|
POLICY:
|
MSU Extension centrally maintains a number
of servers that house databases, Web pages, the EIS reporting system,
and organizational data systems. System integrity and security and
network protection are critical to the system. It is incumbent upon MSU
Extension to maintain confidentiality of administrative and management
information, which necessitates limited access to these servers.
|
|
If/when
an MSUE staff member desires user access to an MSUE server beyond that
normally appropriate and required for their current job assignment and
responsibilities, the following steps should be followed:
- Staff member visits with
his/her immediate supervisor regarding his/her need. The staff member
will provide a short, written description outlining why server access
is necessary. If the supervisor concurs with the request, proceed to
step 2.
- Staff member and/or
supervisor visit with regional director (for field staff), department
chairperson (departmental specialist), or MSUE Associate Director
(program and other on-campus staff). Regional director, department
chairperson, or associate director will concur with or deny the
request.
- If the regional director,
dept. chair, or associate director concurs with the request, he/she
should make a written request outlining the specific project for which
server access is needed, including audience, scope, time-line,
collaborators and other pertinent details of the project. The request
should be signed by both the staff member and the requesting supervisor
(regional director, dept. chair or associate director) and submitted to
CIO, ANR Technology Services.
- Requests for server user
access will be reviewed and granted or denied by the CIO, ANR
Technology Services. The CIO of ANR Technology Services will determine
terms of access.
- The regional director and staff member
will be notified of the decision in writing within 30 days of receipt
of the request. If access is granted, such communication will include
information about what server is to be utilized and how access can be
gained. Denials may be appealed to the MSUE Director.
Additional
Considerations:
· It needs
to be clear that access for county or event WebPages and staff email
are routine and that these are not subject to this server access
policy. Server access, in this context, involves the development of a
website or application for which no existing or routine resource is available.
· At
no time may usernames or passwords be shared, passed-down, or
temporarily given to other staff members. If an employee has left
MSUE, notify support@anr.msu.edu, and that
account will be disabled. If the successor to that person needs
individual access, include that information in the e-mail and it will
be granted. If the person requesting new access in this case is
replacing another employee, the steps above may be skipped unless
determined as a special case by the CIO.
· System integrity
and security and network protection concerns require that on-campus
staff administer all MSU Extension servers physically located on
campus. Field staff may request user-level access only.
|