Other Account Request Forms
All account requests undergo an approval process through UWSP’s Information Security Office.
Please submit Account requests at least three business days in advance.
Request the ability to elevate a personal UWSP account to admin on a specific university endpoint. You must be able to demonstrate a business need for this elevation.
Example:
A special purpose computer with a software package that must run under an administrative account when accessing peripheral devices.
Requests to install software are not approved through this form and will be deleted. See UWSP’s
security review process for software.
Presenter / Workshop Account Request
Short-term accounts for presenters and attendees from outside of UWSP who are conducting or taking a workshop, conference, or presentation and require login access to UWSP computers.
Account types:
-
Individual accounts (Preferred). It is strongly recommended that individual accounts be requested for each presenter/instructor and attendee requiring access to UWSP computers.
-
Shared accounts. Shared accounts may be requested but require additional adherence to compensating security controls. You will be made aware of these prior to request approval
(for example, restricting the account’s access to a specific computer lab).
Generic accounts are accounts that are not associated with any specific individual.
Requests for generic accounts will be reviewed on a case-by-case basis. Approval for a generic account will be based on business need, lack of available alternatives, and the ability to implement security controls to compensate for the absence of accountability associated with generic account usage.
Third-Party Account Request
Third-Party accounts are extended duration, single-person accounts for individuals who do not have a university appointment but require access to UWSP computers and/or other network resources due to a contract, affiliation, volunteer agreement, or other institutional or federative arrangement.
To request this account type:
-
First - complete the account request in DIMS to begin the provisioning process
(access DIMS
here), then,
-
Second - complete the
Third-Party Account Request form to obtain the necessary approvals.
Example: contractors, visiting lecturers, students from other institutions, UW System employees, and volunteers.
Request access to additional systems for your existing UWSP account. This request process will send notification to system administrators and approvers responsible for those systems. You will receive notification when the approval is complete.
Example: access to a SharePoint group or additional modules in AccessPoint.
Service Accounts are accounts provisioned in support of a business process or computer system. Service Accounts are very narrow in terms of scope, usage, and permissions.
A Service Account should not be used as a day-to-day work logon or shared in any way.
Criteria for service accounts:
1) Never used for interactive logon
2) Created and used in support of a technical or business process requiring automation
3) A demonstrable technical need for the account
4) Password must be kept in an encrypted vault
5) 16 character password that meets minimum complexity requirements
Criteria for two-year cycle:
1) All above, plus…
2) Never used for remote logon
3) Password vault only accessible to IT technical contacts supporting the service
4) 32 character password that meets minimum complexity requirements
Criteria for a five-year cycle
1) All above, plus…
2) Account is also not used for impersonation, batch processing, or process automation
3) Password vault only accessible to domain administrators
4) 64 character password that meets minimum complexity requirements