WPP ET - VML Directory System needed for management access tasks

This chart shows which Directory System is needed for access to manage the requested tasks for WPP ITOMs whether it can be performed directly in Ciao or requires access to another system.

Task Help Desk Could Perform in CIAO Needs Escalation or other Directory System CIAO INDEX CLOUD ADMIN Notes Checking username/account setup ✅
✅ ✅
This can be done in Ciao and Index, if Helpdesk needs to see, they should get Ciao Access. Checking O365 group memberships
❌

✅ This can only be done in the Cloud and requires O365 Admin access. Checking Okta group memberships
❌

✅
Okta group memberships can be viewed in Ciao and index Resetting user passwords
❌ ✅
✅
HR can currently perform this today in Ciao when users are created. After the users have updated their passwords they can update via Okta. Need to be Password Admin of Index to perform, the role is for all users, not office or regional based, this has been reserved for Service Desk Pushing password sync in Okta
❌

When a user updates their password it does this.
Okta.support@wpp.com is needed to reactivate, deactivated accounts. Viewing last password change/login ✅
✅ ✅
Can be seen in Ciao and Index Enabling/suspending accounts
❌ ✅
✅
This is done by HR in to Ciao. Local Admins in Index and IAM kyndryl team can also perform Managing distribution lists
❌

✅ This can only be done in the Cloud and requires O365 Admin access Adding/removing email aliases
❌
✅
Availble in Index today by Local Admin and by HR in Ciao. Local admins, which means only the offices you are assigned to have access to do in Index. Otherwise the role required is Global admin, there is no role between these Editing phone lines
❌

✅ This can only be done by the Kyndryl Team now and requires O365 Admin access