IT Administration Toers

Can anyone provide advice/best current practice for setting up IT administration tiers in order to delegate administration access to various levels of ability? I know there are a lot of ways to do this but looking for new best practice ideas...
Vincent DAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

yo_beeDirector of Information TechnologyCommented:
What roles will your people be covering?

How large is your IT department?  If it is small tiers might not be that important.

What are you personally thinking you want to apply.

I will use my HR department as an example.
I have 5 level of security access.
1 is the least amount of access where 5 is full access
The head of hr gives will request that this user should be level 1, but if a user that has level 3 access they will be nested in level 2 and level 2 is nested in level 1.

I manage 3 guys in my IT department and they all have the same rights I have, but are instructed to ask me before making any production change. The routine things like account creation, group creation and things like that they do not report back for, but a AD or Exchange change those are the ones that need to have a bit more control over.

Maybe I can help if you give more information.
Ronald SchlageterCommented:
Hi,

we scaling the access by skills/knowledge just for VM, databases, XEN etc.
especially global settings in VM, GPO's, XEN-Products, means all middleware product with high effect /critical level.

And I confirm as Yo-bee said, a documentation is very important.

We just have to ensure, that everybody in the team can fix daily issue by themselves and can run / check daily maintenance jobs.

For a useful scaling we created a list with all products and available scaling of permissions. We discussed it in the team.
These job need to do just one time. Later you can edit and extend products or use a tool for further documentation.  We also defined product Manager for all existing Hard and Software, so everybody have to care that documentations lifecycles of his product´s.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.