Administrative Access to End User Computers Standard
This standard applies to all staff members of the University community. It applies at the University or elsewhere, and refers to University-owned end user computers that have been primarily assigned for the use of an individual staff member. It excludes servers, shared computer labs, hot-desks, and mobile devices.
The purpose of this standard is to ensure appropriate and consistent delegation of administrative access to End User Computers used by Staff (hereafter referred to as Staff computers).
1. Where Administrative Access has been granted, a record of this must be kept in an appropriate register for auditing, reporting and review purposes.
Note: Guidance on the preferred method for this is available.
2. Any staff member granted local administrative access must be shown the End User Computing Technical Standard and agree to not take any action to disable, remove or interfere with any standard listed in that document.
3. The acceptance of this term must be recorded by the IS Manager.
4. Academic Staff, Professional Staff and Research Students shall not have Administrative Access to their Staff computers.
5. Administrative access may only be granted where one of the following exceptions apply:
- Where staff are required to use specialist applications which require administrative access in order to function correctly
- Where staff carry out IT development work involving software and/or hardware ( and this is as part of research or teaching activities in the case of Academic Staff)
- To assist requirements for travel and mobility
- Where staff perform other specialist roles where the IS Manager deems that the nature of their work requires Administrative Access
6. Administrative Access is only to be granted at the discretion of the IS Manager.
The following definitions apply to this document:
End User Computers refers to a University-owned Apple Mac or Windows based computer used by an IT end user. It includes both desktop and laptop computers but excludes iOS based devices (e.g. iPhones and iPads) and servers.
Staff computer is an End User computer assigned primarily for the use of an individual staff member.
Administrative Access is the highest level of permission that can be granted to a computer user. Sometimes this is known as “Administrator” or “root”. This level of permission allows the user to install software and change global configuration settings.
Professional Staff are people employed under the Professional Staff Collective Agreement or an equivalent individual employment agreement. Also includes people not covered by an employment contract but who, for the purposes of providing service, are treated in the same manner as Professional Staff.
Academic Staff are people employed under the Academic Staff Collective Agreement or an equivalent individual employment agreement. Also includes people not covered by an employment contract but who, for the purposes of providing service, are treated in the same manner as Academic Staff.
IS Manager is the person, or their delegate, with overall responsibility for the provision of IT support for End User Computers in the relevant area of the organisation.
Key relevant documents
Include the following:
Document management and control
Owned by: Director Organisational Performance & CDO
Content manager: Associate Director, ITS Strategy and Design
Approved by: Director Organisational Performance & CDO
Date approved: 6 August 2015
Review date: 6 August 2017