Simple Solution. Brighter Futures. TEXAS STUDENT DATA SYSTEM TEAL for TSDS and the TSDS Portal Roles

Simple Solution. Brighter Futures. TEXAS STUDENT DATA SYSTEM TEAL for TSDS and the TSDS Portal Roles

Course Agenda 2 What is TEAL? How to Request a TEAL Account How to Request Access to TSDS Applications TSDS Portal Roles TEAL Service Accounts

TEAL 3 TEAL Texas Education Agency Login A single sign-on that provides users access to many TEA applications Secure authentication ensures only authorized users can access the applications Users must first create a TEAL identity and then request account access to the specific applications needed

4 Requesting a TEAL User Account (TEAL ID) To begin a request for a TEAL ID, the user must click the link on the TEAL login page. https://pryor.tea.state.tx.us/

TEAL User Profile 5 A TEAL ID is created when the user completes and submits the TEAL User Profile.

TEAL Login Page 6 https://pryor.tea.state.tx.us/

TEAL Security Questions 7 After initial log on to TEAL, the user must change their password, agree to assurances (every 30 days) and answer security questions: The user must then request account access.

TEAL Account Access and Approval Process 8 Once a TEAL ID is created, the user must request access to the specific TEA applications to which they need access If a request for account access is not made within 60 days, the TEAL account is inactivated (the user will get email notification each day for 7 days before the inactivation occurs) Requests for account access must first be approved by the Organization Approver (Superintendent, ESC Director, or designated alternate; this also may be a Limited Approver) if no action is taken within 5 days the request is rerouted to the alternate approver (if the organization has one). If no action by the alternate within 5 days, the user gets an email notification & must resubmit the request. Once requests are approved at the organization level, they are routed to the TEA Service Approver for approval

9 Requesting Access to TSDS Portal Applications

Requesting Access to Applications 10 The user must click on Apply for Access to initiate the account request process.

Requesting Access to TSDS Applications 11 The user must select Request New Account and then select TSDS Portal

Add Access 12 The user must click on Add Access

Add Access 13 The user must click on Add Access

Enter Employing Organization 14 The user must enter their Employing Organization and select the roles they need:

15 Select TSDS Portal Roles

16 Select TSDS Portal Roles

Enter Additional Information 17 The user must enter additional information: Requested Organization (required for most TSDS roles) Unique ID (required for LEA Dashboards roles) After the request is submitted, it is routed to all Approvers for organizations entered on this screen.

18 TSDS Roles

19 TEAL TSDS Portal TSDS Portal Roles

TSDS Portal Roles 20 Role studentgps Dashboards studentgps Dashboards Configurator ODS Campus Data Loader ODS Data Loader Description An LEA authorized TEAL role for access to the Dashboards. For each user, it is mapped to one of the 7 local Dashboards roles. Access to TSDS with this role must be approved by the LEA Superintendent or designee. May be requested through traditional TEAL process or the LEA may opt for automated provisioning. A temporary LEA authorized role that allows the user to configure LEA goals and provision accounts for other LEA users. Must be selected with the studentgps Dashboards User role. Corresponds to the local System Administrator role in the Dashboards usually for the LEA Dashboards or Data Steward. Access to TSDS with this role must be approved by the LEA Superintendent or designee and Approver enters the expiration date. An LEA authorized role for the scheduling and loading of campus data into the escholar data warehouse. Targeted users: Campus Data Steward or Campus PEIMS Coordinator. An ESC/LEA authorized role for the scheduling and loading of LEA data into the escholar data warehouse. Targeted users LEA: LEA PEIMS Coordinator and/or Data Steward; Targeted users ESC: Technical and/or PEIMS Champion.

TSDS Portal Roles 21 Role Uniq-ID Campus Uniq-ID LEA Uniq-ID Search TIMS LEA Support TIMS ESC Support PEIMS Campus Submitter PEIMS Data Submitter PEIMS Data Schedule/Promoter (LEA/ESC) Description An LEA authorized role providing search and update access to Unique ID at the campus level. An LEA authorized role providing search and update access to Unique ID at the LEA level. An authorized role providing search-only access to Unique ID at the statewide level. Role designed for LEA staff providing TSDS support for their own LEA. Access to TSDS with this role must be approved by the LEA Superintendent or designee. Role designed for ESC staff providing TSDS support for one or more LEAs. Access to TSDS with this role must be approved by the LEA Superintendent or designee. An LEA authorized role providing the ability to load, validate and view PEIMS data and reports for campus level data to the PEIMS Data Mart. Targeted users: Campus Data Administrator. An ESC or LEA authorized role that will allow the user the ability to load, validate and view PEIMS data and reports. Targeted user LEA: PEIMS Steward; Targeted users ESC: Technical and/or PEIMS Champion. An ESC or LEA authorized role for scheduling and promoting of ESC, LEA and/or campus level data to the PEIMS Data Mart. Targeted users LEA: PEIMS Steward; Targeted users ESC: Technical and/or PEIMS Champion.

