Data structure

  • This is an active affiliation role. Users within the validity window have active birthright entitlements (e.g. LDAP, AD, Google).
  • First year students are activated seven days prior to their term's start date (STVTERM).
  • Continuing students retain the Student role without interruption.
  • Students not registered for the subsequent term will shift their primary affiliation from Student to Limited Student.
  • Graduating students will also shift from Student to Limited Student.
  • Graduate students (i.e. pursuing Masters degrees) also have a Student primary affiliation.
  • The Student role affiliation priority is 140, ranking them below all employment roles but above all enrollment roles.
  • The Student affiliation applies the Managed/Student OU in Google. This OU is also used for the Admitted, Confirmed, and Limited Student roles, meaning all enrollment stages have equal Google access.
  • The Student role allows access to the Microsoft 365 A3 license via the Student AD group.
  • The Banner role ASU0080 allows access to the Adobe Software Suite. It is assigned to students based on their course schedule. ASU0080 is only applied to users with the Student primary affiliation.
  • Services or systems tied to the Student Active Directory group are applied only when the user has the Student primary affiliation. For new students, this means they will not get access to Microsoft 365 or Adobe until the first day of the term. Transitioning into Limited Student also revokes access.
  • Students may pause class registration up to one academic year and readmit without reapplication.

Activation

Confirmed users, and users returning from a semester off, will transition to the Student role at the beginning of their registered class term, not on the day they registered. All access associated to the Student role will permit access at the term start as well.

Departure:

  • Users remain in the Student role affiliation until they skip a term's class registration or graduate. Either occurrence will relegate the user to the Limited Student role affiliation. This role removes the aforementioned service access, but still allows campus device access.
  • After 14 months (or earlier if the user starts and leaves App State employment pool), the Limited Student user will be put into the Inactive Student role affiliation. This role will:
    • deactivate their LDAP and AD account preventing sign in, and
    • change their Google account OU to Managed/Inactive Student preventing email use.
  • Student users in Inactive Student are eventually withdrawn from Banner, causing them to longer be communicated to Bravura. All entitlements will remain in their last state - inactive.
  • Students should transfer their Google data prior to graduation or before their App State job ends.