing group, College IT will request confirmation from the group owner that all existing group members should remain and will remove any members identified as no longer belonging in that group.
- Membership requests for group accounts must come from, or be approved by, the group account owner.
- User accounts will be removed within 1 month of when the IU login is disabled.
Exceptions to Requirement
Given the unique computing requirements of computing research being done within the College, systems may need to run operating systems and software not supported by the College IT group. Such cases are governed by the IT Requirement: Administrator Access and Self-Managed Systems and local accounts on such systems might not be linked to IU ADS. In such cases, passphrases that meet IU passphrase requirements for length, complexity, and expiration will be used.There are limited cases when the local College account for a user is needed after the IU account is disabled (eg. continued research collaboration after a student graduates). In such cases, the sponsorship of an active member of the faculty is required and will be reviewed at least annually.
Procedures
- College Personnel Change Checklists - New Hire (Pending)
- College Personnel Change Checklists - Leaving (Pending)
References:
- How do I get detailed information about my Linux account?
- College account information when leaving IU
- IU Policies: IT-03 elegibility to use information teachnology resources
- IU Policies: IT-18 computer and network accounts administration
- IU KB: At IU, what is the access management systems (formerly the account managment service)?
- IU KB: IU account types and abilities