elevated privilege role descriptions · elevated privilege role descriptions system name subject...

58
Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High BI_CSVS_HIGH Student - Career Services Destinations Data For College/Department staff who require a more detailed view of Career Services Destinations Survey results. BI_ELM_HIGH ELM - High Intended for use by Central Administrators and Department Administrators to view UAccess Learning data including Courses, Classes, and Transcripts, including data on courses deemed highly sensitive. BI_HR_HIGH Human Resources - Benefits Intended for staff in central/administrative units such as Human Resources or Financial Services; includes highly sensitive information related to benefits, deductions, and garnishments as well as basic employee and human resources information. BI_RA_HIGH Research - High Includes additional information related to the department of Sponsored Projects Services, such as all outgoing proposals/applications and incoming awards received on behalf of the UA. BI_SA_HIGH Student - ISIR ISIR (Institutional Student Information Report) refers to highly sensitive student Financial Aid data, including elements from the federal financial aid application as well as individual financial award information. Monday, July 11, 2016 Page 1 of 29

Upload: others

Post on 08-Aug-2020

13 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

Elevated Privilege Role Descriptions

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UAccess Analytics

High

BI_CSVS_HIGH Student - Career Services Destinations Data

For College/Department staff who require a more detailed view of Career Services Destinations Survey results.

BI_ELM_HIGH ELM - High Intended for use by Central Administrators and Department Administrators to view UAccess Learning data including Courses, Classes, and Transcripts, including data on courses deemed highly sensitive.

BI_HR_HIGH Human Resources - Benefits Intended for staff in central/administrative units such as Human Resources or Financial Services; includes highly sensitive information related to benefits, deductions, and garnishments as well as basic employee and human resources information.

BI_RA_HIGH Research - High Includes additional information related to the department of Sponsored Projects Services, such as all outgoing proposals/applications and incoming awards received on behalf of the UA.

BI_SA_HIGH Student - ISIR ISIR (Institutional Student Information Report) refers to highly sensitive student Financial Aid data, including elements from the federal financial aid application as well as individual financial award information.

Monday, July 11, 2016 Page 1 of 29

Page 2: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

For College/Department staff who require a more detailed view of Career Services Destinations Survey results.

Intended for use by Central Administrators and Department Administrators to view UAccess Learning data including Courses, Classes, and Transcripts, including data on courses deemed highly sensitive.

Intended for staff in central/administrative units such as Human Resources or Financial Services; includes highly sensitive information related to benefits, deductions, and garnishments as well as basic employee and human resources information.

Includes additional information related to the department of Sponsored Projects Services, such as all outgoing proposals/applications and incoming awards received on behalf of the UA.

ISIR (Institutional Student Information Report) refers to highly sensitive student Financial Aid data, including elements from the federal financial aid application as well as individual financial award information.

Page 1 of 29

Page 3: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

Space

BI_SP_HIGH Space - High Intended for users with an established business need for access to restricted space information, includes detailed space information for buildings, rooms, and occupants for non-restricted space.

UAccess Employee

Benefits

UA_HCM_CUSTOM_BN Custom Benefit User Grants full access (including correction) to all custom Benefits pages and processes under UA Customizations.

UA_HR_BN BEN ADMIN VIEW ONLY Benefits Admin View Only User Grants access to view all Benefits and Payroll setup information and view employee Benefits records.

UA_HR_BN BENEFIT ADMINISTRATOR Benefits Team Member Grants Benefits team members access to view Benefits and Payroll Setup information, update employee Benefits information, initiate Benefits processes, and run Benefits reports.

UA_HR_BN BENEFIT MANAGER Benefits Power User Grants certain Benefits team members access to view Benefits and Payroll setup information, correct some Benefits setup information, update employee Benefits information, initiate Benefits processes, and run Benefits reports.

UA_HR_BN BENEFITS SUPER USER Benefits Super User Grants certain Benefits team members permission to correct all Benefits setup and employee Benefits information, view Payroll setup and employee Payroll information, initiate Benefits processes, and run Benefits reports.

UA_HR_BN RUN BEN500 ONLY Run Process BEN500 Only Grants access to run the BEN500 process (Rebuild Primary Job Flags).

Monday, July 11, 2016 Page 2 of 29

Page 4: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Intended for users with an established business need for access to restricted space information, includes detailed space information for buildings, rooms, and occupants for non-restricted space.

Grants full access (including correction) to all custom Benefits pages and processes under UA Customizations.

Grants access to view all Benefits and Payroll setup information and view employee Benefits records.

Grants Benefits team members access to view Benefits and Payroll Setup information, update employee Benefits information, initiate Benefits processes, and run Benefits reports.

Grants certain Benefits team members access to view Benefits and Payroll setup information, correct some Benefits setup information, update employee Benefits information, initiate Benefits processes, and run Benefits reports.

Grants certain Benefits team members permission to correct all Benefits setup and employee Benefits information, view Payroll setup and employee Payroll information, initiate Benefits processes, and run Benefits reports.

Grants access to run the BEN500 process (Rebuild Primary Job Flags).

Page 2 of 29

Page 5: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_HR_BN_Election_Correction Benefits Enrollment Admin Grants access to correct benefits elections.

UA_HR_BN_VW Benefits View Only User Grants access to view all Benefits and Payroll setup information and view employee Benefits records.

Budget

UA_HR_BUDGET SETUP Create/Manage Budget Setup and manage Budget information.

Campus Community

UA_HR_CC_EXTERNAL_SYSTEM_ID External System ID Admin Grants correction access to the External System ID page.

College Reviewer

UA_HR_WA_MSS_WI9_Col_Rev I9 Reviewer Grant access to review I-9 forms.

College/Division Approver

UA_HR_WA_MSS_WI9_Col_Apr I9 Approver Grants access to approve I-9 forms.

Commitment Accounting

UA_HR_CA _CTRLUSER CA Control User Grants view access to the LDET Entry and Edit pages.

UA_HR_CA CA Power User Commitment Accounting Power User Grants users correction access to all Commitment accounting setup pages and permission to run Commitment Accounting processes, interfaces and reports

UA_HR_CA_APPROVE_REDIST_FSO Labor Distribution Expense Acctg Approver - FSO

Grants access to approve FSO related expense transfers.

HR Department Approver

UA_HR_WA_MSS_WI9_Dept_Apr I9 Approver Grants access to approve I-9 forms.

UA_HR_WA_MSS_WI9_Dept_Rev I9 Reviewer Grant access to review I-9 forms.

MSS - College/Division Approver

UA_HR_WA_MSS_WNH_Col_Flex_Apr New Hire - Flex Allows access to approve ALL Student/Grad Hiring Requests.

Monday, July 11, 2016 Page 3 of 29

Page 6: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to correct benefits elections.

Grants access to view all Benefits and Payroll setup information and view employee Benefits records.

Setup and manage Budget information.

Grants correction access to the External System ID page.

Grant access to review I-9 forms.

Grants access to approve I-9 forms.

Grants view access to the LDET Entry and Edit pages.

Grants users correction access to all Commitment accounting setup pages and permission to run Commitment Accounting processes, interfaces and reports

Grants access to approve FSO related expense transfers.

Grants access to approve I-9 forms.

Grant access to review I-9 forms.

Allows access to approve ALL Student/Grad Hiring Requests.

Page 3 of 29

Page 7: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_HR_WA_MSS_WNH_I9_Col_Apr New Hire I-9 Allows access to approve I-9 forms.

UA_HR_WA_MSS_WNH_I9_Dept_Apr New Hire I-9 Grants access to approve I-9 forms at the College/Division Approver step.

MSS - HR Department Approver

UA_HR_WA_MSS_WNH_I9_Dept_Apr New Hire I-9 Grants access to approve I-9 forms at the HR Department Approver step.

MSS Central Functions

UA_HR_WA_MSS_WF_Admin Workflow Administrator - Online Forms Grants access to re-route MSS online forms and update MSS setup tables.

UA_HR_WA_MSS_WRP_Admin Recruitment Proposal Grants access to re-route recruitement proposals or offers in the event of a workflow error.

MSS-Human Resources Approver

UA_HR_WA_MSS_WJC_Central_HR Job Data Changes Grants access to appove Job Data Change document requests.

MSS-Systems Control Approver

UA_HR_WA_MSS_WI9_Sys_Apr I-9 Forms Grants access to approve I-9 forms.

UA_HR_WA_MSS_WJC_Sys_Apr Job Data Changes Grants access to approve Job Data change requests.

UA_HR_WA_MSS_WPD_SUPER_USER Position Distribution Super User Allows access to be able to submit and approve a position distribution transaction in one step. This is limited to Systems Control and CA users only.

Payroll

UA_HR_PY CheckPrint Pay Check Print Grants access to print paychecks.

Monday, July 11, 2016 Page 4 of 29

Page 8: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Allows access to approve I-9 forms.

Grants access to approve I-9 forms at the College/Division Approver step.

Grants access to approve I-9 forms at the HR Department Approver step.

Grants access to re-route MSS online forms and update MSS setup tables.

Grants access to re-route recruitement proposals or offers in the event of a workflow error.

Grants access to appove Job Data Change document requests.

Grants access to approve I-9 forms.

Grants access to approve Job Data change requests.

Allows access to be able to submit and approve a position distribution transaction in one step. This is limited to Systems Control and CA users only.

Grants access to print paychecks.

Page 4 of 29

Page 9: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_HR_PY PayrollAccountant Payroll Accountant Grants users view only access to certain Payroll Setup and Employee Payroll pages, view only access to certain Employee Benefits pages, and view only access to certain Workflow Administration (Job, Position) and Commitment Accounting pages.

UA_HR_PY PayrollLead Payroll Lead Grants users update access to Payroll Setup and Payroll Person and Garnishment information, view only access to Benefits Setup and Benefits Person information, permission to create and update Paylines and Paysheets and run Payroll processes and reports.

UA_HR_PY SuperUser Payroll Super User Grants users correction access to Payroll Setup and Payroll Person information, view only access to Benefits Setup and Benefits Person information, permission to create and update Paylines and Paysheets and run Payroll processes and reports.

UA_HR_PY User Payroll User Grants users view only access to Payroll Setup, Benefits Person and Time information, update access to Payroll Person information, permission to create and update Paylines, Paysheets and run Payroll reports.

UA_HR_PY VW Payroll View Only User Grants users view only access to Payroll Setup, Payroll Person, Benefits Person and Time information.

UA_HR_PY_AP_SUPERVISOR Accounts Payable Payroll User Grants access to view benefits, payroll, human resources, and workforce admin transaction and configuration pages.

UA_HR_PY_HCM_ADMIN UA Payroll HCM Admin Grants access to UA Employee Population, File Definition, and Parameter Definition under UA HCM Custom > Administration.

Monday, July 11, 2016 Page 5 of 29

Page 10: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants users view only access to certain Payroll Setup and Employee Payroll pages, view only access to certain Employee Benefits pages, and view only access to certain Workflow Administration (Job, Position) and Commitment Accounting pages.

Grants users update access to Payroll Setup and Payroll Person and Garnishment information, view only access to Benefits Setup and Benefits Person information, permission to create and update Paylines and Paysheets and run Payroll processes and reports.

Grants users correction access to Payroll Setup and Payroll Person information, view only access to Benefits Setup and Benefits Person information, permission to create and update Paylines and Paysheets and run Payroll processes and reports.

Grants users view only access to Payroll Setup, Benefits Person and Time information, update access to Payroll Person information, permission to create and update Paylines, Paysheets and run Payroll reports.

Grants users view only access to Payroll Setup, Payroll Person, Benefits Person and Time information.

Grants access to view benefits, payroll, human resources, and workforce admin transaction and configuration pages.

Grants access to UA Employee Population, File Definition, and Parameter Definition under UA HCM Custom > Administration.

Page 5 of 29

Page 11: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

Technical

HCM Security Administrator HCM Security Administrator Grants access to all delivered HCM row level security setup pages.

PeopleSoft Administrator PeopleSoft Administrator Provides unrestricted access to the PeopleSoft system, or full administrative authority to all application pages and PeopleTools utilities.

Security Administrator Security Administrator Provides full access to delivered core security administration pages.

UA_HCM_BUSN_ANALYST_TEAM HCM Business Analyst Provides view access to transactional pages for all modules, and full access to configuration pages for all modules but Commitment Accounting and Payroll where view access is provided. Includes full access to Query Manager and other technical functions.

UA_HCM_Custom_HR Custom HR User Grants full access (including correction) to all custom Benefits, Human Resources, Payroll, Time and Labor, and Workforce Admin pages and processes under UA Customizations.

UA_HCM_CUSTOM_SEC Custom Security User Grants access to delivered and custom application security pages.

UA_HCM_TECH_SUPPORT_TEAM UITS Tech Support Staff Grants broad access to delivered and custom Employee pages for the purposes of Production Support.

UA_WA_MASS_UPDATE Mass Update Setup & Run Provides full access to the Mass Update and Group Build items.

UAHRTM_Core Tree Manager Admin Grants correction access to Tree Manager.

Tenure

Monday, July 11, 2016 Page 6 of 29

Page 12: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to all delivered HCM row level security setup pages.

Provides unrestricted access to the PeopleSoft system, or full administrative authority to all application pages and PeopleTools utilities.

Provides full access to delivered core security administration pages.

Provides view access to transactional pages for all modules, and full access to configuration pages for all modules but Commitment Accounting and Payroll where view access is provided. Includes full access to Query Manager and other technical functions.

Grants full access (including correction) to all custom Benefits, Human Resources, Payroll, Time and Labor, and Workforce Admin pages and processes under UA Customizations.

Grants access to delivered and custom application security pages.

Grants broad access to delivered and custom Employee pages for the purposes of Production Support.

Provides full access to the Mass Update and Group Build items.

Grants correction access to Tree Manager.

Page 6 of 29

Page 13: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_HR_WA_Tenure_SuperUser Tenure Super user Grants access to edit employee service history, create and update tenure cases, run the calc process, and view the tenure audit table. Also includes access to Query Manager and Report Manager.

UA_HR_WA_Tenure_Track Tenure User Grants access to edit employee service history, create and update tenure cases, run the calc process, and view the tenure audit table.

Time and Labor

UA_HR_TL TimeAdministrator Time Administrator FLSA Training Required - Grants access correct Time setup and Time Person information, approve time and run Time and Labor processes.

Workforce Administration

UA_HR_WA Power User Workforce Admin Power User Grants users correction access to all Workforce Admin setup and Workforce pages.

UA_HR_WA SSN Viewer Workforce Admin SSN Viewer Grants access to Search/Match for the purposes of viewing SSNs.

UA_HR_WA User Workforce Admin User Grants users view only access to Workforce Admin setup pages and update access to all Workforce Admin pages.

UA_HR_WA Viewer Workforce Admin View Only User Grants users view only access to Workforce Admin setup and Person pages.

UA_HR_WA_CHANGE_DELETE_ID Duplicate ID Admin Grants access to change/delete employee IDs in support of duplicate ID management processes.

UA_HR_WA_DEPT_LOC_Power_User Dept Location Power User Provides full access to department and location setup, and tree manager.

UA_HR_WA_DISABILITY_FLG Accommodation Request Update Grants access to the Accommodation Request page for Disability Services and Enrollment Services staff.

Monday, July 11, 2016 Page 7 of 29

Page 14: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to edit employee service history, create and update tenure cases, run the calc process, and view the tenure audit table. Also includes access to Query Manager and Report Manager.

Grants access to edit employee service history, create and update tenure cases, run the calc process, and view the tenure audit table.

FLSA Training Required - Grants access correct Time setup and Time Person information, approve time and run Time and Labor processes.

Grants users correction access to all Workforce Admin setup and Workforce pages.

Grants access to Search/Match for the purposes of viewing SSNs.

Grants users view only access to Workforce Admin setup pages and update access to all Workforce Admin pages.

Grants users view only access to Workforce Admin setup and Person pages.

Grants access to change/delete employee IDs in support of duplicate ID management processes.

Provides full access to department and location setup, and tree manager.

Grants access to the Accommodation Request page for Disability Services and Enrollment Services staff.

Page 7 of 29

Page 15: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_HR_WA_ExcelToCI Job Data File Upload Grants access to upload employee position, job code, and title changes by file upload.

UA_HR_WF_ADMIN Workflow Admin Grants full access to administer Workflow transactions.

UA_HRNOTIF_SuperUser HR Notification SuperUser Grants access to the custom HR Notification Extension page, generic templates, and delivered HR Notification tool.

UAccess Financials

1099 Processing

UA 1099 Tax Specialist UA 1099 Tax Specialist 1099 Processing - 1099 Tax Specialist

Accounts Receivable

AR Biller AR Biller Accounts Receivable - Derived Role - Users associated with KFS AR processing organizations. They can initiate Application and Cash control documents and add new records to the Organization Options and Organization Accounting Defaults tables. Applies to

AR Processor AR Processor Accounts Receivable - Derived Role - Users associated with KFS AR processing organizations. They can initiate Application and Cash control documents and add new records to the Organization Options and Organization Accounting Defaults tables. Applies to

Business and Administrative User Access

Role 54 Business and Administrative User Access (role 54)

Grants access to be eligible to serve as Fiscal Officers and Delegates; create Salary Expense Transfers; manage Chart of Accounts and Workflow.

Capital Assets Management

Monday, July 11, 2016 Page 8 of 29

Page 16: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to upload employee position, job code, and title changes by file upload.

Grants full access to administer Workflow transactions.

Grants access to the custom HR Notification Extension page, generic templates, and delivered HR Notification tool.

1099 Processing - 1099 Tax Specialist

Accounts Receivable - Derived Role - Users associated with KFS AR processing organizations. They can initiate Application and Cash control documents and add new records to the Organization Options and Organization Accounting Defaults tables. Applies to

Accounts Receivable - Derived Role - Users associated with KFS AR processing organizations. They can initiate Application and Cash control documents and add new records to the Organization Options and Organization Accounting Defaults tables. Applies to

Grants access to be eligible to serve as Fiscal Officers and Delegates; create Salary Expense Transfers; manage Chart of Accounts and Workflow.

Page 8 of 29

Page 17: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA FSO Property Management UA FSO Property Management Capital Asset Management - Role that has access to manage the Capital Asset Module and take various actions on capital assets and modify the Plant Fund accounts associated with organizations.

UA FSO Property Management Team UA FSO Property Management Team Role for FSO Property Management staff that has access to initiate specific document types.

UA PACS Surplus Manager UA PACS Surplus Manager Capital Asset Management - UA PACS Surplus Manager

UA SPS Property Manager UA SPS Property Manager Capital Asset Management - Role that can modify the Award History tab on the Asset document and blanket approve Capital Asset Simple Maintenance docs.

Chart of Accounts

UA Budget Office Analyst UA Budget Office Analyst Chart of Accounts - Central office role that has permission to initiate Budget Office Maintenance Documents.

UA Budget Office Manager UA Budget Office Manager Chart of Accounts - Central role that can initiate and approve Budget Office Maintenance documents.

UA Chart Temp UA Chart Temp Assign individuals to a Chart Manager’s group without giving them access to superuser approval.

UA FSO Rate Studies Accountant UA FSO Rate Studies Accountant Chart of Accounts - UA FSO Rate Studies Accountant

Contract & Grants

UA SPS Manager UA SPS Manager Contracts & Grants - UA SPS Manager

UA SPS Pre-Award UA SPS Pre-Award Contracts & Grants - Role that is allowed to initiate Agency docs.

Enterprise Infrastructure

Monday, July 11, 2016 Page 9 of 29

Page 18: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Capital Asset Management - Role that has access to manage the Capital Asset Module and take various actions on capital assets and modify the Plant Fund accounts associated with organizations.

Role for FSO Property Management staff that has access to initiate specific document types.

Capital Asset Management - UA PACS Surplus Manager

Capital Asset Management - Role that can modify the Award History tab on the Asset document and blanket approve Capital Asset Simple Maintenance docs.

Chart of Accounts - Central office role that has permission to initiate Budget Office Maintenance Documents.

Chart of Accounts - Central role that can initiate and approve Budget Office Maintenance documents.

Assign individuals to a Chart Manager’s group without giving them access to superuser approval.

Chart of Accounts - UA FSO Rate Studies Accountant

Contracts & Grants - UA SPS Manager

Contracts & Grants - Role that is allowed to initiate Agency docs.

Page 9 of 29

Page 19: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA FSO AP Tax Specialists UA FSO AP Tax Specialists Enterprise Infrastructure - UA FSO AP Tax Specialists

Financial Processing

Cash Manager Cash Manager Financial Processing - Users authorized to work the Cash Management Document and verify Cash Receipt documents for a given campus.

Disbursement Method Reviewers Disbursement Method Reviewers Users who receive workflow action requests for Disbursement Vouchers with specified payment methods and can edit the accounting lines on Wire Transfers and Foreign Drafts

PCARD Card Holder PCARD Card Holder Financial Processing - Derived Role - Procurement Cardholder

PCARD Reconciler PCARD Reconciler Financial Processing - Derived Role - Procurement Card Reconciler

UA Budget Transfer Group UA Budget Transfer Group This team initiate and blanket approves transfer of funds documents.

UA Bursars Office Manager UA Bursars Office Manager Financial Processing - Maintain and approve changes to the Cash Drawer.

UA FSO Bursar's Office Banking Reps UA FSO Bursar's Office Banking Reps Financial Processing - UA FSO Bursar's Office Banking Reps

UA FSO Capital Finance UA FSO Capital Finance Financial Processing - UA FSO Capital Finance

UA FSO Capital Finance Manager UA FSO Capital Finance Manager Financial Processing - UA FSO Capital Finance Manager

UA FSO Cash Accounting UA FSO Cash Accounting Financial Processing - UA FSO Cash Accounting

Monday, July 11, 2016 Page 10 of 29

Page 20: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Enterprise Infrastructure - UA FSO AP Tax Specialists

Financial Processing - Users authorized to work the Cash Management Document and verify Cash Receipt documents for a given campus.

Users who receive workflow action requests for Disbursement Vouchers with specified payment methods and can edit the accounting lines on Wire Transfers and Foreign Drafts

Financial Processing - Derived Role - Procurement Cardholder

Financial Processing - Derived Role - Procurement Card Reconciler

This team initiate and blanket approves transfer of funds documents.

Financial Processing - Maintain and approve changes to the Cash Drawer.

Financial Processing - UA FSO Bursar's Office Banking Reps

Financial Processing - UA FSO Capital Finance

Financial Processing - UA FSO Capital Finance Manager

Financial Processing - UA FSO Cash Accounting

Page 10 of 29

Page 21: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA FSO Financial Management Manager UA FSO Financial Management Manager Financial Processing - Central role that will receive approval requests for the General Ledger and Labor Ledger Correction Process documents and the Chart of Accounts Simple Maintenance documents if initiated by the Chart Manager. This role can also initi

UA FSO FM Accounting Manager UA FSO FM Accounting Manager Financial Processing - Role set up to receive workflow requests to approve Payment Method Code docs and initiate JVs.

UA FSO Fund Accountant UA FSO Fund Accountant Financial Processing - UA Role created for FSO Fund Accountants so they can blanket approve DI, TF, GEC and initiate Object codes, JVs, GLCPs. This role will also receive PURAP Separation of Duties requests. Initiate System Simple Maintenance documents. C

UA FSO Separation of Duties UA FSO Separation of Duties Financial Processing - Role that will receive workflow requests when Org Review is not set up in the department for REQS.

UA FSO Tax Compliance Manager UA FSO Tax Compliance Manager Financial Processing - Authorized to initiate changes to the simple maintenance documents related to tax.

Financial System

Accounts Receivable Lockbox Manager Accounts Receivable Lockbox Manager Financial System - Central Accounts Receivable staff that receive workflow action requests for Cash Control and Lockbox documents. They can also use the Electronic Fund Transfer screen and claim those funds using a Cash Control document.

Batch Job Modifier Batch Job Modifier Financial System - Derived Role - This role is derived from users with the Modify Batch Job permission. They are able to use the Schedule lookup.,

Monday, July 11, 2016 Page 11 of 29

Page 22: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Financial Processing - Central role that will receive approval requests for the General Ledger and Labor Ledger Correction Process documents and the Chart of Accounts Simple Maintenance documents if initiated by the Chart Manager. This role can also initi

Financial Processing - Role set up to receive workflow requests to approve Payment Method Code docs and initiate JVs.

Financial Processing - UA Role created for FSO Fund Accountants so they can blanket approve DI, TF, GEC and initiate Object codes, JVs, GLCPs. This role will also receive PURAP Separation of Duties requests. Initiate System Simple Maintenance documents. C

Financial Processing - Role that will receive workflow requests when Org Review is not set up in the department for REQS.

Financial Processing - Authorized to initiate changes to the simple maintenance documents related to tax.

Financial System - Central Accounts Receivable staff that receive workflow action requests for Cash Control and Lockbox documents. They can also use the Electronic Fund Transfer screen and claim those funds using a Cash Control document.

Financial System - Derived Role - This role is derived from users with the Modify Batch Job permission. They are able to use the Schedule lookup.,

Page 11 of 29

Page 23: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

Contracts & Grants Processor Contracts & Grants Processor Financial System - Central contract and grant staff that receive workflow action requests for transactions involving grant accounts. They can view Research Risk information on Proposal documents, establish cost share sub-accounts and modify the object cod

SYS Role 54 User SYS Role 54 User UA KFS System User - ROLE 54

UA Affiliate Account Supervisor UA Affiliate Account Supervisor Financial System - Affiliates who have been authorized to serve as account supervisors.

UA Chart Manager UA Chart Manager Financial System - UA Chart Manager

UA Document Requeuer UA Document Requeuer Financial System - UA Document Requeuer

UA FSO Administration UA FSO Administration Financial System - Role that will have access to view the images tab on documents in order to review supporting documentation when approving transactions over $50,000 via the

UA FSO FM Special Processor UA FSO FM Special Processor Financial System - This role will be used to manage temporary processing requests. It should be used in conjunction with the assigned group. Perms will be removed and added as needed depending on the request. Assignment will be managed with the group. Mem

UA FSO ITS Enterprise Application Manager

UA FSO ITS Enterprise Application Manager

Financial System - Role that can create parms and view batch files.

UA KFS Developers UA KFS Developers Financial System - Role for developers to view batch reports to troubleshoot ControlM issues, use the Document Ingestion and Document Operation.

UA Parameter Manager UA Parameter Manager Financial System - UA Parameter Manager

UA Scholarships Financial Aid Processor UA Scholarships Financial Aid Processor Financial System - Role to allow the Office of Scholarships and Financial Aid to change object codes for Salary Expense Transfers

Monday, July 11, 2016 Page 12 of 29

Page 24: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Financial System - Central contract and grant staff that receive workflow action requests for transactions involving grant accounts. They can view Research Risk information on Proposal documents, establish cost share sub-accounts and modify the object cod

UA KFS System User - ROLE 54

Financial System - Affiliates who have been authorized to serve as account supervisors.

Financial System - UA Chart Manager

Financial System - UA Document Requeuer

Financial System - Role that will have access to view the images tab on documents in order to review supporting documentation when approving transactions over $50,000 via the

Financial System - This role will be used to manage temporary processing requests. It should be used in conjunction with the assigned group. Perms will be removed and added as needed depending on the request. Assignment will be managed with the group. Mem

Financial System - Role that can create parms and view batch files.

Financial System - Role for developers to view batch reports to troubleshoot ControlM issues, use the Document Ingestion and Document Operation.

Financial System - UA Parameter Manager

Financial System - Role to allow the Office of Scholarships and Financial Aid to change object codes for Salary Expense Transfers

Page 12 of 29

Page 25: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA Security Manager UA Security Manager Financial System - UA Security Manager

UA Super User UA Super User User assigned the ability to approve a document at its current route node. Super User can also approve the document to final, disapprove it or cancel it. This approval can bypass approvals that would otherwise be required.

UA UITS Security Manager UA UITS Security Manager Financial System - Role that can assign roles to users.

UA Yearend Budget Analyst UA Yearend Budget Analyst Allows authorized users to only initiate Yearend KFS Documents.

Labor Distribution

UA FSO Payroll Accountant UA FSO Payroll Accountant Labor Distribution - UA Role that allows users to initiate LLJV, LLCP and blanket approve Salary Expense Transfers. Download reports from Labor Ledger directory.

Pre-Disbursement Processor

UA FSO AP Check Control UA FSO AP Check Control Pre-Disbursement Processor - Role that manages the PDP Module.

UA FSO AP Check Formatter UA FSO AP Check Formatter Pre-Disbursement Processor - Role that can set payments for immediate pay and use the Format Checks/ACH screen in PDP.

UA FSO Disbursement Services Managers

UA FSO Disbursement Services Managers

Pre-Disbursement Processor - Approve modifications to the Customer Profile (CSPR) and Payment Term Types (PMPA) document; receive FYI on PMCD changes.

Purchasing & Contract Services

UA PACS Manager UA PACS Manager Purchasing & Contract Services - UA PACS Manager

UA PACS Vendor Reviewer UA PACS Vendor Reviewer Purchasing & Contract Services - UA PACS Vendor Reviewer

Monday, July 11, 2016 Page 13 of 29

Page 26: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Financial System - UA Security Manager

User assigned the ability to approve a document at its current route node. Super User can also approve the document to final, disapprove it or cancel it. This approval can bypass approvals that would otherwise be required.

Financial System - Role that can assign roles to users.

Allows authorized users to only initiate Yearend KFS Documents.

Labor Distribution - UA Role that allows users to initiate LLJV, LLCP and blanket approve Salary Expense Transfers. Download reports from Labor Ledger directory.

Pre-Disbursement Processor - Role that manages the PDP Module.

Pre-Disbursement Processor - Role that can set payments for immediate pay and use the Format Checks/ACH screen in PDP.

Pre-Disbursement Processor - Approve modifications to the Customer Profile (CSPR) and Payment Term Types (PMPA) document; receive FYI on PMCD changes.

Purchasing & Contract Services - UA PACS Manager

Purchasing & Contract Services - UA PACS Vendor Reviewer

Page 13 of 29

Page 27: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

Purchasing / Accounts Payable

Contract Manager Contract Manager Purchasing / Accounts Payable - Contract Managers review and approve Purchase Order documents. A Purchase Order is assigned to a given Contract Manager for their review and approval.

Potentially Sensitive Document User Potentially Sensitive Document User Purchasing / Accounts Payable - This role indicates who can view KFS-PURAP documents that have been identified as potentially sensitive.

Purchasing Processor Purchasing Processor Purchasing / Accounts Payable - This role represents central or campus Purchasing staff. They have additional permissions for and receive action requests for most Purchasing document types as well as receiving action requests for Disbursement Vouchers pay

Sensitive Related Document Initiator Or Reviewer

Sensitive Related Document Initiator Or Reviewer

Purchasing / Accounts Payable - Derived Role - A role that derives the users who initiated or received a workflow action request for a sensitive KFS-PURAP document.

UA FSO Accounts Payable EIRT Specialist UA FSO Accounts Payable EIRT Specialist Purchasing / Accounts Payable - Role will receive requests to process EIRTs.

UA FSO Accounts Payable Manager UA FSO Accounts Payable Manager Purchasing / Accounts Payable - UA FSO Accounts Payable Manager

UA FSO Accounts Payable Specialist UA FSO Accounts Payable Specialist Purchasing / Accounts Payable - UA FSO Accounts Payable Specialist

UA FSO Check Reconciliaton UA FSO Check Reconciliaton Purchasing / Accounts Payable - UA FSO Check Reconciliaton

UA FSO OPS Customer Service UA FSO OPS Customer Service Purchasing / Accounts Payable - Role that can look up records in PDP, such as Payments and Batches.

Monday, July 11, 2016 Page 14 of 29

Page 28: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Purchasing / Accounts Payable - Contract Managers review and approve Purchase Order documents. A Purchase Order is assigned to a given Contract Manager for their review and approval.

Purchasing / Accounts Payable - This role indicates who can view KFS-PURAP documents that have been identified as potentially sensitive.

Purchasing / Accounts Payable - This role represents central or campus Purchasing staff. They have additional permissions for and receive action requests for most Purchasing document types as well as receiving action requests for Disbursement Vouchers pay

Purchasing / Accounts Payable - Derived Role - A role that derives the users who initiated or received a workflow action request for a sensitive KFS-PURAP document.

Purchasing / Accounts Payable - Role will receive requests to process EIRTs.

Purchasing / Accounts Payable - UA FSO Accounts Payable Manager

Purchasing / Accounts Payable - UA FSO Accounts Payable Specialist

Purchasing / Accounts Payable - UA FSO Check Reconciliaton

Purchasing / Accounts Payable - Role that can look up records in PDP, such as Payments and Batches.

Page 14 of 29

Page 29: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA PACS Administrator UA PACS Administrator Purchasing / Accounts Payable - UA Role created for UA PACS administration to assign POs, process change orders, amend and void POs resend B2B, view files in the PURAP BatchSchedule directory, initiate PURAP and vendor Simple Maintenance. Update and blank

UA PCard Administrator UA PCard Administrator Purchasing / Accounts Payable - Central role that can update the PCard Holder Maintenance documents. Update and blanket approve existing parameters with the KFS-PCARD namespace. View/download reports in the FP reports directory.

Vendor

Exclude Single Actor Reviewer Exclude Single Actor Reviewer Vendor - Exclude Single Actor Reviewer

Reviewer Reviewer Vendor - This role receives workflow action requests for the vendor document. Download reports from the vendor directory.

UAccess Research

Awards

View and Print Awards (Role 1223) View Print Award Allows access to view awards and print award documents for units.

Institutional Review Board

IRB Administration (Role 1119) Human Subjects Protection Allows access to Create/Edit IRB Protocols, Committees, and Schedules.

IRB Approver (Role 1107) Human Subjects Protection Allows access to Create/Edit IRB Protocols, Committees, and Schedules.

IRB View Protocols – College (Role 10890)

View Protocols - College Allows access to view protocols for a college and any departments associated with the college.

Monday, July 11, 2016 Page 15 of 29

Page 30: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Purchasing / Accounts Payable - UA Role created for UA PACS administration to assign POs, process change orders, amend and void POs resend B2B, view files in the PURAP BatchSchedule directory, initiate PURAP and vendor Simple Maintenance. Update and blank

Purchasing / Accounts Payable - Central role that can update the PCard Holder Maintenance documents. Update and blanket approve existing parameters with the KFS-PCARD namespace. View/download reports in the FP reports directory.

Vendor - Exclude Single Actor Reviewer

Vendor - This role receives workflow action requests for the vendor document. Download reports from the vendor directory.

Allows access to view awards and print award documents for units.

Allows access to Create/Edit IRB Protocols, Committees, and Schedules.

Allows access to Create/Edit IRB Protocols, Committees, and Schedules.

Allows access to view protocols for a college and any departments associated with the college.

Page 15 of 29

Page 31: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

Negotiation

1514 Negotiation Administrator Allows access to Create/Edit Negotiations.

Proposals/Awards/Negotiations/Subawards

1238 CRSP Management Allows access to view Proposals, Institutional Proposals, Awards, Award attachments, Subawards and view/create/edit Negotiations.

LEAD_17 Approve Proposals - Lead Unit Level Allows access to approve proposals at the Lead Department Pre-Approval level. Department proposal owner reviews for quality assurance before other approvers.

ORCA Proposal Notes (1236) ORCA - Proposal Notes Allows access to proposals that are in route to add notes.

OSP Approver (Role 1101) Sponsored Projects Proposal Approval Sponsored Projects Approval for Proposals.

SPS Maintenance (Role 1206) Sponsored Projects Maintenance Allows access to Create/Edit Maintenance documents.

SPS Management (Role 1221) Sponsored Projects Management Allows access to Create/Edit Proposals, Create/Edit Institute Proposals, Create/Edit Time and Money, Create/Edit Negotiation Logs.

UNIT_16 Approve Proposals - College Level Allows access to approve proposals at the College Level.

UNIT_16 Approve Proposals - Department Level Allows access to approve proposals at the Department Level.

UNIT_16 Approve Proposals - Department Level Allows access to approve proposals at the Department Level.

UNIT_16 Approve Proposals - Dept/College Allows access to approve proposals at the College or Department Level.

System Superuser

1000002 UAccess Research Superuser Allows Superuser access to System Configuration.

Monday, July 11, 2016 Page 16 of 29

Page 32: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Allows access to Create/Edit Negotiations.

Allows access to view Proposals, Institutional Proposals, Awards, Award attachments, Subawards and view/create/edit Negotiations.

Allows access to approve proposals at the Lead Department Pre-Approval level. Department proposal owner reviews for quality assurance before other approvers.

Allows access to proposals that are in route to add notes.

Sponsored Projects Approval for Proposals.

Allows access to Create/Edit Maintenance documents.

Allows access to Create/Edit Proposals, Create/Edit Institute Proposals, Create/Edit Time and Money, Create/Edit Negotiation Logs.

Allows access to approve proposals at the College Level.

Allows access to approve proposals at the Department Level.

Allows access to approve proposals at the Department Level.

Allows access to approve proposals at the College or Department Level.

Allows Superuser access to System Configuration.

Page 16 of 29

Page 33: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UAccess Student

Academic Advising

UA_SA_AA Adv Assign Super Advisor Assignment Admin Grants access to maintain the advisor table, student advisor assignments, and to run the batch process for assigning students to advisors.

UA_SA_AA Adv Assign Update Advisor Assignment Update Grants access to maintain the advisor table and student advisor assignments.

UA_SA_AA Exceptions Advising Exceptions Grants additional access for Faculty Advisors or Department/College Advisors who need to input and view student exceptions.

UA_SA_AA Notes Admin Advisor Notes Deletion Grants the ability to delete advisor notes that were incorrectly entered.

UA_SA_AA Update Academic Advisor (Department or College)

Grants access for Academic Advisors in academic departments and colleges who need the ability to run Advisement Reports, update Advisor Notes, update students’ DegreeTracker/SmartPlanner preferences, and update Academic Agreements.

UA_SA_AA_DT DegreeTrackAdvisor Composite - Academic Advisor (Department or College)

Grants access for Academic Advisors in academic departments and colleges who need the ability to run Advisement Reports, update Advisor Notes, update students’ DegreeTracker/SmartPlanner preferences, update Academic Agreement

Admissions

UA_SA_AD Acad Index View Academic Index View Grants view access to academic index via the Academic and Decision Data page. Training for this role is on-the-job.

UA_SA_AD Delete Apps Application Delete Grants access to delete individual undergraduate admissions applications.

Monday, July 11, 2016 Page 17 of 29

Page 34: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to maintain the advisor table, student advisor assignments, and to run the batch process for assigning students to advisors.

Grants access to maintain the advisor table and student advisor assignments.

Grants additional access for Faculty Advisors or Department/College Advisors who need to input and view student exceptions.

Grants the ability to delete advisor notes that were incorrectly entered.

Grants access for Academic Advisors in academic departments and colleges who need the ability to run Advisement Reports, update Advisor Notes, update students’ DegreeTracker/SmartPlanner preferences, and update Academic Agreements.

Grants access for Academic Advisors in academic departments and colleges who need the ability to run Advisement Reports, update Advisor Notes, update students’ DegreeTracker/SmartPlanner preferences, update Academic Agreement

Grants view access to academic index via the Academic and Decision Data page. Training for this role is on-the-job.

Grants access to delete individual undergraduate admissions applications.

Page 17 of 29

Page 35: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_SA_AD Honors Update Honors Update Grants access to auto admit/undo admit to Honors. Training for this role is on-the-job.

UA_SA_AD Prof AD User Professional School Admissions User Grants access for employees in the MED and LAW admissions offices to enable the entry of admissions applications. Training for this role is on-the-job.

UA_SA_AD Tst Score Susp Update Test Score Suspense Update Grants access to review and update external test score suspense data.

UA_SA_AD UG Enrl Dep Admin Upd Enrollment Deposit Admin Grants access to update the Undergraduate Enrollment Deposit Status. Additional training for this role is on-the-job.

UA_SA_AD UG Orient Stdnt Admin Orient Session Admin Grants access to add, update or remove orientation sessions through Student Services Center.

UA_SA_AD UG Post Matric ADD Post Matriculation Data Entry Grants access to update Academic and Decision Data after a student has been matriculated.

UA_SA_AD Ugrad AD User Undergraduate Admissions User Grants access for Undergraduate Admissions employees, generally student workers, that manage all processes related to undergraduate admissions - with the exception of merit aid overrides. This role excludes correction mode.

UA_SA_AD Ugrad Administrator Undergraduate Administrator Grants access for the very few employees that manage the setup for undergraduate admissions. Additional training for this role is on-the-job.

UA_SA_AD Ugrad Super User Undergraduate Super User Grants access for Undergraduate Admissions employees that manage all processes related to undergraduate admissions - with the exception of merit aid overrides.

Monday, July 11, 2016 Page 18 of 29

Page 36: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to auto admit/undo admit to Honors. Training for this role is on-the-job.

Grants access for employees in the MED and LAW admissions offices to enable the entry of admissions applications. Training for this role is on-the-job.

Grants access to review and update external test score suspense data.

Grants access to update the Undergraduate Enrollment Deposit Status. Additional training for this role is on-the-job.

Grants access to add, update or remove orientation sessions through Student Services Center.

Grants access to update Academic and Decision Data after a student has been matriculated.

Grants access for Undergraduate Admissions employees, generally student workers, that manage all processes related to undergraduate admissions - with the exception of merit aid overrides. This role excludes correction mode.

Grants access for the very few employees that manage the setup for undergraduate admissions. Additional training for this role is on-the-job.

Grants access for Undergraduate Admissions employees that manage all processes related to undergraduate admissions - with the exception of merit aid overrides.

Page 18 of 29

Page 37: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_SA_AD Ugrd Merit Aid Over Undergraduate Merit Aid Override Grants access for the few employees that will manage Merit Aid Overrides (and Holistic Merit Aid if that business process in reinstated). Additional training for this role is on-the-job.

Campus Community

UA_SA_CC 3C Config Update 3C Configuration Update Grants access to configure 3Cs and Service Indicators.

UA_SA_CC Bio Demo Add Pers UD Bio Demo Person Add Grants access to add a person to the system, as well as update person data (name, address, phone, email, ethnicity, citizenship, relationships, emergency contacts, etc.).

UA_SA_CC Bio Demo Address UD Bio Demo Address Update Grants access to update address data, and view most person data (name, phone, email, ethnicity, citizenship, relationships, emergency contacts, etc.).

UA_SA_CC Bio Demo Update Bio Demo Update Grants access to update person data (name, address, phone, email, ethnicity, citizenship, relationships, emergency contacts, etc.). This role does not grant the ability to add a person to the system.

UA_SA_CC BioDemo Correct_Reg Bio Demo Correction Grants access to correct key data such as SSNs, names, and DOB when entered erroneously. This role is restricted to staff in the Office of the Registrar or their delegates.

UA_SA_CC Config Update CC Configuration Update Grants access to configure the data for Bio Demo (define search match parameters, etc.), 3Cs and Service Indicators.

UA_SA_CC Connected Query UA Connected Query Access Grants access to create and view connected queries.

Monday, July 11, 2016 Page 19 of 29

Page 38: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access for the few employees that will manage Merit Aid Overrides (and Holistic Merit Aid if that business process in reinstated). Additional training for this role is on-the-job.

Grants access to configure 3Cs and Service Indicators.

Grants access to add a person to the system, as well as update person data (name, address, phone, email, ethnicity, citizenship, relationships, emergency contacts, etc.).

Grants access to update address data, and view most person data (name, phone, email, ethnicity, citizenship, relationships, emergency contacts, etc.).

Grants access to update person data (name, address, phone, email, ethnicity, citizenship, relationships, emergency contacts, etc.). This role does not grant the ability to add a person to the system.

Grants access to correct key data such as SSNs, names, and DOB when entered erroneously. This role is restricted to staff in the Office of the Registrar or their delegates.

Grants access to configure the data for Bio Demo (define search match parameters, etc.), 3Cs and Service Indicators.

Grants access to create and view connected queries.

Page 19 of 29

Page 39: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_SA_CC Data Steward Campus Community Data Steward Grants access to maintain core Campus Community configuration focusing on currency, validity, and the integration with HR. Includes update to student Service Indicators and 3Cs, as well as correction to bio demo data, 3Cs, and Service Indicator configura

UA_SA_CC Decedent Process UPD Decedent Data Update Grants access to update person data (name, address, phone, email, ethnicity, citizenship, relationships, emergency contacts, etc.) as well as decedent data.

UA_SA_CC Ext Org Update External Org Add/Update Grants access to update/maintain information about external organizations.

UA_SA_CC Ext System ID Upd External System ID Update Grants access to correct External IDs and resolve duplicate records.

UA_SA_CC fsaAtlas load UPD CC002 fsaAtlas Interface Grants access to run the custom ATLAS/SEVIS interface process.

UA_SA_CC HR SA Sync Compare UD HR/SA Comparison Grants access to run the HR/SA data sync compare for Campus Community Administrators Only.

UA_SA_CC LGB Service Ind View LGB Service Indicator View Grants access to view the LGB service indicator which is assigned to students who voluntarily disclose sexual orientation to the institution.

UA_SA_CC Load Query Table UD Load Query Table Update Provides access to the custom Load Query Reporting Table process.

UA_SA_CC PIN Reset CC PIN Reset Grants access to reset NetID pins.

UA_SA_CC Pop Select Update Pop Select Update Grants access to configure and maintain the Pop Select and Pop Update functions.

UA_SA_CC Resid Self Rpt Update Residency Self-Report Update Grants access for Admissions staff to update the residency a student "self reports" on the admissions application.

UA_SA_CC Residency Update Residency Update Grants access to update residency status.

Monday, July 11, 2016 Page 20 of 29

Page 40: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to maintain core Campus Community configuration focusing on currency, validity, and the integration with HR. Includes update to student Service Indicators and 3Cs, as well as correction to bio demo data, 3Cs, and Service Indicator configura

Grants access to update person data (name, address, phone, email, ethnicity, citizenship, relationships, emergency contacts, etc.) as well as decedent data.

Grants access to update/maintain information about external organizations.

Grants access to correct External IDs and resolve duplicate records.

Grants access to run the custom ATLAS/SEVIS interface process.

Grants access to run the HR/SA data sync compare for Campus Community Administrators Only.

Grants access to view the LGB service indicator which is assigned to students who voluntarily disclose sexual orientation to the institution.

Provides access to the custom Load Query Reporting Table process.

Grants access to reset NetID pins.

Grants access to configure and maintain the Pop Select and Pop Update functions.

Grants access for Admissions staff to update the residency a student "self reports" on the admissions application.

Grants access to update residency status.

Page 20 of 29

Page 41: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_SA_CC Serv Ind Config Upd Service Indicators Configuration Update Grants access to configure individual or batch service indicators.

UA_SA_CC Super User Campus Community Super User Grants access to configure functions within Campus Community as well as system updates and mods. Includes view to Tree Manager, and full access to Query Manager, Report Manager and XML Publisher.

Financial Aid

UA_SA_FA ADMIN FA Admin Grants access to update all FA transactional and setup pages, batch processing, and overrides to disbursements and packaging rules.

UA_SA_FA BURSAR Financial Aid Bursar Grants access to view/update loans for Bursar staff.

UA_SA_FA DEPT AWARD Financial Aid Department Award Grants access for department/college users to enter and approve awards in their college or department either by manual entry or file load and includes limited view-only access to transactional data in Financial Aid.

UA_SA_FA DEPT VIEW Financial Aid Department View Grants limited view-only access to transactional data in Financial Aid for users in colleges, departments, and administrative offices who advise students. Includes access to the Financial Aid portion of the Student Services Center.

UA_SA_FA Manager FA Manager Grants elevated access to update certain FA transactional and setup pages and overrides to disbursements.

UA_SA_FA OPERATIONS FA Operations Grants access for setup of item types, update to FISAP and Return of Title IV aid, and update to FA term, budgets, packaging and disbursements.

Monday, July 11, 2016 Page 21 of 29

Page 42: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to configure individual or batch service indicators.

Grants access to configure functions within Campus Community as well as system updates and mods. Includes view to Tree Manager, and full access to Query Manager, Report Manager and XML Publisher.

Grants access to update all FA transactional and setup pages, batch processing, and overrides to disbursements and packaging rules.

Grants access to view/update loans for Bursar staff.

Grants access for department/college users to enter and approve awards in their college or department either by manual entry or file load and includes limited view-only access to transactional data in Financial Aid.

Grants limited view-only access to transactional data in Financial Aid for users in colleges, departments, and administrative offices who advise students. Includes access to the Financial Aid portion of the Student Services Center.

Grants elevated access to update certain FA transactional and setup pages and overrides to disbursements.

Grants access for setup of item types, update to FISAP and Return of Title IV aid, and update to FA term, budgets, packaging and disbursements.

Page 21 of 29

Page 43: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_SA_FA Professional Judgment Professional Judgment Update Grants OSFA employees administrator rights to update the Professional Judgment page. Additional training for this role is on-the-job.

UA_SA_FA SCHOLARSHIP FA Scholarships Grants access to update scholarship information on the Packaging Variables page, as well update to FA term, budgets, packaging and disbursements.

UA_SA_FA STAFF FA Staff Grants access to update FA term, budgets, packaging and disbursements.

Graduate College

UA_SA_AD Grad Super User Admissions Super User Grants update access for application data, TS130 staging data, test scores, organizations, bio demo data, and 3Cs, and includes view to residency and transfer credit. Additional training for this role is on-the-job.

UA_SA_GC Super Functional Degree Check Super Functional Provides access for Graduate College Degree Certification staff to administer and manage Degree Certification forms.

UA_SA_SR Grad School SR Super Student Records Super User Grants access for Graduate College users to update and correct student records data. Additional training for this role is on-the-job.

UA_SA_SR Grad School SR User Student Records User Grants access for Graduate College staff to update Student Records data. Additional training for this role is on-the-job.

Multiple Subject Areas

UA_SA Query - Full Query Manager Grants access to create and run public and private queries for all subjects (admissions, advising, campus community, financial aid, student financials, student records, and transfer credit).

Monday, July 11, 2016 Page 22 of 29

Page 44: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants OSFA employees administrator rights to update the Professional Judgment page. Additional training for this role is on-the-job.

Grants access to update scholarship information on the Packaging Variables page, as well update to FA term, budgets, packaging and disbursements.

Grants access to update FA term, budgets, packaging and disbursements.

Grants update access for application data, TS130 staging data, test scores, organizations, bio demo data, and 3Cs, and includes view to residency and transfer credit. Additional training for this role is on-the-job.

Provides access for Graduate College Degree Certification staff to administer and manage Degree Certification forms.

Grants access for Graduate College users to update and correct student records data. Additional training for this role is on-the-job.

Grants access for Graduate College staff to update Student Records data. Additional training for this role is on-the-job.

Grants access to create and run public and private queries for all subjects (admissions, advising, campus community, financial aid, student financials, student records, and transfer credit).

Page 22 of 29

Page 45: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_SA Query - Read-Only Query Viewer Grants access to run existing public queries for all subjects (admissions, advising, campus community, financial aid, student financials, student records, and transfer credit).

UA_SA_CC 3C Update 3C Update Grants access to add or update 3Cs (communications, checklists or comments). Training for this role is on-the-job.

UA_SA_CC Service Indicator Upd Service Indicators Update Grants access to add or update service indicators individually or in batch.

UA_SA_SR Student Group SU Student Group Super User Grants access for individuals who need to assign Student Groups in batch using Pop Select as well as on individual students.

Reserved

SSN No Masking SSN No Masking Allows access to view full SSNs in UAccess Student.

Room and Course Scheduling

UA_SA_SR RCS Student SuperUser Room and Course Student SuperUser Grants update access to the custom Course Attributes and Target Enrollment pages.

UA_SA_SR Room Course SuperUser Room and Course Super User Grants update and correction access maintain the course catalog and class schedule. View access to Academic Structure and update access to Facilities.

Student Financials

UA_SA_SF Bursar Accounts Rec Bursar Accounts Receivable Grants access for Accounts Receivable/Collections staff.

UA_SA_SF Bursar Accts Rec Mgr Bursar Accounts Receivable Manager Grants access for supervisory staff in Accounts Receivable.

UA_SA_SF Bursar Rep Bursar Representative Grants access for Front Line Customer Service staff.

Monday, July 11, 2016 Page 23 of 29

Page 46: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to run existing public queries for all subjects (admissions, advising, campus community, financial aid, student financials, student records, and transfer credit).

Grants access to add or update 3Cs (communications, checklists or comments). Training for this role is on-the-job.

Grants access to add or update service indicators individually or in batch.

Grants access for individuals who need to assign Student Groups in batch using Pop Select as well as on individual students.

Allows access to view full SSNs in UAccess Student.

Grants update access to the custom Course Attributes and Target Enrollment pages.

Grants update and correction access maintain the course catalog and class schedule. View access to Academic Structure and update access to Facilities.

Grants access for Accounts Receivable/Collections staff.

Grants access for supervisory staff in Accounts Receivable.

Grants access for Front Line Customer Service staff.

Page 23 of 29

Page 47: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_SA_SF Bursar Rep Manager Bursar Representative Manager Grants access for supervisory staff in Front Line Customer Service.

UA_SA_SF Bursar Super Bursar Super User Grants access for management staff to perform updates to Bursar set-up.

UA_SA_SF Campus Health Admin Campus Health Admin Grants access for Campus Health staff responsible for changing insurance effective dates, information, etc. for Self Service.

UA_SA_SF Cybersource Cybersource Reconciliation User Grants access to reconcile payments between Cybersource and UAccess. Additional training for this role is on-the-job.

UA_SA_SF Item Type Config SF/FA Item Type Config and Tree View Grants access to create Item Types and view Item Security Tree. Additional training for this role is on-the-job.

UA_SA_SF OF BRSRFSO Approver Other Fee Bursar/FSO Reviewer Grants access to review Other Fee requests previously approved by the Provost Office.

UA_SA_SF OF CLVP Approver Other Fee Other Fee Dean/VP Approver Grants access to approve Other Fee requests previously approved by the Director.

UA_SA_SF OF Dir Approver Other Fee Director Approver Grants access to approve initiated Other Fee requests.

UA_SA_SF OF Requester Other Fee Requestor Grants access to initiate Other Fee requests.

UA_SA_SF OF VP Super User Other Fee Provost Approver Grants access to approve Other Fee requests previously approved by the Dean or VP.

Student Records

Monday, July 11, 2016 Page 24 of 29

Page 48: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access for supervisory staff in Front Line Customer Service.

Grants access for management staff to perform updates to Bursar set-up.

Grants access for Campus Health staff responsible for changing insurance effective dates, information, etc. for Self Service.

Grants access to reconcile payments between Cybersource and UAccess. Additional training for this role is on-the-job.

Grants access to create Item Types and view Item Security Tree. Additional training for this role is on-the-job.

Grants access to review Other Fee requests previously approved by the Provost Office.

Grants access to approve Other Fee requests previously approved by the Director.

Grants access to approve initiated Other Fee requests.

Grants access to initiate Other Fee requests.

Grants access to approve Other Fee requests previously approved by the Dean or VP.

Page 24 of 29

Page 49: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_SA_SR Academic Structure Academic Structure Admin Grants access for users responsible for the setup and maintenance of Academic Structure. Includes access to update and maintain Tree Manager for ACAD_ORGANIZATION and access to run delivered reports for academic structure tables.

UA_SA_SR Admin Grading Grade Admin Grants access for Registrar staff responsible for administrative grading and includes the ability to create grade rosters, update grade rosters, run the Grade Post and Grade Lapse processes, as well as running the Grade Change Audit.

UA_SA_SR Block Enrollment User Block Enrollment User Grants access to college/department users who mass enroll students into classes. Includes access to create student blocks, create class blocks, merge class/student blocks to enroll, view Class Schedule search, and view Tier 1 Seat Availability.

UA_SA_SR College Disqual College Disqualification Update Grants access for college users who don't have access to the College User role but still need the ability to process college or university disqualifications. Grants the ability to update students academic standing for college or university disqualificati

UA_SA_SR College User College User Grants the same access as the Department User and also allows college level designees access for overriding enrollment limits and updating academic standing. This access is typically granted to the college academic advising coordinator/director.

Monday, July 11, 2016 Page 25 of 29

Page 50: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access for users responsible for the setup and maintenance of Academic Structure. Includes access to update and maintain Tree Manager for ACAD_ORGANIZATION and access to run delivered reports for academic structure tables.

Grants access for Registrar staff responsible for administrative grading and includes the ability to create grade rosters, update grade rosters, run the Grade Post and Grade Lapse processes, as well as running the Grade Change Audit.

Grants access to college/department users who mass enroll students into classes. Includes access to create student blocks, create class blocks, merge class/student blocks to enroll, view Class Schedule search, and view Tier 1 Seat Availability.

Grants access for college users who don't have access to the College User role but still need the ability to process college or university disqualifications. Grants the ability to update students academic standing for college or university disqualificati

Grants the same access as the Department User and also allows college level designees access for overriding enrollment limits and updating academic standing. This access is typically granted to the college academic advising coordinator/director.

Page 25 of 29

Page 51: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_SA_SR CPP Campus Update Program/Plan and Campus Update Grants access to process college, major, and campus changes. This role is restricted to select users – primarily from UA South and the Academic Initiatives and Student Success (AISS) offices– responsible for campus changes.

UA_SA_SR CPP SuperUser CO Program/Plan Admin Grants access to update and correct student program, plan, sub-plan and student degrees pages.

UA_SA_SR CPP Update Program/Plan Update Grants access for Undergraduate Advisors who process college/major changes.

UA_SA_SR Department User Department User Grants access to college deans and their designees who process student enrollments, over-ride enrollment limits and update academic standing. Includes view to student career/program/plan, student enrollment appointments, honors and awards, milestones, ter

UA_SA_SR HCT Update Hard Copy Transcript Update Grants access to edit student data, add and inactivate image files on transcripts.

UA_SA_SR HCT View Hard Copy Transcript View Grants access to view student data and image files on transcripts.

UA_SA_SR Honors Awards Update SR Honors and Awards Update Grants update access to Honors and Awards.

UA_SA_SR Late Reg Fee Process Late Fee Processing Grants access to the custom Late Fee processes.

UA_SA_SR Load ENGL Placement Load English Placement Test Scores Grants access to upload a file of English Placement Test Scores.

UA_SA_SR Load Math Placement Load Math Placement Test Scores Grants access to upload a file of Math Placement Test Scores.

UA_SA_SR Milestone Setup Milestone Admin Grants access to add, update and correct the Milestone and Milestone Templates tables.

Monday, July 11, 2016 Page 26 of 29

Page 52: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to process college, major, and campus changes. This role is restricted to select users – primarily from UA South and the Academic Initiatives and Student Success (AISS) offices– responsible for campus changes.

Grants access to update and correct student program, plan, sub-plan and student degrees pages.

Grants access for Undergraduate Advisors who process college/major changes.

Grants access to college deans and their designees who process student enrollments, over-ride enrollment limits and update academic standing. Includes view to student career/program/plan, student enrollment appointments, honors and awards, milestones, ter

Grants access to edit student data, add and inactivate image files on transcripts.

Grants access to view student data and image files on transcripts.

Grants update access to Honors and Awards.

Grants access to the custom Late Fee processes.

Grants access to upload a file of English Placement Test Scores.

Grants access to upload a file of Math Placement Test Scores.

Grants access to add, update and correct the Milestone and Milestone Templates tables.

Page 26 of 29

Page 53: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_SA_SR Milestone Super Milestone Super User Grants access to add, update and correct Student Milestones. Training for this role is on-the-job.

UA_SA_SR Mosaic SR Core Team SR Core Team Grants access for SR Team Leads responsible for Student Records configuration.

UA_SA_SR NSC User NSC User Grants access to manage processes and tasks related to National Student Clearinghouse reporting.

UA_SA_SR Placement Exam User Placement Exam User Grants access to Test Results and Milestones for users that administer placement exams (i.e. Math and English). Training for this role is on-the-job.

UA_SA_SR PreSched Export Run export for Pre-Scheduling Grants access to run the export for Pre-Scheduling AD021.

UA_SA_SR Prof Stats Update Prof Stats Update Grants access to run the custom Update Academic Level from PROF process.

UA_SA_SR Registrar Grad Advise Grad Services Advisor Grants access for Registrar Graduation Services Advisors only. Training for this role is on-the-job.

UA_SA_SR Registrar Office Mgr Registrar Office Manager Grants the highest level of access to Registrar functions, including correction and ability to run batch processes.

UA_SA_SR Registrar Office Staf Registrar Office Staff Grants update access to all Registrar functions.

UA_SA_SR Registrar Stu Worker Registrar Student Worker Grants view access to all Registrar functions, including course catalog and schedule, term activation, appointments, enrollment, career/program/plan, milestones, honors and awards, and grades and grade rosters.

UA_SA_SR Registrar Stu Wrk Enr Registrar Student Wrk Enroll Grants view access to all Registrar functions, as well as the ability to process enrollment.

Monday, July 11, 2016 Page 27 of 29

Page 54: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to add, update and correct Student Milestones. Training for this role is on-the-job.

Grants access for SR Team Leads responsible for Student Records configuration.

Grants access to manage processes and tasks related to National Student Clearinghouse reporting.

Grants access to Test Results and Milestones for users that administer placement exams (i.e. Math and English). Training for this role is on-the-job.

Grants access to run the export for Pre-Scheduling AD021.

Grants access to run the custom Update Academic Level from PROF process.

Grants access for Registrar Graduation Services Advisors only. Training for this role is on-the-job.

Grants the highest level of access to Registrar functions, including correction and ability to run batch processes.

Grants update access to all Registrar functions.

Grants view access to all Registrar functions, including course catalog and schedule, term activation, appointments, enrollment, career/program/plan, milestones, honors and awards, and grades and grade rosters.

Grants view access to all Registrar functions, as well as the ability to process enrollment.

Page 27 of 29

Page 55: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

UA_SA_SR Run Processes SR Batch Processing Grants access to SR batch processes.

UA_SA_SR Term Actv TC Adjust Term Activation/Transfer Credit Adjust Grants access for individuals who process transfer credit and need to adjust (limit) the number of units that are applied toward the degree. This role is to be used in conjunction with Transfer Credit Update roles.

UA_SA_SR Trm Actv Enrl Appt UD Term Activation/Appointment Update Grants access to Term Activate students as well as update Enrollment Appointments. Additional training for this role is on-the-job.

UA_SA_SR VA Data Update Veteran Academic Certification Update Grants access to update all fields within the Veteran Academic Certification component. This access is limited to users within the Veteran Certification office within the Registrar.

UA_SA_SR Verify Presence Upd Verify Lawful Presence Update Grants access for central office (i.e., Registrar, Admissions, Financial Aid) users who can update Lawful Presence data.

UA_SA_SR_Quick Admit Quick Admit Grants access for offices with a business need to "quick admit" students to the University, which creates an active program/plan stack while bypassing the normal admissions process.

Student Records - Change of Grade Request

UA_SA_SR_GRC Reg Super User Office of the Registrar Super Grants access for the Grading Program Coordinator and the Assistant Registrar for grading to initiate, deny, review and comment on any and all grade changes.

Technical

HCM Security Administrator HCM Security Administrator Grants access to all delivered HCM row level security setup pages.

Monday, July 11, 2016 Page 28 of 29

Page 56: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Grants access to SR batch processes.

Grants access for individuals who process transfer credit and need to adjust (limit) the number of units that are applied toward the degree. This role is to be used in conjunction with Transfer Credit Update roles.

Grants access to Term Activate students as well as update Enrollment Appointments. Additional training for this role is on-the-job.

Grants access to update all fields within the Veteran Academic Certification component. This access is limited to users within the Veteran Certification office within the Registrar.

Grants access for central office (i.e., Registrar, Admissions, Financial Aid) users who can update Lawful Presence data.

Grants access for offices with a business need to "quick admit" students to the University, which creates an active program/plan stack while bypassing the normal admissions process.

Grants access for the Grading Program Coordinator and the Assistant Registrar for grading to initiate, deny, review and comment on any and all grade changes.

Grants access to all delivered HCM row level security setup pages.

Page 28 of 29

Page 57: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION

PeopleSoft Administrator PeopleSoft Administrator Provides unrestricted access to the PeopleSoft system, or full administrative authority to all application pages and PeopleTools utilities.

UA_SA Security Administrator SA Security Administrator Grants access to core and row level security for UITS security administrators.

Transfer Credit

UA_SA_TC Batch Post Transfer Credit Batch Post Grants users access to manage the batch create, un post, and posting of course credit and test credit.

UA_SA_TC Crse Mdl Upd Int Tran Transfer Credit Model Update Internal Transfer

Grants access to process internal course credit. Additional training for this role is on-the-job.

UA_SA_TC Data Entry With Post Transfer Credit Data Entry with Post Grants access to process transfer course and test credit for students. Includes entry/update access to education, test score, course model and test model pages. View access to the course and test credit rules.

UA_SA_TC Grad Coll Manual Upd Transfer Credit Grad College Manual Update

Grants access for Graduate College users to manually add and post transfer coursework for graduate students. Additional training for this role is on-the-job.

UA_SA_TC Rules Admin Transfer Credit Rules Admin with Batch Post

Grant access to manage Transfer Credit Rules.

UA_SA_TC Test Credit Model Upd Transfer Credit Test Credit Model Update with Batch Post

Grants access to process Test Credit for students - primarily for supporting students with Language placement tests. Training for this role is on-the-job.

UA_SA_TC Test Rules Upd Transfer Credit Test Rules Update Grants access to maintain Test Credit Rules - primarily for users who maintain the Language, Math and English placement test rules.

Monday, July 11, 2016 Page 29 of 29

Page 58: Elevated Privilege Role Descriptions · Elevated Privilege Role Descriptions SYSTEM NAME SUBJECT AREA TECHNICAL ROLE NAME FUNCTIONAL ROLE NAME ROLE DESCRIPTION UAccess Analytics High

ROLE DESCRIPTION

Provides unrestricted access to the PeopleSoft system, or full administrative authority to all application pages and PeopleTools utilities.

Grants access to core and row level security for UITS security administrators.

Grants users access to manage the batch create, un post, and posting of course credit and test credit.

Grants access to process internal course credit. Additional training for this role is on-the-job.

Grants access to process transfer course and test credit for students. Includes entry/update access to education, test score, course model and test model pages. View access to the course and test credit rules.

Grants access for Graduate College users to manually add and post transfer coursework for graduate students. Additional training for this role is on-the-job.

Grant access to manage Transfer Credit Rules.

Grants access to process Test Credit for students - primarily for supporting students with Language placement tests. Training for this role is on-the-job.

Grants access to maintain Test Credit Rules - primarily for users who maintain the Language, Math and English placement test rules.

Page 29 of 29