Download - 2015 16th Annual PABUG Conference Making Sense of Banner Security Ed Siegle, Swarthmore College
2015 16th Annual PABUG Conference
Making Sense of Banner Security
Ed Siegle, Swarthmore College
2015 16th Annual PABUG Conference
General Announcements:• Please turn off all cell phones/pagers• If you must leave the session early,
please do so as discreetly as possible • Please avoid side conversations
during the session• Questions will be answered …..
Thank you for your cooperation
2015 16th Annual PABUG Conference
To receive CPE credits for this session (if eligible), complete the CPE Attendance Form on the PABUG Annual Conference website
http://pabug.org/pennsylvania-banner-users-group-annual-conference/cpe-credits/
or via the PABUG conference app.
For additional questions please contact
Kim Fremont CPE - Coordinator http://pabug.org/contact-us/
CPE Credits - We’ve gone electronic!
2015 16th Annual PABUG Conference
Overview
• Banner security is extensive but cumbersome– Lots of tabs, menus and radio buttons to click
• Needed a way to streamline and simplify• Auditing purposes• Answer to liaison question “Who has access to what?”
• How to group users with liaisons?
• Distributed security, fully implemented, would be overkill for us
• We are already using FGA, but what other features should we consider?
2015 16th Annual PABUG Conference
Distributed Security
• GSASECR access for specific users & forms– Create new user (bansecr_username)– GSADSUM – assign privileges, grants, restrictions– GSADSEC – associate groups with the user
• Drawbacks for us– More user accounts to maintain– Don’t want to give GSASECR access, even minimal– Still doesn’t solve the streamline issue
2015 16th Annual PABUG Conference
Distributed Security cont’d
• Even though the full implementation was not feasible for us I did see some things that we could use– Security Groups for users and liaisons would allow
for one to one mapping• Application Express (APEX) would be our
delivery solution to present the information in a concise and usable format for our liaisons
2015 16th Annual PABUG Conference
Grouping users with liaisons
• Form GSADESC – Security Groups tab– Created a security group for the liaisons, LIASON,
and assigned each departmental power user to this group.
– Created security groups for all college areas • ADMISSIONS, ALUMNI, FINAID, FINANCE , etc. – 37 in
total
2015 16th Annual PABUG Conference
Grouping users with liaisons cont’d
• Form GSADESC – Group Details tab – Assigned each liaison to a departmental group.– Assigned each user, based on Banner From
permissions, to at least one departmental security group.
– All subsequent users can be assigned to security groups within GSASECR, Banner Rules
2015 16th Annual PABUG Conference
2015 16th Annual PABUG Conference
2015 16th Annual PABUG Conference
•Making sense of it all…
2015 16th Annual PABUG Conference
Grouping users with liaisons cont’d
• The following sql will return the liaisons for the FINAID (Financial Aid) security group :
SELECT DISTINCT gurugrp_user FROM spriden, gobeacc, bansecr.gurugrp WHERE spriden_pidm = gobeacc_pidm AND gobeacc_username = gurugrp_user AND spriden_change_ind IS NULL AND gurugrp_sgrp_code = 'FINAID' AND gurugrp_user IN (SELECT gurugrp_user FROM bansecr.gurugrp WHERE gurugrp_sgrp_code = 'LIASON')ORDER BY 1;
2015 16th Annual PABUG Conference
Grouping users with liaisons cont’d
• The following sql will return all users in the FINAID (Financial Aid) security group:
SELECT gurugrp_user FROM spriden, gobeacc, bansecr.gurugrp WHERE spriden_pidm = gobeacc_pidm AND gobeacc_username = gurugrp_user AND spriden_change_ind IS NULL AND gurugrp_sgrp_code = 'FINAID'ORDER BY 1
2015 16th Annual PABUG Conference
Oracle Account Summary
2015 16th Annual PABUG Conference
Oracle Account Summary cont’d
2015 16th Annual PABUG Conference
Banner Account SummaryIn GSASECR, this layout would be two separate tabs
2015 16th Annual PABUG Conference
Banner Account Summary cont’d
2015 16th Annual PABUG Conference
Class Detail
2015 16th Annual PABUG Conference
Class Detail cont’d
2015 16th Annual PABUG Conference
All Users in Specific Class
2015 16th Annual PABUG Conference
All Users in Specific Class cont’d
2015 16th Annual PABUG Conference
Object Detail
2015 16th Annual PABUG Conference
Object Detail cont’d
2015 16th Annual PABUG Conference
Accounts Ready for Deletion
2015 16th Annual PABUG Conference
Accounts Ready for Deletion cont’d
2015 16th Annual PABUG Conference
Application Express (APEX)
2015 16th Annual PABUG Conference
Calendars
• Banner Security provides the ability for date and time Banner access
2015 16th Annual PABUG Conference
Calendar cont’d
• This sequence will allow Banner access only between the times of 8:00 AM and 7:00 PM Monday through Friday from June 5, 2014 through August 29, 2014.
2015 16th Annual PABUG Conference
Calendar cont’d
• This sequence will disallow Banner access completely on Saturday and Sunday.
2015 16th Annual PABUG Conference
Calendar cont’d• Users are associated to Calendars in GSASECR
– Active From & To dates must be populated and To Date should be well into the future, otherwise user will have regular INB access (defect or feature?)
2015 16th Annual PABUG Conference
GSASECR Banner Rules
Where is the Calendar?
Fine Grained Access
Table GURLOGN
Table GURUGRP
2015 16th Annual PABUG Conference
Summary
• Distributed Security may be an option• Security Groups allow for user/liaison
mapping• We use APEX to deliver consolidated, scalable
GSASECR reports• Calendars allow for Time/Date access
restrictions
2015 16th Annual PABUG Conference
Open to the Floor
• Questions• Comments
2015 16th Annual PABUG Conference
Please take time to complete our Conference and Session
evaluations.
YOUR INPUT MATTERS!!!