Administrative Access to End User Computers Standard


Application


This standard applies to all staff members of the University community. It applies at the University or elsewhere, and refers to University-owned end user computers that have been primarily assigned for the use of an individual staff member. It excludes servers, shared computer labs, hot-desks, and mobile devices.

Purpose


The purpose of this standard is to ensure appropriate and consistent delegation of administrative access to End User Computers used by Staff (hereafter referred to as Staff computers).

Standards


Exception Management

1.    Where Administrative Access has been granted, a record of this must be kept in an appropriate register for auditing, reporting and review purposes

Note: Guidance on the  preferred method for this is available

2.    Any staff member granted local administrative access must be shown the End User Computing Technical Standard and agree to not take any action to disable, remove or interfere with any standard listed in that document

3.    The acceptance of this term must be recorded by the IS Manager


Administrative Access

4.     Academic Staff, Professional Staff and Research Students shall not have Administrative Access to their Staff computers

5.     Administrative access may only be granted where one of the following exceptions apply:

  • Where staff are required to use specialist applications which require administrative access in order to function correctly
  • Where staff carry out IT development work involving software and/or hardware ( and this is as part of research or teaching activities in the case of Academic Staff)
  • To assist requirements for travel and mobility
  • Where staff perform other specialist roles where the IS Manager deems that the nature of their work requires Administrative Access

6.     Administrative Access is only to be granted at the discretion of the IS Manager

Definitions


The following definitions apply to this document:

End User Computers refers to a University-owned Apple Mac or Windows based computer used by an IT end user. It includes both desktop and laptop computers but excludes iOS based devices (e.g. iPhones and iPads) and servers

Staff computer is an End User computer assigned primarily for the use of an individual staff member

Administrative Access is the highest level of permission that can be granted to a computer user. Sometimes this is known as “Administrator” or “root”. This level of permission allows the user to install software and change global configuration settings

Professional Staff are people employed under the Professional Staff Collective Agreement or an equivalent individual employment agreement. Also includes people not covered by an employment contract but who, for the purposes of providing service, are treated in the same manner as Professional Staff

Academic Staff are people employed under the Academic Staff Collective Agreement or an equivalent individual employment agreement. Also includes people not covered by an employment contract but who, for the purposes of providing service, are treated in the same manner as Academic Staff

IS Manager is the person, or their delegate, with overall responsibility for the provision of IT support for End User Computers in the relevant area of the organisation

Document management and control


Owned by: Director Organisational Performance & CIO

Content Manager:  Associate Director, ITS Strategy and Design

Approved by:  Director Organisational Performance & CIO

Date approved: 6 August 2015

Review date: 6 August 2017