th Annual PABUG Conference Making Sense of Banner Security Ed Siegle, Swarthmore College

th Annual PABUG Conference General Announcements: Please turn off all cell phones/pagers If you must leave the session early, please do so as discreetly as possible Please avoid side conversations during the session Questions will be answered ….. Thank you for your cooperation

th Annual PABUG Conference To receive CPE credits for this session (if eligible), complete the CPE Attendance Form on the PABUG Annual Conference website group-annual-conference/cpe-credits/ or via the PABUG conference app. For additional questions please contact Kim Fremont CPE - Coordinator CPE Credits - We’ve gone electronic!

th Annual PABUG Conference Overview Banner security is extensive but cumbersome – Lots of tabs, menus and radio buttons to click Needed a way to streamline and simplify Auditing purposes Answer to liaison question “Who has access to what?” How to group users with liaisons? Distributed security, fully implemented, would be overkill for us We are already using FGA, but what other features should we consider?

th Annual PABUG Conference Distributed Security GSASECR access for specific users & forms – Create new user (bansecr_username) – GSADSUM – assign privileges, grants, restrictions – GSADSEC – associate groups with the user Drawbacks for us – More user accounts to maintain – Don’t want to give GSASECR access, even minimal – Still doesn’t solve the streamline issue

th Annual PABUG Conference Distributed Security cont’d Even though the full implementation was not feasible for us I did see some things that we could use – Security Groups for users and liaisons would allow for one to one mapping Application Express (APEX) would be our delivery solution to present the information in a concise and usable format for our liaisons

th Annual PABUG Conference Grouping users with liaisons Form GSADESC – Security Groups tab – Created a security group for the liaisons, LIASON, and assigned each departmental power user to this group. – Created security groups for all college areas ADMISSIONS, ALUMNI, FINAID, FINANCE, etc. – 37 in total

th Annual PABUG Conference Grouping users with liaisons cont’d Form GSADESC – Group Details tab – Assigned each liaison to a departmental group. – Assigned each user, based on Banner From permissions, to at least one departmental security group. – All subsequent users can be assigned to security groups within GSASECR, Banner Rules

th Annual PABUG Conference

th Annual PABUG Conference

th Annual PABUG Conference Making sense of it all…

th Annual PABUG Conference Grouping users with liaisons cont’d The following sql will return the liaisons for the FINAID (Financial Aid) security group : SELECT DISTINCT gurugrp_user FROM spriden, gobeacc, bansecr.gurugrp WHERE spriden_pidm = gobeacc_pidm AND gobeacc_username = gurugrp_user AND spriden_change_ind IS NULL AND gurugrp_sgrp_code = 'FINAID' AND gurugrp_user IN (SELECT gurugrp_user FROM bansecr.gurugrp WHERE gurugrp_sgrp_code = 'LIASON') ORDER BY 1;

th Annual PABUG Conference Grouping users with liaisons cont’d The following sql will return all users in the FINAID (Financial Aid) security group: SELECT gurugrp_user FROM spriden, gobeacc, bansecr.gurugrp WHERE spriden_pidm = gobeacc_pidm AND gobeacc_username = gurugrp_user AND spriden_change_ind IS NULL AND gurugrp_sgrp_code = 'FINAID' ORDER BY 1

th Annual PABUG Conference Oracle Account Summary

th Annual PABUG Conference Oracle Account Summary cont’d

th Annual PABUG Conference Banner Account Summary In GSASECR, this layout would be two separate tabs

th Annual PABUG Conference Banner Account Summary cont’d

th Annual PABUG Conference Class Detail

th Annual PABUG Conference Class Detail cont’d

th Annual PABUG Conference All Users in Specific Class

th Annual PABUG Conference All Users in Specific Class cont’d

th Annual PABUG Conference Object Detail

th Annual PABUG Conference Object Detail cont’d

th Annual PABUG Conference Accounts Ready for Deletion

th Annual PABUG Conference Accounts Ready for Deletion cont’d

th Annual PABUG Conference Application Express (APEX)

th Annual PABUG Conference Calendars Banner Security provides the ability for date and time Banner access

th Annual PABUG Conference Calendar cont’d This sequence will allow Banner access only between the times of 8:00 AM and 7:00 PM Monday through Friday from June 5, 2014 through August 29, 2014.

th Annual PABUG Conference Calendar cont’d This sequence will disallow Banner access completely on Saturday and Sunday.

th Annual PABUG Conference Calendar cont’d Users are associated to Calendars in GSASECR – Active From & To dates must be populated and To Date should be well into the future, otherwise user will have regular INB access (defect or feature?)

th Annual PABUG Conference GSASECR Banner Rules Where is the Calendar? Fine Grained Access Table GURLOGN Table GURUGRP

th Annual PABUG Conference Summary Distributed Security may be an option Security Groups allow for user/liaison mapping We use APEX to deliver consolidated, scalable GSASECR reports Calendars allow for Time/Date access restrictions

th Annual PABUG Conference Swarthmore College Ed Siegle

th Annual PABUG Conference Open to the Floor Questions Comments

th Annual PABUG Conference Please take time to complete our Conference and Session evaluations. YOUR INPUT MATTERS!!!