Content (1169)
Password storage is via a secure, two-factor password system. This allows for secure password storage while allowing authorized users to retain and share important system passwords.
Reference GroupsReference groups are based on the University HR Organizational Tree (also known as the Department Tree Table) as represented in PeopleSoft database system, as well as on information about each student's college association(s). Reference groups organize people at the university into…
Secure environment for administrative accessApplication administrators are required to use secure environments to carry out administrative operations and tasks.
In addition to the security procedures required for Cornell employees, vendors and consultants also must:Adhere to security measures included in the terms of the contract.Meet or exceed requirements defined in Cornell Policy 5.10 Information Security.Annually complete and attest to either: …
These security procedures apply to both Cornell University staff and consultants.
Using a supported browser, connect to manage.ad.cornell.edu.
All CornellAD reference groups based on the lowest level of the Peoplesoft HR Tree (typically at the department level) are mail-enabled for use with Exchange. (Peoplesoft calls these "Node 9 groups.")This means you can, for example,
What's All This Then?The information on this page is presented in the context of using CornellAD reference groups to set sharing permissions to Exchange calendars and mail folders, or to use them as a way of sending email to the entire group.
Only Primary Admins can create/manage Dynamic groups in ARS. Learn more about the differences between Primary and Delegated DoCIDs.There are many ways to use dynamic groups. Here we'll describe how to set up dynamic groups for a few common situations.
Only Primary Admins can create/manage Dynamic groups in ARS. Learn more about the differences between Primary and Delegated DoCIDs.The act of turning a basic group into a dynamic group removes all existing members from the group, so we recommend creating a brand-new group (with no members), rather…
Setting up a dynamic group can be a complicated process. CIT's Identity Management group will be happy to help you.The simplest way to make someone (or an object) a member of a group is to add them to that group manually. If conditions change and they should no longer be a member, you remove them…
The Quest ARS web interface supports the following browsers:Firefox (current release)Chrome (current release)Edge (current release)Whichever browser you use, JavaScript and cookies must be enabled.
There are two levels of control over the properties of a group. The vendor's documentation calls these Primary Owners and Secondary Owners.
Direct and Indirect Group MembershipGroups can contain both NetIDs and other groups. This results in nested group memberships. Members of the main group are Direct members. Members of the nested groups are Indirect members.Example
When you create groups, it's a good idea to set them up as universal groups from the start. Groups must be universal in order to mail-enable the group or add a reference group as a member.
Mail-enabling a CornellAD group allows the group to be used in two additional ways.
Every level of the Peoplesoft HR Tree has several references groups associated with it. Here's an overview of what the various suffixes mean.Employee Groupsrg.NameOfGroup.employee – all employees including the sub-groups of staff, temporary, pre-arrival, academic, faculty. Does not include outbound…
Groups (in CornellAD) give you a way to assign access rights to network resources. CornellAD reference groups allow you to do this without requiring you to maintain lists of who belongs to each group. If you use reference groups to set permissions (rather than creating a group yourself), when a…
A Cornell Network ID (or NetID) is a personal, unique identifier assigned to you. It consists of your initials followed by one or more numbers, for example, xxx99@cornell.edu. You use it, along with a password and multi-factor authentication, to obtain access to online services such as email…
CIT hosts more than 5500 different e-lists, serving more than 1,600,000 members. There are millions of lists hosted in other places. So how do you tell whether these web pages apply to the list you’re interested in? A quick look at the email address of the list will tell you. CIT-hosted lists have…