Local Administrative Rights Super User (SU) Access

The following document outlines the policy regarding administrative rights on local desktop PCs.


The Administrative Rights Access Policy has been established to define the criteria for which Local Administrative rights for a supported desktop, laptop or other end-user device may be granted, and the terms and conditions upon which rights will be granted. 

The granting of Administrative Rights Access to an employee/contractor to a desktop, laptop, or other end-user device is a privilege only provided to individuals who require this level of access and control in order to do their jobs effectively. 

The goal of this policy is to describe the circumstances under which Administrative Rights Access shall be granted as these rights allow users the ability to change standard desktop configuration settings, install unlicensed software and disable other security measures, potentially creating security weaknesses in the desktop environment.



IT@VetMed will grant Local Administrative rights, as appropriate, to those personnel who require such rights to perform their duties. IT@VetMed will strictly adhere to the principle of "least privilege" when granting rights to computers. Rights will only be granted under the condition that they are essential for the performance of the grantee's job. Lack of adherence to all IT policies may cause revocation of these rights. 

IT@VetMed will manage and track all users who require Desktop Support or Local Administrative rights. All users, other than Faculty, requesting rights must agree to the responsibility and requirements for Local Administrative Rights.  The user and their department head must agree by reading and acknowledging the policy.  

Responsibilities & Requirements 

Users who are granted any level of Administrative rights shall adhere to the following:

Requesting User & Department Sign-off

Once the requesting user and department head acknowledge that they have read and agree to the policy the creation of their local administrative Super User (SU) account will be processed.