What is DSAP? (FAQ)

DSAP is an acronym for Drake Security Access Procedure. DSAP is a web-based system used to provision user access to Banner. It also serves as a means of managing standard communication around the requests among the different roles involved in DSAP. 

DSAP automates the most common processes involved in Banner Security Administration, however it is not a completely automated process. DSAP is only for Banner users and is not associated with providing access to myDrake, MyDUSIS (SSB or Self-Service Banner), Xtender or any other campus systems.

Security Structure

Banner is made up of a large amount of data that is organized into tables using an Oracle Database. This data is accessed via Admin Pages or other methods like Open Database Connectivity (ODBC) for use in reporting.

Banner Data Structure Diagram

Some methods for accessing data allow for updating the data, while others allow only querying. If a user accesses data via ODBC, they can only query the data while using Admin Pages they can update or query the data.

Banner Security starts with the Oracle Username. Oracle is the underlying database which houses all Banner data. Admin Pages and Workflow facilitate single sign-on (SSO) access using Drake ID and passwords, so a user doesn't generally need to know their Oracle ID. ODBC users will need to know their Oracle ID and manage their password to access Banner data.

Within Banner, privileges that specify whether a user can access particular data via a particular method are granted to an Oracle Username. These are granted in groups called security classes. For ODBC, these are called roles. Both roles and security classes are collections of privileges that can be granted to a user.

Users are never granted access to a single Admin Page or table/view directly. Access is granted only through a security class or role. Additionally, security classes and roles are set up and owned by the Data Custodians for each Banner Module. The Banner Modules are:

Banner Modules

Module

Abbreviation

Admission and Recruiting RAC
Finance FIN
Financial Aid AID
General GEN or JOB
Human Resources HRS
Institutional Advancement ALU
Non-Student Accounts ARN
Payroll PAY
Student Accounts ARS
Student Life/Housing SLH
Student Records STU

A single user may be assigned security classes and roles from multiple modules. The security classes and roles assigned to a user will depend on their job function.

DSAP Roles

There are several roles involved in granting a user access to a Banner security class or role.

Drake Unit Security Manager (DUSM) - There is at least one DUSM assigned to each business unit within Drake. The DUSM serves as their unit's contact point for Banner access requests and training. It is the responsibility of the DUSM to initiate DSAP requests. The DUSM should be aware of Drake data security policies and user access to data. Here's a list of DUSMs and their contact information.

Data Custodian - The person who has jurisdiction over a set of Banner data. The data custodian is responsible for approving access to data requested by the DUSM. Data Custodians also define security classes and roles in correlation with job functions of users. There is a data custodian for each Banner Module. Here's a list of Data custodians and their contact information.

Trainer - The trainer is responsible for ensuring users understand how to access data for approved DUSM requests. The trainer must sign off on each user's training. Drake policy states that all users must be trained prior to being given access to Banner and Banner data. Here's a list of Banner trainers and their contact information.

Security Administrator - This is the ITS staff member that creates or modifies the Banner user based on the DUSM request and the Data Custodian's approval. The Security Administrator also oversees the overall security process to ensure Drake policy is followed.

Accessing DSAP

DSAP is available in myDrake in the Banner section. Clicking the link will take you through single sign-on (SSO) into DSAP.

DSAP Link

0% helpful - 1 review

Details

Article ID: 54239
Created
Mon 5/21/18 11:20 AM
Modified
Thu 7/22/21 1:56 PM