TSDS Portal Roles 22 Role PEIMS Data Completer PEIMS Data Approver (LEA/ESC) PEIMS Data Accepter (ESC) FERPA Policy Admin Description An ESC or LEA authorized role of a user that can load, view, report, set as complete, and lock the data. Targeted user LEA: PEIMS Steward; Targeted user ESC: PEIMS Champion An ESC or LEA authorized role that will allow the user the ability to view reports and approve or reject a PEIMS data collection. Targeted users: Superintendent or ESC Executive Director An ESC authorized role that will allow the user the ability to view, run reports, and approve or reject a PEIMS data collection. Targeted users: ESC Data Accepter An LEA authorized role providing the ability to configure FERPA policy through the TSDS solution. Targeted users: LEA/ESC FERPA administrator and Data Steward.

23 ODS Data Loader Role

PEIMS Roles 24 TEAL, TSDS, PEIMS Rolls Permissions and Guidance Teal Access Roles Default permissions Job Title (this is only guidance) PEIMS Campus Submitter Schedule, Promote, Data Search, Roster Search, Validations, Reports, Data Downloads, Mark CAMPUS Data Ready Campus level data only PEIMS Campus Approver Data Search, Roster Search, View Accepted Reports, Mark CAMPUS Data Ready Campus level data only LEA Principal PEIMS Data Sched/Promoter PEIMS Data Submitter Schedule, Promote, Data Search Promote, Validate, Data Search, Roster Search, Data Downloads, Verify Data, Reports PEIMS Data Completer PEIMS Data Approver Promote, Validate, Complete, Data Search, Roster Search, Verify Data, Data Downloads, Lock data, Configure Notification, Reports Approve, Data Search, Roster Search, Request Extension, Reports ESC PEIMS Coordinator (TSDS PEIMS Champion), LEA PEIMS Coordinator (LEA PEIMS Steward) Superintendent (TSDS Executive Steward), ESC Executive Director (TSDS Executive Sponsor) PEIMS Data Accepter Accept, Data Search, Roster Search, Data ESC PEIMS Coordinator (TSDS Downloads, Region-wide Data Downloads, Data PEIMS Champion) Collection Monitor, Reports, Configure Notifications, Access LEA data, Data collection Monitoring ODS Data Loader An ESC/LEA that is authorized for scheduling or loading of data into the data warehouse ESC PEIMS Coordinator and Data Steward/LEA PEIMS Coordinator and Data Steward.

25 TIMS Support

26 TSDS Service Accounts

TSDS Service Accounts 27 TSDS has a web service available for Unique ID (optional) and secure FTP (sftp) for the Data Transfer Utility (DTU) (required) For security purposes, it is necessary to authenticate each time a user accesses the services by requiring a user name and password At least one user within the organization must be set up as a Service Account Manager (SAM) to manage service accounts for the organization Each district, charter school, or other user organization must set up at least one service account for Unique ID and DTU if they re going to use the above mentioned features Service account credentials are entered in the application that requires them

Service Account Managers 28 These users manage service accounts for the organization. This includes the ability to: Request new service accounts Reset service account passwords (required yearly) Delete service accounts

29 Requesting Service Account Manager (SAM) Status To request SAM status, the user must select Edit My Profile

Requesting SAM Status 30 Click the Service Account Manager Status link.

Requesting SAM Status 31 The user must click Request Service Account Manager Status

Requesting SAM Status 32 In the Service Account Manager Details popup the user must enter the Organization for which they are requesting SAM status and click Submit:

SAM Status Approval Process 33 Requests for SAM status must be approved by the Organization Approver

Managing Service Accounts 34 Once a user has SAM status, they can manage service accounts, by selecting Manage Service Accounts

Request Service Account 35 Click Request New Service Account

Request Service Account 36 Select the application from the Application dropdown enter an Administration email address (optional) and click Submit:

Request Service Account 37 A confirmation message is displayed:

Service Account Approval Process 38 Requests for Service Accounts are sent to the Organization Approver for approval If approved, the user who submitted the request receives two separate email notifications (one with the service account user ID, and the other with the service account password) These credentials must be entered into the application that requires this access

Resetting Service Account Passwords 39 Any user with SAM status can reset a password for a TSDS service account by checking the box associated with the service account, selecting Reset Password and clicking OK on the popup. When this action is performed, all service account managers for the organization receive an email with the new password for the web service. All software applications that were using the previous password will not function until the new password is provided within the application.

Deleting Service Accounts 40 Any user with SAM status can delete a service account by checking the box associated with the service account, selecting Reset Password and clicking OK on the popup. The requestor and all service account managers are notified by email when a service account is deleted. Any software application that is using the web service credentials associated with a deleted service account will no longer be able to use the web service in its processing.

Revoking SAM Status 41 Only Computer Access at TEA, or the user with Service Account Manager status, can revoke that status (no one at the organization can revoke another s SAM status) If it is necessary for an organization to terminate Service Account Manager status for a former employee or other user, the Organization Approver must contact Computer Access at computer.access@tea.state.tx.us.

How to Revoke SAM Status 42 A user with SAM status, may revoke it by: Clicking on Edit My Profile Clicking on Service Account Manager Status

How to Revoke SAM Status 43 Clicking Revoke Selected Status and clicking OK on the popup:

44 Questions?