Skip to main content

System Access Review

Georgia Southern regularly reviews access to its sensitive systems. System Access Review, a semi-annual audit, is conducted in order to remain in compliance with the University System of Georgia’s Data Access Policy (USG IT Handbook, 9.4.1). In keeping with this policy, ITS performs System Access Review for Banner, PeopleSoft Financials, and Touchnet. Keep reading to learn more about how to complete this process.

Completing Access Review

For instructions on how to complete the System Access Review, please click here.

Frequently Asked Questions

General

Who do I contact if I have questions or need assistance?

Our MyTech Support representatives are happy to help you complete this process. Please contact us by calling (912) 478-2287 or by using any of our other contact methods.


One (or more) of the employees in my list are

  • not under my supervision
  • not in my review list

Employees in the SAR interface are assigned based on OneUSG supervisory data. If an employee is missing or assigned to you incorrectly, please click here to submit a request to Human Resources to have the supervisory information updated.


Do I have to complete this in one sitting?

No, you will have 30 days to complete the review.

Banner

My employee shows as having Banner classes but the employment status shows the employee is terminated, what do I do?

Because the information pulled from Banner is a snapshot in time the information shown may not be in the same state as it is today. You still must review all access that shows for your employee. If that access is correct then mark it as approved, if it is not correct then mark it as denied.


What is a class?

A class is a set of rules that provide access to certain information. This could include access to names, birth dates, Social Security Numbers, etc. The description field for each class gives a general description of what kind of access the class provides.


How do I remove access to a class?

This is done automatically when you select the deny option for the employee. An automatic email will be generated to Accounts Management to remove the specific class from the employee.


What happens if I remove the ALL_BAN_USERS class?

By removing this class from the user, the user will no longer be able to access Banner, AppsXtender, or Business Objects.


What happens if I remove the GSU_JOBSUB_C class?

By removing this class from the user, the user will no longer be able to run or print from Banner Job Submissions.


What if a class is removed by mistake?

For instructions on how to edit or view previous submissions, please click here.  Then click on the Editing Submissions tab.


Banner Account Status – what does this mean?

Each employee has an account status in Banner. Most accounts will have an OPEN status, meaning that the account is open and is usable. There are a few other status that may show up beside an employee. This is the state of the account in Banner at the time the information was pulled. All of these statuses still mean the account has access to Banner through the listed classes so they still need to be reviewed. Below is a list of the status and their respective definitions.

  • OPEN – The Banner account is open and able to be used for listed classes
  • EXPIRED – The password expired and the grace period is over.
  • EXPIRED(GRACE) – The password expired but still within grace period.
  • LOCKED(TIMED) – Too many attempts with incorrect password.
  • EXPIRED & LOCKED(TIMED) – Combination of the above.
  • EXPIRED(GRACE) & LOCKED(TIMED) – Combination of the above.
  • EXPIRED & LOCKED – Expired password and the account is disabled but still has Banner classes assigned to account.
  • EXPIRED(GRACE) & LOCKED – Expired password and the account is disabled but still has Banner classes assigned to account.


Who do I contact if I have questions or need assistance?

Completing System Access Review can be complicated. Our MyTech Support representatives are happy to help you complete this process. Please contact us by calling (912) 478-2287 or by using any of our other contact methods.
GeorgiaFirst Financials/ePro

I see more roles than I requested. Why is that?

When requesting ePro “Requester” or ePro “Approver” access, there is a set group of roles that are needed. Some roles are required for both “Requesters” and “Approvers”. Each role is only added once.

For Requesters

  • BOR PeopleSoft User – No Tauth
  • BOR_AD_HOC_APPROVE
  • BOR_CAT_Requester
  • BOR_EP_INQUIRY
  • BOR_EP_MAINT_REQ_SCI
  • BOR_EP_REQUESTER
  • BOR_PO_RECV_EPRO

For Approvers

  • BOR PeopleSoft User – No Tauth
  • BOR_AD_HOC_APPROVE
  • BOR_CAT_Requester
  • BOR_EP_INQUIRY
  • BOR_EP_MAINT_REQ_SCI
  • BOR_EP_RA_CHANGEDISTR
  • BOR_EP_RA_CHANGEHDR
  • BOR_EP_RA_CHANGELINE
  • BOR_EP_REQ_APPROVE


There are roles assigned to my employees that were not requested by me.

USG employees may create an account for themselves using GeorgiaFirst Financials Self Service module that will allow them to submit travel and expense reports.  The roles granted for this are:

  • BOR PeopleSoft User – No Tauth
  • BOR_FN_ADMIN_REPORTING
  • ReportSuperUser


Who do I contact if I have a question/problem with GeorgiaFirst Financials/ePro?

Our MyTech Support representatives are happy to help you complete this process. Please contact us by calling (912) 478-2287 or by using any of our other contact methods.

Last updated: 4/16/2021