Generic Account

Contents

Introduction

  • A generic account in G Suite @ NC State represents a role rather than an individual.
  • A generic account has access to the same G Suite apps (e.g., Gmail, Docs, Calendar) as an individual account.
  • A single generic account can be multi-purpose; e.g., manage departmental calendars, centralize storage of Gmail or Docs, review web page content.
  • Consequently, a department or other campus unit does not need a separate account for every purpose.
  • Access to the G Suite apps in a generic account can be granted to anyone, including a student or temporary employee, who has an active NC State Gmail account and its accompanying email address.

[Back to Contents]

Requesting a Generic Account

Request a generic account through OIT’s Web Registry service, which will ask you for the following:

  • Account first and last names
    • Choose each name so that it reflects the account’s nature or purpose.
    • This will facilitate finding the account when searching for it.
  • Account username that:
    • is not a person’s name
    • indicates the role the account will serve
    • must contain at least 11 characters,
    • must not contain successive hyphens (-) or underscores (_)
    • does not begin with: group-
    • does not conflict with any other account name at NC State
  • Account Service Contacts; i.e., G Suite @ NC State usernames of all persons to be responsible for:
    • answering technical questions about the account’s use
    • annual renewal of the account.
  • (Optional) Whether you want the account to be listed in the NC State Contacts in G Suite @ NC State.

Requests are processed regularly, and accounts are created after review and approval by an administrator.

[Back to Contents]

Service Contacts

Generic Account Access Setup

  • Whenever possible, grant access to a generic account by setting up mail delegation for every person involved, including the account’s Service Contacts.
    For details on adding and removing mail delegates, as well as what delegates can and cannot do, see Set up mail delegation.
  • To simplify account access and management, especially when using 2-Step Verification, do both of the following:
    • Minimize the number of Service Contacts.
    • Give the account password to the Service Contacts ONLY, not to any other person who has account access.

[Back to Contents]

2-Step Verification Setup for a Generic Account

For significantly increased security, generic accounts will be required to have 2-Step Verification enabled by December 13, 2017.

For general setup information on this topic, see 2-Step Verification.

  • Complete the Generic Account Access Setup process
  • Required use
    • Once you enroll an account in 2-Step Verification, users who log in directly to that account will be required to verify with an enrolled second factor. Delegated users who do not log in to the account directly will not be affected.
    • Generic Account contacts should communicate with all users of the account that 2-Step Verification will be enabled.  Users must complete one (or more) of the solutions below.
  • Alternate 2-Step option
    Each person who will be logging in to the account should have an alternate 2-Step option for verification; e.g., mobile phone for voice calls or SMS, USB security key, printed backup codes, or authorized access in the Get2Factor app (below).
  • Verification alerts
    Make sure these alerts go where they’re needed and to the correct user, not to the account’s default phone number, by doing one of the following:

  • Backup codes
    Print out the 10 single-use backup codes and securely store them in the department. When no other 2-Step option is available, you can use one code and then cross it off the list. You can generate a new set of 10 codes as needed, but this will invalidate any pre-existing codes.
  • Get2Factor (G2F) app
    • Provides a virtual Google Authenticator app that allows Generic Account users to access two-factor codes via ServiceNow.
    • This tool is beneficial for Generic Accounts with more than three users.
    • Review the G2F User’s Manual for more information on end-user access and how to set up the tool for your accounts.
    • Visit Get2Factor to manage accounts and access codes.
  • Two-Factor Status available in Web Registry (beginning 9/21/2017)
    • Administrative and Technical contacts can now view the status of two-factor verification for generic accounts.
    • The Two-Factor Status field can be viewed in the following locations:
      • From the Service Directory by filtering the listing of generics you own or are listed as a contact
      • Under the “Service Status” for specific generic accounts.

[Back to Contents]

Your Individual Google Account

To significantly increase the security of your individual Google account, OIT strongly recommends that you enable 2-Step Verification on it.

[Back to Contents]

Mail Delegates

Access to Gmail

  • After you have been added to the generic account as a mail delegate, you should receive an email requesting confirmation.
  • Once you accept, then you can access Gmail for generic account as follows:
    1. Log in to your individual G Suite @ NC State account if you have not already done so.
    2. In the upper right-hand corner of the window, click on the icon for your account.
    3. In the window that opens, click on the icon for the generic account.
      That account’s Gmail will open in a new tab, and your individual account tab will remain open.

If you are not a Service Contact, you will NOT be logging in to the generic account with a password or with 2-Step Verification.

Access to Calendar and Docs

Access to the generic account’s Calendar and Docs can be granted to you as needed.

Your Individual Google Account

To significantly increase the security of your individual Google account, OIT strongly recommends that you enable 2-Step Verification on it.

[Back to Contents]

Help with a Google Generic Account

Contact the NC State Help Desk.

[Back to Contents]

Email Retention

See Central Email Retention Services.

[Back to Contents]