Translated with DeepL.com

Accounts - Permissions

Accounts/accounts within the KIT network can take on different characteristics and authorizations (for example, when the contract status of an employee or guest changes), and accounts are also created and maintained from various sources.

Employee accounts and similar accounts, for example, are managed through the interface to the leading personnel management system (SAP),
Guest and partner accounts are maintained by the employees defined in the OUs in Guest and Partner Management,
student accounts are administered by the student administration using their administration software, and
special types of accounts, which are partly technically conditioned and / or provided with special functions (admin-accounts, service-accounts ...) are administered by SCC.

 

Accounts supplied by Personnel Services (PSE):

PSE delivers different varieties of accounts through the interface available to Identity Management (IDM) using SAP. So here SAP is the leading authoritative system and responsible for the updates or changes of HR data. For this reason , in case of problems with such accounts - such as leaving, renewal of a contract, etc. - please always contact the responsible HR manager first. - please always ask the responsible personnel manager first:

  Mail addressformat KIT account Authorization
ASK-Shop		 Authorization
Libraryservices		 Shibboleth
User class(es)		 Usage
bwSync&Share
Staff @kit.edu yes yes yes employee;member yes
trainee @kit.edu yes yes yes employee;member yes
PhD student @kit.edu yes yes yes employee;member yes
ATZ active @kit.edu yes yes yes employee;member yes
ATZ-passive @kit.edu yes yes yes employee;member yes
pensioner ---------- ---------- ---------- ---------- ----------------  
Emeritus @kit.edu yes yes yes employee;member yes
DHBW student @kit.edu yes yes yes employee;member yes
Visiting Scientist @kit.edu yes yes yes employee;member yes
Lecturer @kit.edu yes yes yes employee;member yes

 

Notes:

  • All accounts with @kit.edu mail address get their own mailbox.
  • Accounts managed by IDM and delivered by SAP are created in ActiveDirectory under kit.edu\KIT\Staff\OE abbreviation\IDM.
  • Use of bwSync&Share with membership in the AD group SCC-Entitlement-bwsyncnshare (GID 83922) or SCC-Entitlement-bwsyncnshare-IDM (GID 83923). Automatically, the active MAs with the SAP roles:
    "Trainee, DHBW student, doctoral student, visiting scientist, lecturer, employee CN, employee CS scient. Employees, Employees CS Civil Servants, Employees CS Scient. Beamte, Mitarbeiter CS Sonstige, Mitarbeiter CS Beschäftigte, Praktikant, Professor, Professor im Ruhestand, Ruhend" (Retired)
    included (per table above), manually the ITB can have an account added to the SCC Entitlement-bwsyncnshare-Exceptions group via ticket to SCC in Group Management.
  • Former employees were able to request a maximum extension of their account for 2 years via request until the deprovisioning regulations went into effect. However, accounts with this "alumni" status no longer have permissions for bwSync&Share.

 

Accounts supplied by the GuP (Guests and Partners) administration:

By means of the GuP administration, KIT organizational units can create accounts themselves according to the roles that can be assigned in the GuP.

The login name and the initially assigned mail address have the form ab1234 ∂does-not-exist.partner kit edu.

Depending on the selected role, or other selected options, the additional kit.edu mail address can be assigned, this is set up as an additional alias address.

  Mail addressformat KIT account Authorization
ASK-Shop		 Authorization
Libraryservices		 Shibboleth
User class(es)		 Usage
bwSync&Share
External Student @partner.kit.edu yes no no affiliate ---
Scholar @partner.kit.edu, @kit.edu yes no no affiliate yes
scholarship holder(partner) @partner.kit.edu yes no no affiliate yes
employee of an external company @partner.kit.edu yes no no affiliate ---
Friend and supporter of KIT
(role no longer current)		 @partner.kit.edu yes no no affiliate ---
Habilitand @partner.kit.edu yes no no affiliate yes
PhD student @partner.kit.edu, @kit.edu yes yes yes employee;member yes
doctoral student(partner) @partner.kit.edu yes no no affiliate yes
stud. Auxiliary @partner.kit.edu, 9 ∂does-not-exist.kit edu yes no no affiliate yes
research assistant @partner.kit.edu, 9 ∂does-not-exist.kit edu yes no no affiliate yes
people from collaborations @partner.kit.edu yes no no affiliate ---
Former employee @partner.kit.edu yes no no affiliate ---
guest student / gifted student @partner.kit.edu yes no no affiliate ---
Visiting Scholar @partner.kit.edu yes no no affiliate yes
Other scient. Personal @partner.kit.edu yes no no affiliate yes
intern @partner.kit.edu yes no no affiliate ---
Former Professor @partner.kit.edu yes no no affiliate yes
Scientific day guest @partner.kit.edu yes no no affiliate ---
Privatdozent @partner.kit.edu, @kit.edu yes no no affiliate yes

Notes:

  • All accounts get their own mailbox (but is very often only used as a forwarding).
  • GuP accounts managed by IDM are created in the ActiveDirectory under kit.edu\KIT\MISC\OE abbreviation\IDM.
  • Once a role has been assigned in the GuP administration that entitles to a @kit.edu mail address, only roles that also entitle to @kit-edu addresses can be assigned to the guest when changes are made (doctoral student, scholarship holder, scientific / student assistant, private lecturer).
  • Use of bwSync&Share with membership in the AD group SCC-Entitlement-bwsyncnshare (GID 83922) or SCC-Entitlement-bwsyncnshare-IDM (GID 83923).
    Automatically the active guest and partners with the above mentioned roles (see table) are added to these groups, manually the ITB can have an account added to the SCC-Entitlement-bwsyncnshare-Exceptions group via ticket to SCC in the group management.

 

Special account types managed by SCC / IDM:

  • personal admin account -> KIT adminaccount
  • service account -> KIT serviceaccount
  • Course account for the use of the SCC pool rooms
  • Wlan guest accounts

These accounts may have limited functions for specific purposes only

 

Accounts for students ("U-Accounts")

These are supplied to us exclusively by the student administration, for this reason SCC cannot have any influence on these accounts.
In case of administrative problems (expiration of the account due to late re-registration, problems with enrollment ... ) please contact the student administration / the student office first!

Note: Use of bwSync&Share: Students with an active U-account are members of the corresponding groups and can therefore use bwSync&Share.