0

Scenario:

We are an IT company who services many companies. Recently, one of the bigger companies brought in a 3rd party consultant who works for a group, and they have their own internal IT who likes to keep a tight grip on everything.

We created an exchange account for this user so calendar sharing could be achieved and events placed for them. I just found out that the password was changed and I no longer have access to that account. I had their internal IT group make the required changes I needed done on the account.

While this is not a big issue, it brings up the question for situations that involve more than one IT group. How do you determine who controls what territory?

EDIT: In regards to password sharing. The issue here is that they do some different ways of managing calendar and email syncing, so the typical normal way would not work, so I had to surrender the password.

  • 1
    The client decides. – Moo Oct 3 '16 at 13:14
  • 1
    I just found out that the password was changed and I no longer have access to that account Does this mean you were password-sharing? In that case maybe the other group should have control... – rath Oct 3 '16 at 13:22
  • 2
    I just found out that the password was changed and I no longer have access to that account Does this mean you were password-sharing? In that case maybe the other group should terminate your company's access entirely. – Wesley Long Oct 3 '16 at 13:34
  • There is no situation where two entities having access to the same account is ever a good idea. Separate your interests, and learn about best security practices. If they performed malicious actions on this account, knowing full well you have access to the password they could of easily blamed you for it, as there would of been little viable way of distinguishing who was in control of the account. (of course logs to IP's matching the office's IP/ISP block could indicate, but its never sure-fire) – Trotski94 Oct 3 '16 at 13:52
  • 1
    Isn't someone in charge that could address this question? – user8365 Oct 3 '16 at 23:40
2

If you feel that this arrangement negatively impacts the services that your company should be providing to the client then you should bring it up to management, who will address the issue through the proper channels.

At the end of the day, however, the client will decide which company gets access to which of their resources.

  • 1
    Also, what does the contract say? – SiXandSeven8ths Oct 3 '16 at 16:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.