Staff and Student Group Memberships in IDM Supervault

Question

What is the primary purpose and access provided by the Staff and Student groups in SuperVault?

Environment

• Supervault

Information

Staff Group Membership

Primary Purpose: The Staff group is a user security group used to flag individuals as staff members within SuperVault. This flag is replicated to both active directory domains (ad.grcc.edu and in.grcc.edu). Currently, the staff group is manually set, but it will eventually be replaced by the automated ActiveStaff group.

Permissions and Access Controls: Staff group members have access to various systems and applications, which include but are not limited to:

• Atrium Core SSO Login: Security control requiring an account in the system.

• Barnes Noble College SSO Login: Security control requiring an account in the system.

• Canvas Beta SSO Login: Security control requiring an account in the system.

• ClearCompany SSO Login: Security control requiring an account in the system.

• EAB Navigate (Staff tile): Users get shown the staff tile shortcut in myGRCC.

• GoFMX SSO Login: Security control requiring an account in the system.

• VMWARE Horizon: Access to the staff remote pool.

• KnowBe4 Training SSO Login: Security control requiring an account in the system.

• LinkedIn Learning: Access through the staff and student group.

• Zoom Phone SSO Only: Security control requiring an account in the system.

Student Group Membership

Primary Purpose: The Student group is a user security group used to flag individuals as students within SuperVault. This flag is replicated to both active directory domains (ad.grcc.edu and in.grcc.edu). Users are added once daily through an update job checking for the combination of Student Mailbox and Workstation Services entitlements. Manual additions can be done by Support Desk staff. The group will eventually be replaced by the automated ActiveStudent group.

Permissions and Access Controls: Student group members have limited specific access, as most resources used by students are also used by staff. However, one notable access is:

• Student E-mail shortcut tile in myGRCC: This shortcut is added by the student group.

Use Cases

• Staff Group Members: Typical tasks include logging into systems like Atrium, Barnes Noble, Canvas Beta, ClearCompany, EAB Navigate, GoFMX, VMWARE Horizon, KnowBe4, LinkedIn Learning, and Zoom Phone.

• Student Group Members: Primary task includes accessing the student e-mail shortcut tile in myGRCC.