Was muss ich als Master User bei der Kennungskonsolidierung tun?
A personal LRZ account is always merged with the LMU user ID of a person. We use the following identification terms:
- LRZ account = account created in the LRZ-IDM portal and managed by master users.
- LMU user ID = ID managed by the LMU, usually of the form first name.last name
- LMU/LRZ account = the LRZ account assigned to an LMU user ID, required for the use of LRZ services, usually referred to as LRZ account in the LMU portal, of the form SyllableDigitSyllable (e.g. ri58nab)
Time and organisational schedule:
- You will receive a list of all accounts of your LRZ project as an Excel sheet. The list is based on data from the LRZ user administration and is enriched by LMU Identity Management with LMU data, including the presumed LMU user IDs of the persons concerned.
Your task is then to check the list and indicate what should be done with each personal identifier. The following actions are planned:
a. "Merge LRZ account and LMU user ID"
... if the LRZ account and the LMU user ID belong to the same person,
b. "Take over LRZ account as LMU/LRZ account"
... if the person in question still needs their LRZ account and does not yet have an LMU user ID. Here you must also specify what role the person has at LMU (e.g. lecturer or external service provider),
c. "Convert LRZ account to functional account"
... if the account in question was created as a personal account, but is in essence a functional account,
d. "Delete LRZ account"
... if the account in question is obsolete,
e. "Other"
... if any other case exists, e.g. if LRZ account and LMU user ID do not belong to the same person.
2. You send the Excel sheet you have edited back to us.
3. In the IDM portal, you make the changes that you have noted in the Excel sheet and that you can carry out yourself with your master user rights (conversion to functional accounts and deletion of obsolete accounts).
4. We will look at the Excel sheet you have worked on and check whether there are cases in which the merging of the accounts causes problems and, if necessary, clarify these in cooperation with you.
5. We will arrange an appointment with you for the changeover.
6. We will inform all those affected of the changeover date in an individual e-mail. This email will also contain information on what will change for the individual user.
7. If you have assigned permissions in Insitutional Cloud Storage directly to accounts and not (ADS)-groups, please also note: What are the implications of account consolidation for the use of services by individual users?
8. On the changeover date, we run a programme to merge accounts and copy the data. There is usually little or nothing for you as a master user to do, as experience has shown that the information from the announcement e-mail is sufficient for the users.