The recommended MIS security settings for data extraction are

advertisement
Groupcall Xporter | 2010
Recommended MIS Security Settings
Page 1 of 7
Xporter Edition
This information applies to all editions of Groupcall Xporter.
Version Control
1
2
3
Date
2010-11-22
2010-11-23
2011-07-19
Author
Tim Verlander
Tim Verlander
Becky Thornton
Groupcall Xporter Support
Notes
Highlighted impact of minimum settings on multiple extracts
Added link to SIMS video and details of how to amend the
user referenced in Xporter.
Tel: 0208 502 7344
Email: xporter.support@groupcall.com
Latest Xporter First-Line Support Procedures at www.groupcall.co.uk/download/firstline/
Groupcall Xporter | 2010
Contents
Xporter Edition ........................................................................................................................................ 1
Version Control ....................................................................................................................................... 1
What is Xporter and why is it being installed? ....................................................................................... 3
Xporter Recommended MIS Security Settings ........................................................................................ 3
Page 2 of 7
Video Instructions for SIMS ................................................................................................................ 3
Are the Recommended MIS Security Settings Safe? .............................................................................. 4
Credentials .......................................................................................................................................... 4
Data Selection ..................................................................................................................................... 4
Data Agreement .................................................................................................................................. 4
How do I specify the user with which Xporter will access the MIS? ....................................................... 4
Initial Setup ......................................................................................................................................... 4
Changes at a later date ....................................................................................................................... 5
My Organisation Cannot Use the Recommended MIS Security Settings ............................................... 6
Identifying the Minimum Necessary MIS Security Settings .................................................................... 7
Where can I go for further information? ................................................................................................ 7
Groupcall Xporter Support
Tel: 0208 502 7344
Email: xporter.support@groupcall.com
Latest Xporter First-Line Support Procedures at www.groupcall.co.uk/download/firstline/
Groupcall Xporter | 2010
What is Xporter and why is it being installed?
Groupcall Xporter is a versatile data extraction tool and can take information from a wide variety of
systems, including the most common School MIS systems, and present it to other systems in a
standardised format.
Many companies choose to use Groupcall Xporter to extract data for their software in order to
simplify the data extraction process by not needing direct access to the many different MIS systems
Page 3 of
7
in use. The company that supplied Groupcall Xporter to you has approached
Groupcall
and provided
us with a data specification, which Groupcall Xporter produces by querying your MIS system, and a
secure upload mechanism, which Groupcall Xporter will use to transmit the data.
Groupcall Xporter is used by a wide number of different vendors, including cashless catering,
payment systems, library systems, attendance reporting software and local authorities.
Xporter Recommended MIS Security Settings
Because Groupcall Xporter is a versatile data extraction tool and provides data extracts for a very
wide variety of systems the support requirements can be very complex and vary depending on what
Xporter is being used for and where it is extracting data from.
In order to simplify the customer setup and support experience Groupcall makes a recommendation
on security settings for MIS access that provides a good balance of versatility, security, simplicity and
supportability.
The recommended MIS security settings for the two most common MIS systems are detailed below.
If you are using a MIS system that isn’t listed them please contact the Groupcall partner that
provided you with Xporter for details of the recommended MIS security settings.
For Capita SIMS .net Groupcall recommends the following group memberships for the user
accessing SIMS:




Personnel Officer
School Administrator
Senior Management Team
Third Party Reporting
For Facility CMIS Groupcall recommends use of the stud_admin schema, via the STUD_ADMIN user.
Video Instructions for SIMS
A video showing the creation of a SIMS user with Recommended MIS Security Settings can be found
at http://www.groupcall.co.uk/download/firstline/videos/ under the link “Creating a SIMS User for
Groupcall”
Groupcall Xporter Support
Tel: 0208 502 7344
Email: xporter.support@groupcall.com
Latest Xporter First-Line Support Procedures at www.groupcall.co.uk/download/firstline/
Groupcall Xporter | 2010
Are the Recommended MIS Security Settings Safe?
The recommended MIS security settings for data extraction are designed to expose all information
within an MIS for potential extraction by Xporter. Xporter security covers three areas:
Credentials
Xporter encrypts the password used to access the MIS system such that it cannot be used by
anything other than Xporter.
Page 4 of 7
Data Selection
Xporter cannot arbitrarily access data, it only extracts what it has been scripted to obtain.
Data Agreement
Data agreements are a legal enforceable agreement (in the case of statutory data collection by Local
Authorities data agreements may be implicit) between the Groupcall partner providing Xporter and
the organisation that Xporter has been installed in. They specify the scope and purpose of data
collection. An Xporter extraction will be designed to the specification of the Groupcall partner and
will therefore comply with the data agreement.
How do I specify the user with which Xporter will access the MIS?
Initial Setup
If you have created the user as per the recommended settings above prior to installing Xporter, then
you will need to specify those credentials during the setup of Xporter as shown in fig 1.
Fig. 1 – MIS Settings specified during setup.
Groupcall Xporter Support
Tel: 0208 502 7344
Email: xporter.support@groupcall.com
Latest Xporter First-Line Support Procedures at www.groupcall.co.uk/download/firstline/
Groupcall Xporter | 2010
Changes at a later date
If you originally setup Xporter using different settings, then once you have configure the user as per
the recommended settings above, you will need to amend the reference in Xporter accordingly.
From the Xporter management Console;
1.
2.
3.
4.
Page 5 of 7
Select ‘Passwords’ on the left
Choose the MIS login option (SIMS.net shown in fig. 2)
Choose Modify Password on the right
Specify the user you created to meet recommended settings in the pop up window.
Fig. 2 – Changing the user referenced in Xporter.
Groupcall Xporter Support
Tel: 0208 502 7344
Email: xporter.support@groupcall.com
Latest Xporter First-Line Support Procedures at www.groupcall.co.uk/download/firstline/
Groupcall Xporter | 2010
My Organisation Cannot Use the Recommended MIS Security Settings
If the requirements of your organisation do not allow use of the recommended MIS security settings
then there are a number of options available to you:


If the organisation does not allow one individual to hold the recommended MIS security
settings then a dedicated account can be created for Xporter to use. This ensures that there
is no sharing of MIS accounts and that the account is only used for defined Xporter extracts.
Page 6 of 7
If the organisation does not allow MIS accounts that do not belong to individuals then
Xporter can be configured to run using a SIMS account belonging to a specific person with
the necessary security rights. In this configuration Xporter would automatically share the
account with the individual it belonged to.

If the organisation requires human intervention for data extracts then the data extraction
can be executed manually by setting and clearing the Xporter MIS password value. This
means that extracts can only be run under immediate supervision of an individual with the
appropriate rights to SIMS and would not be able to run automatically.

If the organisation requires the minimum necessary MIS security settings to be applied
instead of the recommended MIS security settings then these can be identified and applied.
This requires identification of the minimum necessary MIS security setting for each column
in an extraction, including those used internally during generation, and then configuration of
MIS security settings to support an aggregation of those minimum necessary MIS security
settings.
Groupcall Xporter Support
Tel: 0208 502 7344
Email: xporter.support@groupcall.com
Latest Xporter First-Line Support Procedures at www.groupcall.co.uk/download/firstline/
Groupcall Xporter | 2010
Identifying the Minimum Necessary MIS Security Settings
For any given extract there may be a smaller subset of the recommended MIS security settings that
would allow successful data extraction. This subset is called the Minimum Necessary MIS Security
Settings and is likely to vary for each extract configured. Because Xporter uses a single account to
connect to an MIS this means that it will be necessary to aggregate multiple sets of Minimum
Necessary MIS Security Settings into a single set of permissions in order to run multiple extracts.
Page
of 7
If an organisation requires the identification of the minimum necessary
MIS7security
settings then
Groupcall can supply details of the columns being extracted from MIS to calculate and output an
extract. Your organisation can then apply their local knowledge to identify and assign specific
security rights.
Please be aware that while Groupcall will support any customer using minimal security
requirements, the following conditions apply to this:

If an issue is investigated and the cause is identified as use of security settings other than the
Recommended MIS Security Settings then the support time in identifying and resolving that
issue may be chargeable.

If an organisation wishes to engage Groupcall to identify the minimal security requirements
for a specific report then this work may be chargeable.
Where can I go for further information?
Groupcall recommends that, in the first instance, you should contact the company that supplied
Groupcall Xporter to you as they will know most about their software, the data extracted and how
the data is transmitted and used.
Groupcall Xporter Support
Tel: 0208 502 7344
Email: xporter.support@groupcall.com
Latest Xporter First-Line Support Procedures at www.groupcall.co.uk/download/firstline/
Download