Provisioning from the Security Officer’s Perspective

General Description

Security Officers approve or deny user access requests and MyGaDOE application permissions.  Users who are new to MyGaDOE will need both access to the MyGaDOE itself, permissions to access appropriate applications within MyGaDOE, and permissions to perform functions within each of these application that are necessary for their jobs.

All these accesses and permissions are determined by a combination of organization and application roles and are principally approved by the security officer.  However, when an application business owner requests it by adding their name to the business owner field for a specific application, then that business owner must also approve the user's access and permissions within their application.

Basic Process

From a security officer's perspective, the basic provisioning process proceeds as follows:

  1. When a user requests a MyGaDOE account or an update to an existing account, the system reads the organization information the user entered in his or her request and sends a MyGaDOE message to the designated security officer for that organization.  This message requests the security officer to approve or reject the request, and provides a link to MyGaDOE's Approval page for this purpose.

  2. Upon reading the message, the security officer clicks on the link and is taken to the page.

  3. The approval page allows the security officer to approve whatever element(s) of an application the user has requested.

  4. Once approved by the security officer, one of two things happens.  If no further approvals are required, the system sends an e-mail message to the user telling him or her that they are approved (or rejected if that is the case).  However, the business owner of the application for which permission is sought may have requested approval rights for the application by adding their name to the business owner field for that application.  In that case, a MyGaDOE message is sent to the appropriate business owner for approval.  Once the business owner approves (or rejects) the user's request, the system sends an e-mail message to the user telling him or her that they are approved (or rejected, if that is the case).

  5. This completes the security officer's responsibility for MyGaDOE approvals.

Basic Process

For specific step-by-steps about parts of the above process, please see the following information:

Click here to learn more about how a security officer approves or rejects MyGaDOE access requests.

Click here to learn about how a security officer adds or removes user MyGaDOE permissions.

Click here to learn about how to request changes to your account if you are a user.