Accounts - Permissions

Accounts/accounts within the KIT network can take on different characteristics and authorizations (for example, when the contract status of an employee or guest changes), and accounts are also created and maintained from various sources.

Employee accounts and similar accounts, for example, are managed through the interface to the leading personnel management system (SAP),
Guest and partner accounts are maintained by the employees defined in the OUs in Guest and Partner Management,
student accounts are administered by the student administration using their administration software, and
special types of accounts, which are partly technically conditioned and / or provided with special functions (admin-accounts, service-accounts ...) are administered by SCC.


Accounts supplied by Personnel Services (PSE):

PSE delivers different varieties of accounts through the interface available to Identity Management (IDM) using SAP. So here SAP is the leading authoritative system and responsible for the updates or changes of HR data. For this reason , in case of problems with such accounts - such as leaving, renewal of a contract, etc. - please always contact the responsible HR manager first. - please always ask the responsible personnel manager first:


Mail addressformatKIT accountAuthorization
ASK-Shop
Authorization
Libraryservices
Shibboleth
User class(es)
Usage
bwSync&Share
Staff@kit.eduyesyesyesemployee;memberyes
trainee@kit.eduyesyesyesemployee;memberyes
PhD student@kit.eduyesyesyesemployee;memberyes
ATZ active@kit.eduyesyesyesemployee;memberyes
ATZ-passive@kit.eduyesyesyesemployee;memberyes
pensioner--------------------------------------------------------
Emeritus@kit.eduyesyesyesemployee;memberyes
DHBW student@kit.eduyesyesyesemployee;memberyes
Visiting Scientist@kit.eduyesyesyesemployee;memberyes
Lecturer@kit.eduyesyesyesemployee;memberyes


Notes:

  • All accounts with @kit.edu mail address get their own mailbox.
  • Accounts managed by IDM and delivered by SAP are created in ActiveDirectory under kit.edu\KIT\Staff\OE abbreviation\IDM.
  • Use of bwSync&Share with membership in the AD group SCC-Entitlement-bwsyncnshare (GID 83922) or SCC-Entitlement-bwsyncnshare-IDM (GID 83923). Automatically, the active MAs with the SAP roles:
    "Trainee, DHBW student, doctoral student, visiting scientist, lecturer, employee CN, employee CS scient. Employees, Employees CS Civil Servants, Employees CS Scient. Beamte, Mitarbeiter CS Sonstige, Mitarbeiter CS Beschäftigte, Praktikant, Professor, Professor im Ruhestand, Ruhend" (Retired)
    included (per table above), manually the ITB can have an account added to the SCC Entitlement-bwsyncnshare-Exceptions group via ticket to SCC in Group Management.
  • Former employees were able to request a maximum extension of their account for 2 years via request until the deprovisioning regulations went into effect. However, accounts with this "alumni" status no longer have permissions for bwSync&Share.


Accounts supplied by the GuP (Guests and Partners) administration:

By means of the GuP administration, KIT organizational units can create accounts themselves according to the roles that can be assigned in the GuP.

The login name and the initially assigned mail address have the form ab1234 does-not-exist.partner kit edu.

Depending on the selected role, or other selected options, the additional kit.edu mail address can be assigned, this is set up as an additional alias address.


Mail addressformatKIT accountAuthorization
ASK-Shop
Authorization
Libraryservices
Shibboleth
User class(es)
Usage
bwSync&Share
External Student@partner.kit.eduyesnonoaffiliate---
Scholar@partner.kit.edu, @kit.eduyesnonoaffiliateyes
scholarship holder(partner)@partner.kit.eduyesnonoaffiliateyes
employee of an external company@partner.kit.eduyesnonoaffiliate---
Friend and supporter of KIT
(role no longer current)
@partner.kit.eduyesnonoaffiliate---
Habilitand@partner.kit.eduyesnonoaffiliateyes
PhD student@partner.kit.edu, @kit.eduyesyesyesemployee;memberyes
doctoral student(partner)@partner.kit.eduyesnonoaffiliateyes
stud. Auxiliary@partner.kit.edu, 9 does-not-exist.kit eduyesnonoaffiliateyes
research assistant@partner.kit.edu, 9 does-not-exist.kit eduyesnonoaffiliateyes
people from collaborations@partner.kit.eduyesnonoaffiliate---
Former employee@partner.kit.eduyesnonoaffiliate---
guest student / gifted student@partner.kit.eduyesnonoaffiliate---
Visiting Scholar@partner.kit.eduyesnonoaffiliateyes
Other scient. Personal@partner.kit.eduyesnonoaffiliateyes
intern@partner.kit.eduyesnonoaffiliate---
Former Professor@partner.kit.eduyesnonoaffiliateyes
Scientific day guest@partner.kit.eduyesnonoaffiliate---
Privatdozent@partner.kit.edu, @kit.eduyesnonoaffiliateyes

Notes:

  • All accounts get their own mailbox (but is very often only used as a forwarding).
  • GuP accounts managed by IDM are created in the ActiveDirectory under kit.edu\KIT\MISC\OE abbreviation\IDM.
  • Once a role has been assigned in the GuP administration that entitles to a @kit.edu mail address, only roles that also entitle to @kit-edu addresses can be assigned to the guest when changes are made (doctoral student, scholarship holder, scientific / student assistant, private lecturer).
  • Use of bwSync&Share with membership in the AD group SCC-Entitlement-bwsyncnshare (GID 83922) or SCC-Entitlement-bwsyncnshare-IDM (GID 83923).
    Automatically the active guest and partners with the above mentioned roles (see table) are added to these groups, manually the ITB can have an account added to the SCC-Entitlement-bwsyncnshare-Exceptions group via ticket to SCC in the group management.


Special account types managed by SCC / IDM:

  • personal admin account -> KIT adminaccount
  • service account -> KIT serviceaccount
  • Course account for the use of the SCC pool rooms
  • Wlan guest accounts

These accounts may have limited functions for specific purposes only


Accounts for students ("U-Accounts")

These are supplied to us exclusively by the student administration, for this reason SCC cannot have any influence on these accounts.
In case of administrative problems (expiration of the account due to late re-registration, problems with enrollment ... ) please contact the student administration / the student office first!

Note: Use of bwSync&Share: Students with an active U-account are members of the corresponding groups and can therefore use bwSync&Share.