Search
Topics
  Create an account Home  ·  Topics  ·  Downloads  ·  Your Account  ·  Submit News  ·  Top 10  
Modules
· Home
· Content
· FAQ
· Feedback
· Forums
· Search
· Statistics
· Surveys
· Top
· Topics
· Web Links
· Your_Account

Current Membership

Latest: RSchindle
New Today: 44
New Yesterday: 89
Overall: 139462

People Online:
Visitors: 55
Members: 2
Total: 57 .

Languages
Select Interface Language:


Major ITIL Portals
For general information and resources, ITIL and ITSM World is the most well known for both ITIL and ITIL Books. A shorter snapshot approach can be found at ITIL Zone

Related Resources
Service related resources
Service Level Agreement
Outsourcing

Note: ITIL is a registered trademark of OGC. This portal is totally independent and is in no way related to them. See our Feedback Page for more information.


The Itil Community Forum: Forums

ITIL :: View topic - User account requests
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

User account requests

 
Post new topic   Reply to topic    ITIL Forum Index -> The ITIL Service Desk
View previous topic :: View next topic  
Author Message
Flip
Newbie
Newbie


Joined: Jun 07, 2006
Posts: 6
Location: Amsterdam

PostPosted: Thu Jun 08, 2006 1:26 am    Post subject: User account requests Reply with quote

Hello all,
I'm going through a lot of information now to change our business processes to become ITIL compliant.
One topic I just cannot find any information about is what to do with requests regarding user accounts; creating new, changing details, changing access permissions, deleting accounts.
This is a typical part of IT so I would want to see it explicitly mentioned in our processes. Is it so typical that it is a service request? Would it be considered a change because it changes the CMDB (linking user to new system that he gets access to)? Or an incident because it is actually not changing the functionality of any system?
The closest topic I can find is "password reset". This is also a call regarding a change to someone's account. But this doesn't really change anything. I did see many opinions that SRs could be handled using the IM process. If more people will confirm that, that is what I will propose and we could also incorporate all other user account requests in there.

Regards,
Philip.
Back to top
View user's profile MSN Messenger
Ed
Senior Itiler


Joined: Feb 28, 2006
Posts: 411
Location: Coventry, England

PostPosted: Thu Jun 08, 2006 4:59 pm    Post subject: Reply with quote

hi Flip

we have these kind of requests set up as Standard Changes as they are low risk, able to be proceduralised, and the steps followed are the same each time. Your Change Manager can then pre-authorise the Service Desk/ Sys-Admin team to action them without anything more than notification that said change has taken place.

From my perspective as a Change Manager, I want to see that a change has taken place, but do not need to invoke the full Change procedure every time 'housekeeping tasks' like these are performed.

I hope this helps.

Regards

Ed
Back to top
View user's profile
Flip
Newbie
Newbie


Joined: Jun 07, 2006
Posts: 6
Location: Amsterdam

PostPosted: Thu Jun 08, 2006 5:49 pm    Post subject: Reply with quote

Thanks, Ed. Good to know that it is possible.
Now I'm really curious because there seem to be 2 camps; the UserAdmin=IM, and UserAdmin=CM camp. Why is it so ambiguous? Isn't there even a best practice around it?
Or better yet; if some kind of an authority says "It's this..." then I'll just flaunt that and the discussion should be over. Smile

Regards,
Philip.
Back to top
View user's profile MSN Messenger
rjp
Senior Itiler


Joined: Mar 12, 2005
Posts: 255
Location: Melbourne, Australia

PostPosted: Thu Jun 08, 2006 11:13 pm    Post subject: Reply with quote

Flip,

don't just look at it as a definition problem. Consider it also in terms of:

What overall objectives the activity is supporting.
What the trigger for the activity is.
What management controls need to be applied, eg. where and why managers may need to intervene.
Where the activity needs to be reported - in which stats it should be included.

From the point of view of definition alone it does seem to be a little ambiguous where these account activities go.

But they are responding to a disruption to a clients access to a Service or potential wiat for access to a service, and the activity is directed to getting the user operational asap.

So trigger and objective = Incident Management.

They don't require approval (well the should not). No new class of CI is created. No existing class of CI is altered. There are no capacity or availability issues, no risk assessments to do, and no requirement for forward schedulling.

There is however an imperitive that the activity be undertaken within a certain time frame, and lapse should trigger supervisory attention.

So management controls are looking decidedly Incident Management.

As to reporting well that naturally follows out of the activity described above and you will want to include this activity in the reports disclosing the effectiveness of your Service Desk and the IM process.

So to the final ambiguity: Configuration management. Isn't adding or deleting an account altering your infrastrucutre (and therfore your CMDB)? I would be very surprised if most CMDBs had individual accounts in scope. But let's say they are.

The request for access to the service, (create an account) or even removal (delete an account) is still a service request. If this is in scope of configuration management then the way the service request is met is be raising a standard RFC.

Personally I think that's overdoing it a bit, but that would be the straight up and down by the book way of doing it.
Back to top
View user's profile Send e-mail AIM Address Yahoo Messenger
MonkeyWrinkles
Newbie
Newbie


Joined: Jun 07, 2006
Posts: 3

PostPosted: Wed Jun 28, 2006 4:55 am    Post subject: Reply with quote

Just wondering, we get requests in "bulk" at times for new user accounts where there are 15+ accounts.

For you all, do you (A) create 1 ticket for this request of 15 accounts, or (B) create 15 tickets for this request. Again, assuming it was one person asking for these accounts on behalf of the others.

What works for you?
Back to top
View user's profile
Ed
Senior Itiler


Joined: Feb 28, 2006
Posts: 411
Location: Coventry, England

PostPosted: Wed Jun 28, 2006 6:12 pm    Post subject: Reply with quote

Hi Monkeywrinkles

We create one ticket as it is in effect one request and one Release note against the Standard Change.

Regards

Ed
Back to top
View user's profile
Display posts from previous:   
Post new topic   Reply to topic    ITIL Forum Index -> The ITIL Service Desk All times are GMT + 10 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Powered by phpBB 2.0.8 © 2001 phpBB Group
phpBB port v2.1 based on Tom Nitzschner's phpbb2.0.6 upgraded to phpBB 2.0.4 standalone was developed and tested by:
ArtificialIntel, ChatServ, mikem,
sixonetonoffun and Paul Laudanski (aka Zhen-Xjell).

Version 2.1 by Nuke Cops 2003 http://www.nukecops.com

Forums ©

 

Logos/trademarks property of respective owner. Comments property of poster. Rest 2004 Itil Community for Service Management & Foundation Certification. SV
Site source copyright (c)2003, and is Free Software under the GNU / GPL licence. All Rights Are Reserved.