Shared accounts for temporary users

Michelle Harper

Good morning. I want to get some opinions on something. In my organization we hire interns every year for a fundraising event. During this event, the interns have access to look up donor phone numbers and call them. In the past, they used two shared accounts. When new interns came in, they would just reuse the same accounts. There is no way of knowing which interns logged which information because they are all just listed as Intern1 or Intern2. I am a little unsure what the best practice is on this. Should we allow them to keep using a shared account or should we make a new account for each person and then inactivate it once they leave?


In other organizations I have worked it was always a big deal to never share an login or account with another person so this practice makes me pretty uneasy. What does everyone else do?

Elizabeth Johnson

Hi Michelle Harper‍,


I think you should trust your gut here and give each user their own account. Bill Connors just gave a fantastic presentation on this at bbcon 2020 - you can still access the recording if you register for bbcon before November 11, 2020. 


Here is a link to his website and the resources are all there.


Best,

Elizabeth


P.S. Should someone happen upon this much after access is available - the resources are under the heading: bbcon 2020 Presentation on Raiser’s Edge NXT Security