Company Change Requests - Authorised User Categories

Company Change Requests - Authorised User Categories

At baseMSP, we understand that small businesses need a streamlined and efficient way to manage IT change requests. To ensure that requests are handled promptly and appropriately, we have defined a set of authorisation categories. These categories specify who in your business has the right to make certain types of requests, which we will then execute based on the authorisation level. Please note that these authorisation categories are purely for baseMSP to know who to accept requests from and do not grant any admin rights to users in any system, such as M365.

Category Types

1. Global Change Request Rights

Description: This category grants the authoriser the ability to request changes across all category types.
Example: A small business owner or IT manager with comprehensive oversight of all IT operations.

2. User Management Only

Description: Authorisers in this category can request changes related to user accounts. This includes creating new user accounts, modifying existing accounts, and deleting user accounts as needed.
Example: An office manager or HR representative responsible for onboarding and offboarding employees.

3. Software Installation and Updates

Description: Authorisers with this designation can request the installation of new software or updates to existing software on the company’s systems.
Example: A team lead or department manager who oversees specific applications used by their team.

4. Hardware Changes

Description: This category allows the authoriser to request changes related to hardware, such as new hardware installations or upgrades to existing hardware.
Example: An IT support staff member or office manager responsible for maintaining office equipment.

5. Access Permissions

Description: Authorisers in this category can request changes to user access permissions, including granting or revoking access to specific systems or data.
Example: A security-conscious office manager or a small business owner ensuring proper access control.

6. Security Policy Changes

Description: Authorisers with this right can request changes to security policies, such as modifications to firewall rules, antivirus settings, and other security configurations.
Example: A small business owner or IT manager responsible for the company's cybersecurity.

7. Purchasing Approval

Description: This category is for authorisers who can sign off purchasing budgets and raise purchase requests.
Example: A finance manager, small business owner, operations manager or office manager who oversees the purchasing sign off.

8. Emergency Changes

Description: Authorisers in this category can request emergency changes that need to be implemented immediately to address critical issues or incidents.
Example: An IT manager or small business owner responsible for rapid response to critical issues.

9. Backup and Recovery Operations

Description: This authorisation allows the authoriser to request actions related to backup and recovery operations, ensuring data integrity and availability.
Example: An IT support staff member or office manager tasked with data protection.

10. Compliance and Audit

Description: Authorisers in this category ensure that change requests comply with regulatory requirements and internal audit policies.
Example: A compliance officer or small business owner ensuring adherence to legal and regulatory standards.

11. Maintenance Windows

Description: Authorisers with this designation can request scheduling and execution of maintenance activities during designated maintenance windows.
Example: An IT support staff member or small business owner managing planned maintenance activities.

How to Assign Authorisation Categories

Assigning the correct authorisation category to each authoriser within your small business is crucial for maintaining control over change requests. Here’s how to do it:

  1. Identify Key Individuals: Determine who in your organisation is responsible for making various types of change requests.
  2. Match Responsibilities: Align their responsibilities with the appropriate authorisation categories listed above.
  3. Record Authorisation Levels: Document their authorisation categories within your system to ensure they are recognised during the change request process.

Requesting Changes with baseMSP

Once authorisation categories are assigned, your designated authorisers can submit change requests to baseMSP. We will then execute these requests based on the provided authorisation level, ensuring that the right changes are made by the right people. This process helps maintain efficiency, compliance, and security within your IT environment.

If you have any questions or need assistance with assigning authorisation categories, please contact the baseMSP support team. We are here to help you manage your IT change requests effectively.