OIS. Account Management Group Administrators with Extended Features. Operating Systems & Information Services

Transcription

1 OIS Operating Systems & Information Services Account Management Group Administrators with Extended Features November 5 th, 2010 Paolo Tedesco Alexey Tselishchev Emmanuel Ormancey

2 OIS Contents What is Account Management New service that replaces CRA Goals Basic concepts Account types Mail policies Computing Groups administration Demo

3 OIS Goals Automate accounts lifecycle Match contract dates from Foundation Account and mailbox ready upon user arrival Disable and delete accounts when user leaves (after a grace period) NICE Account Users Office HR Registration HR Account Management Mailbox... ~5k users, 30k accounts

4 OIS Goals Self-service tasks for users Create additional accounts Edit some personal information Manage services and application subscriptions Standardize (and simplify) procedures End of affiliation Reminders for password expiration, computing rules Involve hierarchy Re-assign resources when user leaves Higher privileges to supervisors / team leaders

5 OIS Account types Primary (one and one only) Main account, used in daily work Automatic creation (unique login and ) Represents the person s identity Secondary (up to 5) Special personal account (test or admin) Belongs to a person Service (up to 20) Special, not personal (service or application) Assigned to a person, can be re-assigned

6 OIS Mail Policies No more GEM/PEM One address, several aliases Primary CERN employees Primary Contractors Secondary Service CERN Mailbox Default address Yes Can be removed Automatically generated No Can be added No External address Yes Chosen by owner Redirection Route to primary Forward to primary Can be reconfigured Add Yes Yes No Yes

7 OIS What is changing? HR Registration HR Database Service manager E-Groups App Single identity representation No application-specific accounts Unique authorization source Diverse and centralized authentication Account Management Applications Operating Systems Web

8 OIS Computing Groups Computing Groups migrated to E-Groups With static membership CG admins will decide how to manage the group: Static membership Dynamic criteria Both (nested groups)

9 OIS AFS Service User is member of CG => can access AFS Quota policies decided by AFS managers Up to 1GB: automatically approved More than 1GB (up to 2GB): approval from CG admins

10 OIS Schedule Running on a test domain for several months Opened for tests and feedback to some users Computing Group administrators Service managers Service Desk Production: 22 nd of November CRA remains as read-only, no longer updated Flyer for end-users by mid November

11 OIS Questions