Search
Topics
  Create an account Home  ·  Topics  ·  Downloads  ·  Your Account  ·  Submit News  ·  Top 10  
Modules
· Home
· Content
· FAQ
· Feedback
· Forums
· Search
· Statistics
· Surveys
· Top
· Topics
· Web Links
· Your_Account

Current Membership

Latest: EHoad
New Today: 10
New Yesterday: 53
Overall: 145931

People Online:
Visitors: 55
Members: 2
Total: 57 .

Languages
Select Interface Language:


Major ITIL Portals
For general information and resources, ITIL and ITSM World is the most well known for both ITIL and ITIL Books. A shorter snapshot approach can be found at ITIL Zone

Related Resources
Service related resources
Service Level Agreement
Outsourcing

Note: ITIL is a registered trademark of OGC. This portal is totally independent and is in no way related to them. See our Feedback Page for more information.


The Itil Community Forum: Forums

ITIL :: View topic - ID Creations/Access
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

ID Creations/Access

 
Post new topic   Reply to topic    ITIL Forum Index -> Change Management
View previous topic :: View next topic  
Author Message
dsemeniuk
Itiler


Joined: Feb 06, 2007
Posts: 41

PostPosted: Fri May 11, 2007 12:46 am    Post subject: ID Creations/Access Reply with quote

We are currently in project mode and in certain environments, users will need DatabaseIds or System Access IDs to connect to the database to query it or to run the application.

What process do you use? This is in testing environments.
Back to top
View user's profile
ranjithraghunathan
Itiler


Joined: May 09, 2007
Posts: 22
Location: Bangalore

PostPosted: Mon May 14, 2007 6:31 pm    Post subject: Reply with quote

Not sure where the question is focused on.
If this is the access rights issue, it should be Change Management.
Access ID requests and new access rights have to be strictly governed by Change Management team.

Can anyone shed more light along this line?
Back to top
View user's profile MSN Messenger
UKVIKING
Senior Itiler


Joined: Sep 16, 2006
Posts: 3313
Location: London, UK

PostPosted: Mon May 14, 2007 9:54 pm    Post subject: Reply with quote

This sounds more like security mgmt

If this is development work; then from an operational aspect.. Change does not care because the dev environment should be separate from the live

Is this about user IDs, passwords, and other user data about logging into systems

or

is this about network ACL, routing etc

The former should be handled via service requests and in line with the security standards; change management may be involved but this kind of work should be standard changes(ITIL) that do not need change mgmt process/approval

the latter should go through Change because of the potential impact on the existing network environment
_________________
John Hardesty
ITSM Manager's Certificate (Red Badge)

Change Management is POWER & CONTROL. /....evil laughter
Back to top
View user's profile
ranjithraghunathan
Itiler


Joined: May 09, 2007
Posts: 22
Location: Bangalore

PostPosted: Mon May 14, 2007 10:02 pm    Post subject: Reply with quote

UKVIKING -

My suggestion to have the access to development environment be controlled by Change Management arises from the fact that the application could be one of business critical importance.
Hence an access to development environment, should be governed by Change Management team, who will check factors like: who is requesting access to the development environment, the change going to be made in the code if already according to a scheduled implementation and is authorized etc. As you had mentioned this is governed by Security standards and the Change Management team will reference these standards.
Also in my companies the access IDs to the development environment thus granted through the Change Management process is called as FireFighter IDs.

I am theoretical, so if I am wrong guide me through.

Ranjith Raghunathan
ITIL Foundation Certified
P.S - Most of my posts are to understand the ITIL fundamentals clearly. So please excuse if not genuine answers to questions.
Back to top
View user's profile MSN Messenger
dboylan
Senior Itiler


Joined: Jan 03, 2007
Posts: 189
Location: Redmond, WA

PostPosted: Mon May 14, 2007 10:29 pm    Post subject: Reply with quote

I personally don't think that Account Management should be handled through the Change Management process. Yes, there does need to be controls on how accounts are created. Yes, there need to be checks and balances with considerations on how it might affect either the dev or prod environments. But I think that this is something that should be handled through the Security Management Process, which is not one of the core Service Support or Service Delivery processes.

The reason I would not put it in Change Management is because the definition of a Change is something that affects the Status or Attributes of a Configuration Item.

Is creating an account changing the status of the security system? No.

Is creating an account changing an attribute of the security system. Unless you are trying to track every single account as a unique attribute of the security system (which I think would bring a Change Management process to its knees), then adding an account would not be considered a change in the security system's attributes.

I would consider modifying the setting of the security system from a "3 Strikes lockout" to a "5 Strikes lockout" a Change that would need to go through Change Management.

There is the lure to use processes currently in place to manage aspects for which they aren't intended. My organization has just decided to use our Incident Management tool to handle the tracking of application enhancements. Why? Because we have a well defined Incident process and needed a communication tool to enable app dev requests.

So can you use the Change Management process to help with ID procurement? Yes. Should you consider ID procurements Changes? Probably not according to ITIL.

Don
Back to top
View user's profile
Display posts from previous:   
Post new topic   Reply to topic    ITIL Forum Index -> Change Management All times are GMT + 10 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Powered by phpBB 2.0.8 © 2001 phpBB Group
phpBB port v2.1 based on Tom Nitzschner's phpbb2.0.6 upgraded to phpBB 2.0.4 standalone was developed and tested by:
ArtificialIntel, ChatServ, mikem,
sixonetonoffun and Paul Laudanski (aka Zhen-Xjell).

Version 2.1 by Nuke Cops 2003 http://www.nukecops.com

Forums ©

 

Logos/trademarks property of respective owner. Comments property of poster. Rest 2004 Itil Community for Service Management & Foundation Certification. SV
Site source copyright (c)2003, and is Free Software under the GNU / GPL licence. All Rights Are Reserved.