Employee Admin Access Policy

EMPLOYEE ADMIN ACCESS POLICY

Purpose and Scope

This policy establishes requirements for granting, using, monitoring, reviewing, and revoking administrative (privileged) access to company information systems and applications. It applies to all employees, contractors, temporary staff, and third-party vendors with administrative credentials to corporate systems.

Personal Information

Position Information

Employee Start Date:   Annual Salary:

Employment History (Most Recent Two Employers)

From:   To:

From:   To:

Education

Professional References

Phone:   Email:

Phone:   Email:

Phone:   Email:

Legal Disclosures

At-Will Employment: Nothing in this policy alters the at-will status of employment. Either the employee or the employer may terminate employment at any time, with or without cause or notice, unless a written agreement states otherwise.

Equal Opportunity: The company provides equal employment opportunity and reasonable accommodations in accordance with applicable law. Request for accommodation should be directed to Human Resources.

Definitions

"Administrative Access" means credentials or capabilities that permit privileged changes to systems, applications, infrastructure, or data beyond normal user capabilities. "Privileged Account" means any account with elevated rights, including but not limited to local administrator, domain administrator, application administrator, database owner, or root level access.

Roles and Responsibilities

Managers must approve requests for administrative access and verify business justification. IT Security is responsible for provisioning, monitoring, and auditing privileged accounts. Employees granted administrative access must comply with this policy, complete required training, and follow approved procedures for use of privileged credentials.

Authorization and Access Request

Access will be granted only after written approval from the employee's manager and IT Security. Access is role- and task-based, granted for the minimum time necessary.

System Administrator (OS / Server)
Network / Firewall Administrator
Application Administrator
Database Administrator
Privileged SSH / Root Access

Requested Access Start Date:   Requested Access End Date:

Least Privilege & Segregation of Duties

All privileged access shall be assigned on a least-privilege basis. Where required, duties will be segregated so that no single individual has control over sensitive end-to-end processes. Temporary exceptions must be documented, time-bound, and approved by IT Security and the employee's manager.

Authentication, Passwords, and Multi-Factor Authentication

Privileged accounts require unique credentials, strong passwords per company standards, and multi-factor authentication where available. Sharing of credentials is prohibited. Use of shared break-glass accounts must be approved and logged.

Monitoring, Logging, and Auditing

All privileged activity is subject to monitoring and audit. Logs will be retained and reviewed according to retention schedules. Intentional concealment or tampering with logs is a violation subject to disciplinary action.

Access Review and Recertification

Manager and IT Security shall review privileged accounts at least quarterly. Access not reconfirmed will be revoked. The employee's manager must complete recertification when requested.

Revocation and Termination

Administrative access will be revoked immediately upon termination of employment, change of role rendering access unnecessary, or violation of this policy. Managers must notify IT Security of role changes or terminations without delay.

Exceptions

Any exception to this policy must be submitted in writing, include business justification, defined compensating controls, expiration date, and approvals from IT Security and the employee's manager.

Training and Acknowledgment

Employees granted privileged access must complete required security and privileged account training prior to receiving access and annually thereafter.

I have completed required privileged account training or will complete it prior to access being granted.

Violations, Sanctions and Reporting

Violations of this policy may result in disciplinary action up to and including termination, civil liability, and criminal prosecution. Suspected misuse of privileged accounts must be reported immediately to IT Security and Human Resources.

Acknowledgment and Employee Certification

I certify that I have read, understand, and agree to comply with the Employee Admin Access Policy. I acknowledge that privileged access is a privilege and not a right. I consent to monitoring of privileged actions and understand that misuse may result in disciplinary action up to and including termination of employment.

I also authorize the company to contact my previous employers and other references as necessary for verification and background purposes in connection with my access request.

I acknowledge and accept the terms of this policy.

Manager Review (For Office Use)

Manager Approval:   Date:

IT Security Provisioning (For Office Use)

Account(s) Created:   Provision Date:

Sign Now