UiBhelp's public knowledge cards

KI 2127 How to handle applications for access as local administrator (for managers)

We have seen over time that universities and colleges can be attractive targets for hacker attacks. User accounts with administrator access are exposed and pose a major security risk for the University of Bergen.

We will still ensure that we have solutions so that employees and students can install the programs you need for their work.
The application procedure
When you receive an e-mail from UiB access with subject "Entitlement: Local computer administrator privileges", this is an application from one of your employees for access as a local administrator on a UiB PC.

Your task is then to click on the link in the e-mail and approve or reject the application.

The application must contain:
  • Description of the need.
    • There must be a genuine need for local administrator access that cannot be met by other means.
  • Description of which software program(s), if any, the employee needs to have access to download/update.
    • This information helps ITA improve access to widely used software and make installation easier in the future.
How to approve an application:
  1. Click the link in the e-mail you receive from UiBtilgang
  2. Select oppgaver/tasks in the menu in the upper right corner.
  3. Select GRANT – Local computer administrator privileges.
  4. Check the justification (Justification field) the employee has given.
    1. The application must have a justification to be approved.
    2. The justification should show that local administrator access is necessary and that the need cannot be met in other ways. Feel free to contact the IT division if you are unsure whether to approve or not.
  5. Check Approved*
  6. If required, write a comment (this will be visible to the employee in e-mail from the system)
  7. Approve the application by clicking Approve
  8. The employee will now receive an e-mail saying that the application has been approved and can download and use Make Me Admin for authorizing them as a local administrator.
How to decline an application:
  1. Click the link in the e-mail you receive from UiBtilgang
  2. Select oppgaver/tasks in the menu in the upper right corner.
  3. Select GRANT – Local computer administrator privileges.
  4. Check the justification (Justification field) the employee has given.
    1. The application must have a justification to be approved.
    2. The justification should show that local administrator access is necessary and that the need cannot be met in other ways. Feel free to contact the IT division if you are unsure whether to approve or not.
  5. Write a comment about why you reject the application (this will be visible to the employee in e-mail from the system)
  6. Reject the application by clicking the Deny button.
  7. The employee will now receive an e-mail with the comment explaining why the application has been rejected.