2015 16th Annual PABUG Conference Making Sense of Banner Security Ed Siegle, Swarthmore College.

2015 16th Annual PABUG Conference

Making Sense of Banner Security

Ed Siegle, Swarthmore College


General Announcements:• Please turn off all cell phones/pagers• If you must leave the session early,

please do so as discreetly as possible • Please avoid side conversations

during the session• Questions will be answered …..

Thank you for your cooperation


To receive CPE credits for this session (if eligible), complete the CPE Attendance Form on the PABUG Annual Conference website

http://pabug.org/pennsylvania-banner-users-group-annual-conference/cpe-credits/

or via the PABUG conference app.

For additional questions please contact

Kim Fremont CPE - Coordinator http://pabug.org/contact-us/

CPE Credits - We’ve gone electronic!



http://pabug.org/contact-us/


Overview

• Banner security is extensive but cumbersome– Lots of tabs, menus and radio buttons to click

• Needed a way to streamline and simplify• Auditing purposes• Answer to liaison question “Who has access to what?”

• How to group users with liaisons?

• Distributed security, fully implemented, would be overkill for us

• We are already using FGA, but what other features should we consider?


Distributed Security

• GSASECR access for specific users & forms– Create new user (bansecr_username)– GSADSUM – assign privileges, grants, restrictions– GSADSEC – associate groups with the user

• Drawbacks for us– More user accounts to maintain– Don’t want to give GSASECR access, even minimal– Still doesn’t solve the streamline issue


Distributed Security cont’d

• Even though the full implementation was not feasible for us I did see some things that we could use– Security Groups for users and liaisons would allow

for one to one mapping• Application Express (APEX) would be our

delivery solution to present the information in a concise and usable format for our liaisons


Grouping users with liaisons

• Form GSADESC – Security Groups tab– Created a security group for the liaisons, LIASON,

and assigned each departmental power user to this group.

– Created security groups for all college areas • ADMISSIONS, ALUMNI, FINAID, FINANCE , etc. – 37 in

total


Grouping users with liaisons cont’d

• Form GSADESC – Group Details tab – Assigned each liaison to a departmental group.– Assigned each user, based on Banner From

permissions, to at least one departmental security group.

– All subsequent users can be assigned to security groups within GSASECR, Banner Rules


•Making sense of it all…



• The following sql will return the liaisons for the FINAID (Financial Aid) security group :

SELECT DISTINCT gurugrp_user FROM spriden, gobeacc, bansecr.gurugrp WHERE spriden_pidm = gobeacc_pidm AND gobeacc_username = gurugrp_user AND spriden_change_ind IS NULL AND gurugrp_sgrp_code = 'FINAID' AND gurugrp_user IN (SELECT gurugrp_user FROM bansecr.gurugrp WHERE gurugrp_sgrp_code = 'LIASON')ORDER BY 1;



• The following sql will return all users in the FINAID (Financial Aid) security group:

SELECT gurugrp_user FROM spriden, gobeacc, bansecr.gurugrp WHERE spriden_pidm = gobeacc_pidm AND gobeacc_username = gurugrp_user AND spriden_change_ind IS NULL AND gurugrp_sgrp_code = 'FINAID'ORDER BY 1


Oracle Account Summary


Oracle Account Summary cont’d


Banner Account SummaryIn GSASECR, this layout would be two separate tabs


Banner Account Summary cont’d


Class Detail


Class Detail cont’d


All Users in Specific Class


All Users in Specific Class cont’d


Object Detail


Object Detail cont’d


Accounts Ready for Deletion


Accounts Ready for Deletion cont’d


Application Express (APEX)


Calendars

• Banner Security provides the ability for date and time Banner access


Calendar cont’d

• This sequence will allow Banner access only between the times of 8:00 AM and 7:00 PM Monday through Friday from June 5, 2014 through August 29, 2014.


Calendar cont’d

• This sequence will disallow Banner access completely on Saturday and Sunday.


Calendar cont’d• Users are associated to Calendars in GSASECR

– Active From & To dates must be populated and To Date should be well into the future, otherwise user will have regular INB access (defect or feature?)


GSASECR Banner Rules

Where is the Calendar?

Fine Grained Access

Table GURLOGN

Table GURUGRP


Summary

• Distributed Security may be an option• Security Groups allow for user/liaison

mapping• We use APEX to deliver consolidated, scalable

GSASECR reports• Calendars allow for Time/Date access

restrictions


Swarthmore College

• Ed Siegle

• [email protected]


Open to the Floor

• Questions• Comments


Please take time to complete our Conference and Session

evaluations.

YOUR INPUT MATTERS!!!

2015 16th Annual PABUG Conference Making Sense of Banner Security Ed Siegle, Swarthmore College.

Documents

Transcript of 2015 16th Annual PABUG Conference Making Sense of Banner Security Ed Siegle, Swarthmore College.