Access Control and Employee Off Boarding
description
Transcript of Access Control and Employee Off Boarding
![Page 1: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/1.jpg)
Access Control and Employee Off Boarding
Melody Wayman
March 4th, 2014
![Page 2: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/2.jpg)
OK SNUG | March 4, 2014
About Us
• Oil and gas exploration and production company• Split from Williams Companies in January 2012• Headquartered in Tulsa with operations in Colorado, New Mexico, North Dakota, Pennsylvania and Wyoming• Approximately 1600 users• Copied Williams ServiceNow instance prior to spinoff
![Page 3: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/3.jpg)
OK SNUG | March 4, 2014
Call to Action
• Recreate CAMS – Williams Access Management System
• Record enabling and disabling of user application access
• Handle unique approvals and fulfillment tasks
• Import existing user access
• Automate employee off boarding process
![Page 4: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/4.jpg)
OK SNUG | March 4, 2014
How did we do it?
•Service Catalog = Access management system
•Each item has a corresponding ‘disable’ item
•Imported over 24,000 user access records to date
•Termination request – automates off boarding process
![Page 5: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/5.jpg)
OK SNUG | March 4, 2014
Application Access
![Page 6: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/6.jpg)
OK SNUG | March 4, 2014
Access Profile
![Page 7: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/7.jpg)
OK SNUG | March 4, 2014
Disabling Application Access
![Page 8: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/8.jpg)
OK SNUG | March 4, 2014
UI Action
![Page 9: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/9.jpg)
OK SNUG | March 4, 2014
How does this work?
•RITM0077399 granted Aaron Hardison SW Viewer rights in SolarWinds•RITM0088402 was submitted to disable this access
•Aaron’s profile will show this access until the disable request is complete
![Page 10: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/10.jpg)
OK SNUG | March 4, 2014
How does this work?
•RITM0088402 was closed complete•Both requests are set to Access = Disabled
•Aaron’s profile no longer shows SolarWinds access
![Page 11: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/11.jpg)
OK SNUG | March 4, 2014
Employee Off Boarding •Streamline process and eliminate duplicate work•Document removal of access•Simplify HR interfaces
![Page 12: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/12.jpg)
OK SNUG | March 4, 2014
Termination Workflow
![Page 13: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/13.jpg)
OK SNUG | March 4, 2014
Termination Subflow
![Page 14: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/14.jpg)
OK SNUG | March 4, 2014
Subflow Script
![Page 15: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/15.jpg)
OK SNUG | March 4, 2014
How does this work?•Queries user access•Creates individual requests to document removal of access•Saves time and eliminates human error•Simplifies audit trail
![Page 16: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/16.jpg)
OK SNUG | March 4, 2014
Next Steps
•Employee On Boarding
•Automating software entitlements
•Orchestration• Enabling/disabling network access• Creating email accounts• Application access fulfillment
![Page 17: Access Control and Employee Off Boarding](https://reader035.fdocuments.net/reader035/viewer/2022062218/56815ac1550346895dc88747/html5/thumbnails/17.jpg)
OK SNUG | March 4, 2014
Questions?