1. 12/4/2007 ERCOT Public INF MP Identity Management: Roles Gary Macomber

2. 2 ERCOT Public 12/4/2007 Background Business Roles are default grouping of application permissions by function. While reviewing the next slide please consider the following questions. –Where read-only is needed? –Should job functions be mapped to application roles or is there a better way to represent this? –Is this level of granularity enough? –Can the Business Roles be further consolidated? –Do the Business Roles reflect desired application permissions by function to make them worthwhile? Actual permissions will be set at the application level initially Assumptions –Primary source for reports will be MIS –Permission setting for a person for an application is for all functions of that application.

3. 3 ERCOT Public 12/4/2007 Business Role by Application Matrix Applications Business RolesMMSCRROSNMMSMISDisputes MPIM OperatorR/WR Marketer/TraderR/WRR AnalystRRRR/W Outage OperatorR/W SettlementsRRR/W CRR AccountholderR/W Counter-PartyR/W PlanningR/W USAR/W

4. 4 ERCOT Public 12/4/2007 Roles - Descriptions NameDescription Operator Controls generation or transmission equipment, oversees the implementation of instructions from ERCOT Marketer/Trader Participates in one or more ERCOT managed markets, enters bids, offers, trades into the market management system Analyst Reviews the results of market and/or real time activities for a Market Participant, develops internal reports and analyses Outage Operator Schedules and updates equipment outages in the ERCOT Control Area, similar to the Operator and Marketer/Trader Settlements Reviews the results of market and/or real time activities, validates statements and invoices, enters settlement disputes CRR Accountholder Market Participant qualified to take part in Congestion Revenue Right auctions and related activities Counter-Party Legal entity that has established Credit with ERCOT for the purposes of participating in various Energy-related markets Planning Proposes, tracks, and reviews changes and updates to the network model, may participate in transmission and generation planning activities USAResponsible for creating, modifying, and terminating users for their company

5. 5 ERCOT Public 12/4/2007 Comments Please review the Business Role/Application matrix and the role descriptions –Suggest changes –Identify missing Business Roles Provide description Provide guidance on applications used –Validate the descriptions and suggest updates Send comments to: gmacomber@ercot.comgmacomber@ercot.com Thank you!