Administrative Rights Access
Administrator rights (often shortened to admin rights) means a user has privileges that allow them to perform most, if not all, functions within an operating system on a computer.
This includes the ability to install or delete software, hardware drivers, change system settings and install system updates.
Elevated administrative rights privileges can also be used to remove security controls, allowing an attacker to use the permissions captured to travel throughout the network leaving devastation.
Administrative rights access on University owned computers are typically reserved for ICT support staff responsible for computer maintenance and user support.
For further information regarding the University’s policy on Administrative Rights access, please refer to the ‘Administrator Access to End Users Devices Standard’ which can be found at Digital Services Policies.
Standard user rights, allow use of applications installed and provided with the computer. It also permits the user to install software from a central repository, known as, the Company Portal. Software to be found currently on the Company Portal includes, Adobe Acrobat Reader DC and Panopto.
Please see the Supporting Materials section for advice on how to access the Company Portal.
Requesting Elevated Administrative Rights
Requests for elevated rights are considered based on an approved business justification submitted to Digital Services. The appropriate support team will liaise with the user to identify alternative ways to allow a user to achieve their needs without granting them elevated privileges. This may include providing options for self-service software install via the Company Portal.
However, if elevated rights are deemed necessary, elevated privileges will be granted under the stipulation that the user must:
- Complete a security awareness training course.
- Ensure that the applications/hardware being installed are from a legitimate website and for the sole purpose of conducting University-related business.
- Ensure any changes to operating systems or browsers are approved.
- Consistently maintain and secure a backup of data.
A user granted elevated privileges must not:
- Disable other administrative accounts.
- Modify or disable any configured services (firewall, antivirus, etc.) or security configurations
- Unjoin the machine from the Active Directory (AD) domain.
Where a user feels they may require elevated administrative rights to perform their job role effectively, they should follow the business process below:
Business Process
To request an exception to standard access rights, you must seek support from your line manager before submitting an 'Application for Admin Rights* form which is available through "Other Staff Services" on the IT Service Desk tile within the staff portal.
You will be required to:
- State the reason for your request and advise why current device support arrangements are not suitable
- Specify how long you require elevated rights.
- Provide the name of your line manager and SLT representative.
- Read and Accept, the terms of the User Agreement at the bottom of the form.
Once the form is submitted, a call will be opened on the Digital Service IT Service Desk and escalated appropriately. You will be contacted to discuss options and your form will be reviewed to determine if elevated rights are required. If deemed necessary, approval will be sought from:
- Your line manager
- Your department Senior Leadership Team (SLT) member
Once approved, an instruction will be passed to Digital Services to provide a local account for elevated rights on the device.
You must also:
- Complete a security awareness training course.
* Note - Submitting an Admin Rights Account Request, does not guarantee rights will be granted.
Supporting Materials
Please check the company portal to see if the software you wish to download is available. You can refer to the following guide for information on how to access.
For further information on the University Admin Rights policy, please refer to the document 'Administrator Access to End Users Devices Standard' available at:
How to obtain help
How to contact the Service Desk
You can also Live Chat with a Service Desk team member. When a team member is available you will see a button on the bottom right of this screen. If the button is not visible, you can still contact us via the methods above.
Service Desk Hours
Opening Hours
Monday - Friday 8am - 8pm
Saturday – Sunday 1.30pm – 5pm
Extended Closure - Easter and Christmas Holidays
Cost
There is no cost associated with the support provided by Digital Services.
Service Desk Metrics (KPI/SLA Statement) (Where Applicable)
Requests approved by line managers will be reviewed, decision communicated and any required action completed within 10 business days.
Eligibility
Users requesting elevated administrative rights to devices must be members of staff, using a University Owned or Supplied (UOS) device that is managed under an appropriate hardware management platform.
Service Owner
ICT Governance