Easy Standard Operating Procedure for Ensuring Compliance with Permission Changes
Simple, easy-to-follow step by step instructions for IT Professionals to stay compliant and secure when they receive a request to change a user's permissions.
Copy templates to use them anywhere:
Ensuring compliance when providing a user with a permission change is of utmost importance for an IT professional. By keeping system access compliant and appropriate, you help to keep company, customer, and employee data secure.
Having an easy-to-follow SOP available directly inside virtually any ticketing system, such as JIRA, Zendesk, or Freshdesk, goes a long way in making sure the process for these changes are followed. Here's a Text Blaze snippet that walks an IT professional through the appropriate steps of changing permission.
Request to Change Permissions SOP
Permission Change
{note}1) Has the requestor provided the necessary information for the permission change? {formmenu: ; yes; no; name=infoprovided}{if: infoprovided=""}
{error: Select an option from the menu above to proceed}{elseif: not infoprovided}
{error: End of decision tree - You will need to request more information from the requestor. Send them the following note} {elseif: infoprovided}
2) Is approval for the request required? {formmenu: ; yes; no; name=approvalrequired} {endif}{if: approvalrequired=yes} 3) Has approval been received? {formmenu: ; yes; no; declined; name=approvalreceived}{endif}{if: approvalrequired=no or (approvalrequired=yes and approvalreceived=yes)} {error: TAKE ACTION: add to relevant Active Directory Group(s)}
{if: approvalrequired=yes}4) {elseif: approvalrequired=no}3) {endif}Have the Active Directory Group addition(s) been made? {formmenu: ; yes; no; name=ADaddsdone}{endif}{if: (approvalrequired=no or (approvalrequired=yes and approvalreceived=yes)) and ADaddsdone=yes} {error: End of decision tree - Confirm with the requestor that the permission change is working}
Click "insert" to send them the below message: {endif} {endnote}{if: infoprovided=no}{note} Click "insert" to send them the below message:
{endnote}To proceed with this request you will need to provide all of the following information: A B C {elseif: infoprovided=yes and (approvalrequired=yes and approvalreceived=no)}{note}{error: End of decision tree - Seek approval for changes before proceeding} Click "insert" to send them the below message:
{endnote}I will need to seek approval for this change and will confirm to you when this has been completed.{elseif: infoprovided=yes and (approvalrequired=yes and approvalreceived="declined")}{note}{error: End of decision tree - Approval was declined, alert the requestor with the following message}
{endnote}Approval for this change was required. After seeking approval, it was declined because {formtext: name=decline reason} so I am unable to complete this change.{elseif: ADaddsdone=yes}I have added you to the requested group(s) - can you please confirm that the updated permissions as working as expected?{elseif: ADaddsdone=no}{error: Complete the addition(s) to Active Directory to proceed}{endif}
{error: Select an option from the menu above to proceed}{elseif: not infoprovided}
{error: End of decision tree - You will need to request more information from the requestor. Send them the following note} {elseif: infoprovided}
2) Is approval for the request required? {formmenu: ; yes; no; name=approvalrequired} {endif}{if: approvalrequired=yes} 3) Has approval been received? {formmenu: ; yes; no; declined; name=approvalreceived}{endif}{if: approvalrequired=no or (approvalrequired=yes and approvalreceived=yes)} {error: TAKE ACTION: add to relevant Active Directory Group(s)}
{if: approvalrequired=yes}4) {elseif: approvalrequired=no}3) {endif}Have the Active Directory Group addition(s) been made? {formmenu: ; yes; no; name=ADaddsdone}{endif}{if: (approvalrequired=no or (approvalrequired=yes and approvalreceived=yes)) and ADaddsdone=yes} {error: End of decision tree - Confirm with the requestor that the permission change is working}
Click "insert" to send them the below message: {endif} {endnote}{if: infoprovided=no}{note} Click "insert" to send them the below message:
{endnote}To proceed with this request you will need to provide all of the following information: A B C {elseif: infoprovided=yes and (approvalrequired=yes and approvalreceived=no)}{note}{error: End of decision tree - Seek approval for changes before proceeding} Click "insert" to send them the below message:
{endnote}I will need to seek approval for this change and will confirm to you when this has been completed.{elseif: infoprovided=yes and (approvalrequired=yes and approvalreceived="declined")}{note}{error: End of decision tree - Approval was declined, alert the requestor with the following message}
{endnote}Approval for this change was required. After seeking approval, it was declined because {formtext: name=decline reason} so I am unable to complete this change.{elseif: ADaddsdone=yes}I have added you to the requested group(s) - can you please confirm that the updated permissions as working as expected?{elseif: ADaddsdone=no}{error: Complete the addition(s) to Active Directory to proceed}{endif}
_
