General discussion

Locked

Tracking Department Moves

By tr ·
Our company employs over 900 people. We have a hard time keeping track of employees as they move from one department to the another. As a person moves from one department to another it is necessary to change their permissions for computer login andprogram access. Currently we check each piece of software to determine whether or not a person has permission within that software and then change or deny permissions accordingly. I was curious as to how other companies were keeping track of something like this.

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

User Groups or OUs

by JackOfAllTech In reply to Tracking Department Moves

You should consider having each department as a distinct User Group with their own set of permissions. Then all you have to do is remove the employee from the old group and add them to the new group.

Ralph

Collapse -

Only part of the problem

by tr In reply to User Groups or OUs

This does not cover just access to MS Windows but about five other software packages such as a Point of Sale, Property Management, Gaming Operations, etc., each with its own sets of user permissions. We also want to create a trail as to where each has been. I realize that it is possible to establish a database, I was just curious as to what others may have done.

Collapse -

Management Problem

by timwalsh In reply to Tracking Department Moves

If I read your question correctly, it is not one of how to manage the actual permissions applied, as it is knowing when you neeed to change those permissions.

As I see, you can approach this one of two ways (NOTE: Neither one will be 100 percentsuccessful unless you have upper management "buy-in"):
1. In most companies, the one organization that almost always knows where everyone is is HR. Get together with HR and hammer out a policy whereby HR will notify IT whenever an employee switches departments. Be aware that this might meet with some resistance as it requires extra workload on the part of HR (remebering they need to notify you and actually following up with notification on a timely basis).
2. Put the monkey on the back ofthe department heads. It is probably in the best interest of the employees former department head that the employee no longer has access to data/ applications under his purview. Therefore he needs to notify IT when an employee moves elsewhere. Itis in the best interest of the gaining department head that his employees have access to the data/applications necessary to work efficiently. Therefore, the gaining department head needs to notify you any time he gains a new employee. Again, this is likely to meet with some resistance in that it will increase the workload of department heads to remember to notify you of employee changes. Also this route is more likely to need upper-management buy-in as these middle managers are more likely to bend upper management's ear if they don't like this process.

Hope this helps (and yes I am needling both HR and middle-managers just a little).

Back to IT Employment Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums