Account Lifecycle Policy
Version 1.0, June 1, 2021
Purpose
The purpose of this policy is to document the stages and timing of account lifecycle management for Middlebury user accounts.
Scope
The scope includes all Middlebury user accounts. Stages and timings are specific to account types.
| Types of Accounts | Account Lifecycle Stages | Types of Separations |
|---|---|---|
| Students | Creation | Voluntary |
| Faculty | Activation | Involuntary |
| Staff | Deactivation | |
| Deletion |
Policy
In order to support the continuity of Middlebury’s academic and administrative operations, ITS follows established guidelines for Middlebury user account lifecycle management. These guidelines have been developed by ITS in collaboration with Student Life, Academic Affairs, and Human Resources. These guidelines have been approved by Middlebury’s Information Advisory Committee (ISAC) and Middlebury’s Senior Leadership Group (SLG).
This policy is intended to reflect current ITS practices for Middlebury user account management to help provide clear answers to common questions about account lifecycles, such as;
- When does a new student/faculty/staff Middlebury user account get created?
- How long does a graduating student retain access to their Middlebury account?
- When does a departing employee’s Middlebury user account get deactivated?
Account Lifecycle Matrix
The table below reflects currently defined primary account types, in most cases and/or under normal circumstances. This policy will evolve as requirements for additional account types are defined.
| Types of Accounts | Account Lifecycle Stages | Types of Separations |
|---|---|---|
| Students | Creation | Voluntary |
| Faculty | Activation | Involuntary |
| Staff | Deactivation | |
| Deletion |
Updated June 1, 2021
| Account Type | Creation | Activation | Deactivation (Voluntary) | Deactivation (Involuntary) | Deletion |
|---|---|---|---|---|---|
| Students | Upon inclusion in “active persons” file | Self-Service (account activation email sent after account creation) |
180 Days after removal from “active persons” file | 0 Days after removal from “active persons” file | 180 Days after deactivation |
| Faculty | Upon inclusion in “active persons” file | Self-Service (account activation email sent after account creation) |
90 Days after removal from “active persons” file | 0 Days after removal from “active persons” file | 900 Days after deactivation |
| Staff | Upon inclusion in “active persons” file | Self-Service (account activation email sent after account creation) |
0 Days after removal from “active persons” file | 0 Days after removal from “active persons” file | 400 Days after deactivation |
The table above reflects currently defined primary account types, in most cases and/or under normal circumstances. This policy will evolve as requirements for additional account types are defined.
Please note that the “Active Persons” file is refreshed daily by the appropriate system of record.
Questions about Middlebury’s account lifecycle policy and related practices should be directed to infosec@middlebury.edu
Information Technology Services
Davis Family Library 202
Middlebury, VT
05753