Understand the types of privileged administrator roles that are available in the Own Government Cloud platform. Use best practices to assign appropriate admin roles to users. Learn how to disable, delete, or swap administrator accounts when necessary.
Best Practices for Operating Administrator Accounts
As you create a plan for assigning privileged administrator roles, keep these recommendations in mind:
- Establish usage conditions for Master Administrator accounts and other privileged user accounts. To maintain security and operational integrity, use these accounts strictly for administrative tasks. For day-to-day tasks that don't require elevated privileges, use non-administrative accounts.
- Employ the principle of least privilege by assigning the minimum administrative permissions necessary to accomplish assigned tasks in accordance with mission and business need.
- Segregate duties by using roles, business units, and other permissions.
- Periodically review permissions assigned to administrative users to validate the necessity for such permissions.
- Regularly audit and review entries within the Audit Log to track changes made by administrators and other privileged users. Look for unexpected or suspicious activity and logins.
- Administrator Roles in Own Government Cloud
See what actions privileged administrative users can take in each role. - Configure and Delete Admin Accounts in Own Government Cloud
Master Administrators can disable or delete user accounts, export a CSV file of all user accounts, or swap the Master Admin user.