Skip to content
Tallgrass
← SOPs & KB

IT-SOP-01 · SOP · SharePoint / IT

Access Requests and Approvals

Owner Dana Whitfield · updated 2026-06-12

Every new permission needs the data owner's approval in writing. Least privilege. ERP role changes also need the Controller. Admin rights are never granted to user accounts.

Scope

Applies to SharePoint sites, shared mailboxes, ERP roles, file shares and local admin rights.

Rules

  1. The requester's manager submits or approves the request. A request from the user alone is not an approval.
  2. The data owner approves access to their data (Quality site: Quality Manager; Engineering site: Engineering Manager; HR: HR Manager).
  3. ERP role changes need the ERP Administrator to build the change and the Controller to approve it.
  4. Local administrator rights are not granted to user accounts. IT installs the software or uses a time-limited elevation (LAPS) under a ticket.
  5. Record the approval in the ticket before changing anything.

Review

Access to Quality and Engineering sites is reviewed every quarter by the site owner.