Embed Size (px)
Citation preview
TEXAS STUDENT DATA SYSTEM
TEAL for TSDS and the TSDS Portal
Simple Solution. Brighter Futures.
2
Course Agenda
What is TEAL?
How to Request a TEAL Account
How to Request Access to TSDS Applications
TSDS Portal Roles
TEAL Service Accounts
TEAL Auto Account Provisioning
TEAL Admin Access
TSDS Portal
3
TEAL Overview
4
TEAL
TEAL – Texas Education Agency Login
A single sign-on that provides users access to many TEA applications
Secure authentication ensures only authorized users can access the applications
Users must first create a TEAL identity and then request account access to the specific applications needed
5
TEAL TSDS Portal TSDS Portal Roles
6
Requesting a TEAL ID
7
Requesting a TEAL User Account (TEAL ID)
https://pryor.tea.state.tx.us/
To begin a request for a TEAL ID, the user must click the link on the TEAL login page.
8
TEAL User Profile
A TEAL ID is created when the user completes and submits the TEAL User Profile.
10
TEAL Security Questions
After initial log on to TEAL, the user must change their password, agree to assurances (every 30 days) and answer security questions:
The user must then request account access.
11
TEAL Account Access and Approval Process
Once a TEAL ID is created, the user must request access to the specific TEA applications to which they need access
If a request for account access is not made within 60 days, the TEAL account is inactivated (the user will get email notification each day for 7 days before the inactivation occurs)
Requests for account access must first be approved by the Organization Approver (Superintendent, ESC Director, or designated alternate; this also may be a Limited Approver) if no action is taken within 5 days the request is rerouted to the alternate approver (if the organization has one). If no action by the alternate within 5 days, the user gets an email notification & must resubmit the request.
Once requests are approved at the organization level, they are routed to the TEA Service Approver for approval
12
Requesting Access to TSDS Portal Applications
13
Requesting Access to Applications
The user must click on Apply for Access to initiate the account request process.
14
Requesting Access to TSDS Applications
The user must select Request New Account and then select TSDS Portal
15
Add Access
The user must click on Add Access
16
Add Access
The user must click on Add Access
17
Enter Employing Organization
The user must enter their Employing Organization and select the roles they need:
18
Select TSDS Portal Roles
19
Select TSDS Portal Roles
20
Enter Additional Information
The user must enter additional information:
Requested Organization (required for most TSDS roles)
Unique ID (required for LEA Dashboards roles)
After the request is submitted, it is routed to all Approvers for organizations entered on this screen.
21
studentGPS™ Dashboards users not set up via the automated account provisioning process must enter their Unique ID as part of the request
Notice the function to find a Unique ID
Manual studentGPS™ Dashboards Account Provisioning
22
Unique ID Lookup in TEAL
23
Unique ID Lookup in TEAL
24
TSDS Roles
25
TSDS Portal Roles
Role DescriptionstudentGPS™ Dashboards
An LEA authorized TEAL role for access to the Dashboards. For each user, it is mapped to one of the 7 local Dashboards roles. Access to TSDS with this role must be approved by the LEA Superintendent or designee. May be requested through traditional TEAL process or the LEA may opt for automated provisioning.
studentGPS™ Dashboards Configurator
A temporary LEA authorized role that allows the user to configure LEA goals and provision accounts for other LEA users. Must be selected with the studentGPS™ Dashboards User role. Corresponds to the local System Administrator role in the Dashboards – usually for the LEA Dashboards or Data Steward. Access to TSDS with this role must be approved by the LEA Superintendent or designee and Approver enters the expiration date.
ODS Campus Data Loader
An LEA authorized role for the scheduling and loading of campus data into the eScholar data warehouse. Targeted users: Campus Data Steward or Campus PEIMS Coordinator.
ODS Data Loader An ESC/LEA authorized role for the scheduling and loading of LEA data into the eScholar data warehouse. Targeted users LEA: LEA PEIMS Coordinator and/or Data Steward; Targeted users ESC: Technical and/or PEIMS Champion.
26
TSDS Portal Roles
Role DescriptionUniq-ID Campus An LEA authorized role providing search and update access to Unique ID at the
campus level.Uniq-ID LEA An LEA authorized role providing search and update access to Unique ID at the LEA
level.Uniq-ID Search An authorized role providing search-only access to Unique ID at the statewide level.
TIMS LEA Support Role designed for LEA staff providing TSDS support for their own LEA. Access to TSDS with this role must be approved by the LEA Superintendent or designee.
TIMS ESC Support Role designed for ESC staff providing TSDS support for one or more LEAs. Access to TSDS with this role must be approved by the LEA Superintendent or designee.
PEIMS Campus Submitter
An LEA authorized role providing the ability to load, validate and view PEIMS data and reports for campus level data to the PEIMS Data Mart. Targeted users: Campus Data Administrator.
