Account Creation (Departmental/Administrative)

What Is It?

Service or Admin accounts are specialized accounts outside the scope of primary user accounts or secondary email accounts.

These elevated accounts are used to perform administrative, security, and configuration tasks within your Organizational Unit (OU) across the university's IT ecosystem, specifically including Active Directory (AD), Microsoft Entra ID, Microsoft Intune, Microsoft Defender, Jamf, Splunk, and other enterprise cloud platforms. By utilizing these accounts, administrators ensure a strict separation of duties, isolating high-privilege security functions—such as managing directory services, configuring cloud-based access controls, enrolling and managing Apple devices, monitoring security alerts, analyzing SIEM logs, and administering cloud infrastructure—from day-to-day tasks that do not require elevated authority.

    Important Note on Account Provisioning:

    Account creation is automated and continuously monitored by Technology Solutions. All requested accounts are reviewed for naming convention compliance and potential abuse. Any account requests that are incorrectly named, non-compliant, or deemed abusive will be rejected, renamed, or deleted.

Other Service Names

Special Accounts, SuperUser Accounts, Service Accounts

Requirements

Service Account naming convention

• sa-DEPT-Service/Function
• Example: sa-CC-AccountRequestor

Administrator Account naming convention

• su-NetID
• Example: su-HarryPotter

After your account is created you can add that account to the appropriate group in Active Directory and assign resource permissions to that group.  Please use the following naming conventions for groups within your OU to prevent any naming conflicts within the directory:

• Domain Local: DL-Dept-Function
• Global Group: GG-Dept-Function
• Universal Group: UG-Dept-Function

Limitations

• A user account cannot consist solely of periods, or spaces, or end in a period. Any leading periods or spaces are cropped. User accounts should less than 64 characters
• A group account cannot consist solely of numbers, periods (.), or spaces. Any leading periods or spaces are cropped. Group accounts should be less than 64 characters.

Who Is Eligible To Use It?

• IT Pros
• Faculty
• Staff

Where Can I Get It?

Select the Request Departmental / Administrative Account button located on this page.

How Do I Use It?

Use of the accounts will vary based on the type and purpose of the account.

How Much Does It Cost?

This service is funded by the University; there are no direct costs to clients.

How Can I Get Support?

If you are experiencing a problem with this service, please report it. If you just have a question, feel free to ask us.

Service Levels