Standard for IT access to administrative systems 

C&IT employees who require elevated access to critical administrative systems must obtain approval from the Chief Information Officer (CIO). This oversight ensures that access to sensitive systems and data is carefully managed and granted only to those who have a legitimate need. By requiring CIO approval, the university can maintain the security and integrity of its critical systems, protecting sensitive information and preventing unauthorized access. 

Systems falling under this requirement include but are not limited to: 

• Canvas 
• Echo360 
• Microsoft 365 
• Microsoft Intune 
• dadmin/wadmin/academicapps/affmgmt 
• Active Directory/LDAP 
• VMware 

Definition

Administrative system: An information technology (IT) system, or component of an IT system, that allows for IT employees to perform tasks with elevated system privileges that are necessary to provide normal operations those IT systems or assist in providing IT services. This may also include mechanisms that provide access to sensitive data beyond that of a normal user of the system.