PEIMS Data Submitter
An ESC or LEA authorized role that will allow the user the ability to load, validate and view PEIMS data and reports. Targeted user LEA: PEIMS Steward; Targeted users ESC: Technical and/or PEIMS Champion.
PEIMS Data Schedule/Promoter (LEA/ESC)
An ESC or LEA authorized role for scheduling and promoting of ESC, LEA and/or campus level data to the PEIMS Data Mart. Targeted users LEA: PEIMS Steward; Targeted users ESC: Technical and/or PEIMS Champion.
27
TSDS Portal Roles
Role DescriptionPEIMS Data Completer
An ESC or LEA authorized role of a user that can load, view, report, set as complete, and lock the data. Targeted user LEA: PEIMS Steward; Targeted user ESC: PEIMS Champion
PEIMS Data Approver (LEA/ESC)
An ESC or LEA authorized role that will allow the user the ability to view reports and approve or reject a PEIMS data collection. Targeted users: Superintendent or ESC Executive Director
PEIMS Data Accepter (ESC)
An ESC authorized role that will allow the user the ability to view, run reports, and approve or reject a PEIMS data collection. Targeted users: ESC Data Accepter
FERPA Policy Admin
An LEA authorized role providing the ability to configure FERPA policy through the TSDS solution. Targeted users: LEA/ESC FERPA administrator and Data Steward.
28
ODS Data Loader Role
29
TIMS Support
30
TSDS Service Accounts
31
TSDS Service Accounts
TSDS has a web service available for Unique ID (optional) and secure FTP (sFTP) for the Data Transfer Utility (DTU) (required)
For security purposes, it is necessary to authenticate each time a user accesses the services by requiring a user name and password
At least one user within the organization must be set up as a Service Account Manager (SAM) to manage service accounts for the organization
Each district, charter school, or other user organization must set up at least one service account for Unique ID and DTU if they’re going to use the above mentioned features
Service account credentials are entered in the application that requires them
32
Service Account Managers
These users manage service accounts for the organization. This includes the ability to:
Request new service accounts
Reset service account passwords (required yearly)
Delete service accounts
33
Requesting Service Account Manager (SAM) Status
To request SAM status, the user must select Edit My Profile
34
Requesting SAM Status
Click the Service Account Manager Status link.
35
Requesting SAM Status
The user must click Request Service Account Manager Status
36
Requesting SAM Status
In the Service Account Manager Details popup the user must enter the Organization for which they are requesting SAM status and click Submit:
37
SAM Status Approval Process
Requests for SAM status must be approved by the Organization Approver
38
Managing Service Accounts
Once a user has SAM status, they can manage service accounts, by selecting Manage Service Accounts
39
Request Service Account
Click Request New Service Account
40
Request Service Account
Select the application from the Application dropdown enter an Administration email address (optional) and click Submit:
41
Request Service Account
A confirmation message is displayed:
42
Service Account Approval Process
Requests for Service Accounts are sent to the Organization Approver for approval
If approved, the user who submitted the request receives two separate email notifications (one with the service account user ID, and the other with the service account password)
These credentials must be entered into the application that requires this access
43
Resetting Service Account Passwords
Any user with SAM status can reset a password for a TSDS service account by checking the box associated with the service account, selecting Reset Password and clicking OK on the popup.
When this action is performed, all service account managers for the organization receive an email with the new password for the web service. All software applications that were using the previous password will not function until the new password is provided within the application.
44
Deleting Service Accounts
Any user with SAM status can delete a service account by checking the box associated with the service account, selecting Reset Password and clicking OK on the popup.
The requestor and all service account managers are notified by email when a service account is deleted. Any software application that is using the web service credentials associated with a deleted service account will no longer be able to use the web service in its processing.
45
Revoking SAM Status
Only Computer Access at TEA , or the user with Service Account Manager status, can revoke that status (no one at the organization can revoke another’s SAM status)
If it is necessary for an organization to terminate Service Account Manager status for a former employee or other user, the Organization Approver must contact Computer Access at [email protected].
46
How to Revoke SAM Status
A user with SAM status, may revoke it by: Clicking on Edit My Profile Clicking on Service Account Manager Status
47
How to Revoke SAM Status
Clicking Revoke Selected Status and clicking OK on the popup:
69
TEAL Admin Access
70
ESC TEAL Admin Privileges
Access granted by TEA (cannot be requested in TEAL)
Users with this permission can perform various TEAL administrative functions including: Reset passwords Make minor updates to TEAL user email
addresses Restore users
71
TEAL Admin Functions
Administration options are accessed via the left side navigation
72
Search & Select an Action
73
Reset Password
74
Restore User
75
Email Address Updates
76
TSDS Portal
77
TSDS Portal
78
Questions?
www.TexasStudentDataSystem.org
