
Authority Manager lets you view, grant, and revoke systems authority to persons whose job requires them to access Stanford business systems. You grant a privilege to an eligible person, and set scope, limits, and conditions on the privilege. The result is recorded as an assignment. Some privileges have prerequisites (such as training) that the recipient must complete before the assignment can take effect.
Privileges are grouped into business functions, which roughly represent a defined business activity. Business functions are grouped into authority subsystems to help differentiate similar functions.
| assignment | Each time a grantor goes through the Grant Authority wizard, it results in one new row in the recipient's Person view. Each row represents one assignment. An assignment consists of:
If the grantor selects more than one population, project, task, etc., all the other elements of the assignment apply equally to each of the selections. For example, if the grantor selects two projects in the same assignment, the same spending limit will apply to both projects. If the projects require different spending limits, they must be assigned separately. |
|||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| authority-granting proxy | A person you designate in Authority Manager to grant authority on your behalf. That person can act as you in Authority Manager to grant any authority that you yourself can grant, but cannot act as you in any Stanford business systems. | |||||||||||||||||||||||||||||||||||||||||||||
| authority subsystem | Authority subsystems are loosely equivalent to University business offices and the business systems that support them.
In Authority Manager, lists of business functions are grouped by authority subsystem to help distinguish between similar functions in different business areas. |
|||||||||||||||||||||||||||||||||||||||||||||
| business function | A set of privileges that represent a defined University business activity.
When granting authority in Authority Manager, you will see only those business functions that include privileges you are authorized to grant. |
|||||||||||||||||||||||||||||||||||||||||||||
| business function | A software system used to manage University business functions and data. Examples: PeopleSoft HR, Oracle Financials. |
|||||||||||||||||||||||||||||||||||||||||||||
| condition | An individual must meet specified conditions in order to have systems authority. S/he must be a current member of the Stanford community (staff, faculty, student), and must have met any prerequisites attached to the privilege. A manager can also set an expiration date on which the authority will be automatically revoked (or renewed by the manager). | |||||||||||||||||||||||||||||||||||||||||||||
| eligible person | Authority can be granted to anyone in the Stanford administrative or academic communities. These include:
If a person has authority, and their status changes so that they are no longer a member of these communities, their authority will be automatically revoked. Only members of these communities can log into Authority Manager to view or grant authority. |
|||||||||||||||||||||||||||||||||||||||||||||
| grant | The act of assigning authority that you have been authorized to extend to others. You can be authorized in two ways:
|
|||||||||||||||||||||||||||||||||||||||||||||
| limit | Some privileges apply only within the projects, populations, dollar amounts, etc. specified by the grantor - these are collectively referred to as "limits". Some privileges are, by their nature, unlimited. If a privilege has limits defined, step 5 of the Grant wizard in Authority Manager will take you through each limit in turn. (If no limits are defined, the wizard will skip step 5.) Some limits allow more than one selection; all limits require at least one selection.
|
|||||||||||||||||||||||||||||||||||||||||||||
| notification | Authority Manager sends email notifications to grantors and recipients of authority for various reasons, including:
Wherever possible, notifications of a given type are combined into one daily email. Some situations (such as an acting approver assignment that starts immediately) trigger an immediate notification. |
|||||||||||||||||||||||||||||||||||||||||||||
| organization | Any department or group in the official University structure. All privileges are granted in the context of an organization; a manager can grant authority only within her own organization and its sub-organizations. Note that the organization applies to the privilege, not the recipient of the authority. |
|||||||||||||||||||||||||||||||||||||||||||||
| prerequisite | Some privileges have requirements (successful completion of training, signature on file, etc.) that must be met by the individual before the privilege can take effect. When a prerequisite is completed, the individual is added to a special workgroup, and Authority Manager is notified to activate the pending authority. |
|||||||||||||||||||||||||||||||||||||||||||||
| privilege | A specific task or set of tasks that can be granted to an individual. Privileges are self-contained - for example, the "administer leave" privilege covers all the data and tasks required to do that job, in all affected business systems.
|
|||||||||||||||||||||||||||||||||||||||||||||
| restore | The ability to reinstate authority by individual privilege. You can only restore those privileges that you can grant. |
|||||||||||||||||||||||||||||||||||||||||||||
| restore all | The ability to reinstate authority by authority subsystem in mass. You can only restore in mass those privileges that you can grant. |
|||||||||||||||||||||||||||||||||||||||||||||
| revoke | The act of removing authority. You can only remove authority that you have been authorized to extend to others. |
|||||||||||||||||||||||||||||||||||||||||||||
| revoke all | The ability to mass revoke authority by authority subsystem. You can only revoke in mass those privileges that you can grant. | |||||||||||||||||||||||||||||||||||||||||||||
| scope | The organization to which an authority assignment applies. | |||||||||||||||||||||||||||||||||||||||||||||
| systems authority | Access to the portions of Stanford business systems that contain data or tasks related to a specified privilege. | |||||||||||||||||||||||||||||||||||||||||||||
| system owner | Individuals who have any grantable privilege scoped to Stanford University are system owners for the authority subsystem that includes that privilege. System owners see an additional set of Authority Views on the Authority Manager home page - one for each business function for which they are an owner. | |||||||||||||||||||||||||||||||||||||||||||||