Viewable by the world
Group Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: itfaq-editors ,  anonymous ,  itfaq-MFA-EDITORS ,  itfaq-itss ,  all-lbnl-users ,  mpsg-mpsg-helpdesk ,  mpsg-staff ,  itfaq-editors-lite ,  google-collab-documentation-management , 
Can EDIT the space: itfaq-editors-lite ,  itfaq-editors ,  mpsg-staff ,  google-collab-documentation-management ,  mpsg-mpsg-helpdesk , 
Can ADMINISTER the space:

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Free for Lab employees & affiliates.
  • Created only if requested. (Ideally, a new employee or someone in the new employee's department will request an account before a new employee's first day of work.)
  • Usually created within 24 hours of the request. (A person must be in the Berkeley Lab Identity/LDAP directory Enterprise Directory before we can create a Google Apps account. The directory receives information about new employees and affiliates once per day from the Human Resources Data Warehouse.)

...

Passwords: New employees typically (ideally) receive their LDAP Enterprise Directory passwords from the Badge Office when they receive their badges. Some call the Help Desk for a password.  Passwords are set to expire every 180 days.  Notifications are sent out 28 days before, 14 days before and every day within 7 days of expiration. There is no grace period login - the  Help Desk will have to intervene if all notifications are ignored.  (Active Directory Passwords also are set to expire after 180 days - notification is provided as part of membership to AD when you login close to the expiration date).

...

Expand
titleClick here to read more about our account termination process...

The Termination Notification System (TNS) manages your Berkeley Lab Identity/LDAPEnterprise Directory account, which authenticates to Google Apps ( Gmail, Calendar, etc) , eRoom, Webspace and a variety of business applications (such as JHQ and HR Self-Service). TNS also manages your IT Division Active Directory account. The TNS initiates the following actions based on status code changes in the Human Resources Information System (HRIS):

  • An email notifies the following groups that the terminated employee’s account will be disabled two business days and then deleted 30 business days after the effective date of termination in HRIS:
    • Employee’s Supervisor. The supervisor can request a change in the timeline or special handling of data associated with the accounts via a web-based form.
    • Employee
    • Applicable Division termination email list. This is in the form of HRTERM-XX, where XX is the division or department. For example, HRTERM-IC is used for the IT Division. Click here for information on the HRTERM lists.
  • Another email notifies three mail lists: [email protected] (telephone services), [email protected], and [email protected].
  • Generates a Help Desk request to disable account two business days after the effective date of termination in HRIS:
  • Generates a Help Desk request 30 business days after the effective date of termination in HRIS. The ticket goes to each system administrator responsible for various computer services used by the terminated employee. The ticket notifies the administrator that accounts and data associated with the person will be deleted.

TNS-process.pdf: TNS Process Flow

...