Educause Security Discussion mailing list archives

Re: Privileged Users


From: Xavier Belanger <belangerx () CUA EDU>
Date: Fri, 18 Jun 2021 09:12:40 -0400

Hi,

Dr. Christopher Davis wrote:
Does anyone have a system in place (possibly a form with a policy backing it up) that you use to identify and approve “privileged users”

System administrators, engineers and the like are provided a secondary
account during the on-boarding process for that kind of purpose.

The regular account has no privileges, the secondary account is assigned
to the various groups providing access to applications, servers and
other services.

Then monitoring and reporting access is mostly a matter of listing those
secondary accounts.

Sincerely,
--
Xavier Belanger
Network Engineer III - CISSP
Technology Services
The Catholic University of America

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Current thread: