4.1 Roles and Responsibilities

The planning and implementation of ID-Synch should be carried out by those in the following roles:

• Business managers with knowledge of business needs and departmental organization
• Security architects
• System administrators (for each system where ID-Synch provides accounts)
• Security or login account administrators
• Human resources personnel (with knowledge of process/workflow for new hires and role changes)

The following tasks need to be carried out for successful implementation of ID-Synch:

• Business managers, supervisors, login account administrators:
  • Define the account and login ID authorization process.
  • Define the number and type of authorizers. Your organization can have authorizers for accounts, login IDs, or both.
  • Define the number and role of users for ID-Synch's workflow automation features. For example, they may be supervisors or help desk analysts within your organization.

• System administrators, business Managers, security architect, login account administrators
  • Define the number and types of template accounts that need to be created on each system.
  • Define the number and types of roles. These decisions should be based on both the security and business needs of your organization. For example, you may want to create roles according to the department and job function.

• Systems administrators, security architect
  • Define which functions will be available to ID-Synch console users on each system. This means you can prevent ID-Synch console users from creating or deleting accounts on certain targets.
  • Define who the ID-Synch console users will be, how they will be grouped, and privileges each group of console users will be allowed on each system.

• ID-Synch application administrator
  • Define password rule sets to be applied to each system.
  • Prepare the server for the installation of ID-Synch.
  • Install ID-Synch software.
  • Configure ID-Synch .