New SIMS install - Permissions Red Tape!

[iainphillips]

Hi all,

 

We have recently moved back to SIMS.net from CMIS and I am having a political nightmare getting sufficient permissions to do my job.

In CMIS, as a network manager, I had full administrator rights which were never abused. With SIMS I have little more than teacher access, which frustrating when trying to deploy updates and connect 3rd party applications to SIMS.

 

Just out of interest, what permissions do other network managers have in SIMS? The best I am managing is get temporary System Manager access for an hour or so before it gets removed by the Data Manager. Its a pita and not really workable long term!

[localzuk]

I've got System Manager rights - So, I've got access to do everything. However, I don't have other rights enabled (eg. I don't have any of the personnel stuff etc...), as its not necessary. Sure, I could add it if I were so inclined, but I'm not.

 

Why is the Data Manager doing this? Who has set this policy in your school? If, like me, you are responsible for the integrity of all systems on your network, then you need administrative rights to all those systems to do it. If you don't have them, then you simply can't do your job.

[bossman]

@iainphillips:

 

Ditto @localzuk:

[iainphillips]

Access to System Manager is pretty much all that I am after.

 

Its coming from further up the tree than the Data Manager. From what I understand, the powers that be want to limit access to SIMS in terms of data protection. Not that we have previously had an issue, but as it is a new system, they want to ensure that it is locked down tight.

 

I am just trying to gauge what other schools do in terms of permissions. Personally I think it is ridiculous to have permissions switched on and off again on an individual basis, but maybe that's just me....

[matt40k]

Personally, this is why SOLUS3 was created. The network manager can install SIMS and not worry about SIMS. The data manager can just use SIMS and not worry about network permissions etc. It keeps the two roles defined and seperate.

 

SOLUS3 - network managers

System Manager - data manager

 

If you've got a dedicated data manager like you've said, what the problem? If you've got third party products, the data manager should give you a user\pass for it, they should set it up as they are responsible for the data. It should hopefully stop the scenerio where the network manager gives the third party system manager access (ie administrator access in sims) because they've been dumped on to install some third party product on friday at 6pm which has to be working by Monday.

[sparkeh]

I have Systems Manager but due to being asked to do extra bits and bobs over the year I have collected extra roles but review them every so often to check if I still need them.

[PotNoodleTech]

System manager here. I tend to only add extra permissions when I need them e.g. today needed to print out some student monitoring reports.

 

Mind you - if the school want to keep that all for the data manager I wouldn't argue - just let 'em get on with it, when anyone comes to you because they can't do something send 'em to the data manager. You install SIMS and test it works on a workstation with your "teacher" account and data manager and SMT team they can get on with the rest.

 

I'm quite jealous actually!!

[iainphillips]

It all sounds great in theory, except for when something breaks and then Capita want to remote on to the servers to test a fix but I don't have the necessary access. This has happened 3 times so far since the beginning of November.

We are also connecting various 3rd party systems into SIMS which will no doubt need troubleshooting in the future...

[matt40k]

Have a word, they, the data manager and co, should be contacting Capita and they, Capita, should be contact them directly. They should only contact you if it's a techy problem and when they do it should be, reinstall SIMS, give permissions for this share. It de-values both the data and the network managers saying they are interchangeable. The person who created the pastoral and the assessment templates probability isn't going to be the same person who created your Active Directory domain. Although it does happen, it shouldn't, you're never gonna be a master of all trades and even if you are, they aren't going to strike lucky when it comes to finding a replacement.

[forkies]

I am Network Manager and I am in charge of all data and services and therefore to do my job have full permissions to everything. You could (not saying you should) reset the sysman password using the SQL password so you can get in as system manager and give yourself full permissions.