{"id":8723,"date":"2024-02-19T15:34:34","date_gmt":"2024-02-19T14:34:34","guid":{"rendered":"https:\/\/www.idstory.com\/?p=8723"},"modified":"2024-02-19T16:12:18","modified_gmt":"2024-02-19T15:12:18","slug":"efektivita-it-jak-rozvazat-ruce-vasemu-it-a-setrit-naklady","status":"publish","type":"post","link":"https:\/\/www.idstory.com\/cs\/efektivita-it-jak-rozvazat-ruce-vasemu-it-a-setrit-naklady\/","title":{"rendered":"Efektivita IT: jak rozv\u00e1zat ruce va\u0161emu IT a \u0161et\u0159it n\u00e1klady?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"8723\" class=\"elementor elementor-8723\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a7405f7 e-flex e-con-boxed e-con e-parent\" data-id=\"a7405f7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4505f74 elementor-widget elementor-widget-text-editor\" data-id=\"4505f74\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Spr\u00e1va \u00fa\u010dt\u016f a opr\u00e1vn\u011bn\u00ed v IT prost\u0159ed\u00ed m\u016f\u017ee b\u00fdt n\u00e1ro\u010dn\u00fdm \u00fakolem, kter\u00fd \u010dasto klade administr\u00e1tor\u016fm velkou zodpov\u011bdnost. Zjist\u011bte jak\u00e9 jsou nejen rutinn\u00ed operace spojen\u00e9 se z\u0159izov\u00e1n\u00edm a spr\u00e1vou \u00fa\u010dt\u016f. Ale tak\u00e9 odhalte pot\u0159eby efektivn\u011bj\u0161\u00edch postup\u016f a automatizace pomoc\u00ed identity management syst\u00e9m\u016f. Jak\u00e9 jsou v\u00fdzvy, rizika a jak lze dos\u00e1hnout v\u011bt\u0161\u00ed efektivity v t\u00e9to oblasti?<\/p><p>\u201c<em>Nazdar Karle, Jarda, pros\u00edm t\u011b, z\u00edtra mi nastoup\u00ed ten brig\u00e1dn\u00edk. Pot\u0159ebuji, aby m\u011bl v\u0161ude p\u0159\u00edstup, d\u00edk<\/em>\u201c.<\/p><p>Karel pak jde, do Active Directory zalo\u017e\u00ed nov\u00fd \u00fa\u010det. P\u0159id\u011bl\u00ed mu emailovou schr\u00e1nku v MS Exchange. Vygeneruje heslo a po\u0161le ho mailem Jardovi. Atributy \u00fa\u010dtu, p\u0159\u00edpadn\u011b AD skupiny nastav\u00ed dle sv\u00e9ho nejlep\u0161\u00edho v\u011bdom\u00ed a sv\u011bdom\u00ed. I takhle m\u016f\u017ee vypadat spr\u00e1va \u00fa\u010dt\u016f (Identity Management) a do ur\u010dit\u00e9 m\u00edry je i funk\u010dn\u00ed, ale nen\u00ed to \u00fapln\u011b ide\u00e1ln\u00ed efektivita IT:<\/p><ul><li>P\u0159ijde audit a bude cht\u00edt v\u011bd\u011bt, na z\u00e1klad\u011b \u010deho dostal u\u017eivatel \u00fa\u010det v AD? Kdo o to po\u017e\u00e1dal a kde je o tom z\u00e1znam? Existuje n\u011bjak\u00e1 standardn\u00ed matice pr\u00e1v pro zam\u011bstnance?<\/li><li>Pro\u010d m\u00e1 Karl\u016fv \u00fa\u010det atributy, takov\u00e9, jak\u00e9 m\u00e1?<\/li><li>Kdo schv\u00e1lil jeho pr\u00e1va v AD?<\/li><li>Jarda odch\u00e1z\u00ed, mus\u00edte \u0159e\u0161it p\u0159ed\u00e1n\u00ed \u201cknow how\u201d rutinn\u00edch operac\u00ed v IT syst\u00e9mech \u2013 zalo\u017e \u00fa\u010det, sma\u017e, archivuj, blokuj schr\u00e1nku, obnov\u2026<\/li><li>Jak se p\u0159ed\u00e1v\u00e1 heslo, kdo v\u0161echno ho m\u011bl v ruce?<\/li><\/ul><p>Jde to i jinak.<\/p><h3>Co je zodpov\u011bdnost\u00ed admina?<\/h3><p>Z p\u0159edchoz\u00edho seznamu vypl\u00fdv\u00e1, \u017ee administr\u00e1tor v procesu zav\u00e1d\u011bn\u00ed zam\u011bstnance nese na sv\u00fdch bedrech pom\u011brn\u011b velkou zodpov\u011bdnost. Fakticky\u00a0<strong>rozhoduje<\/strong>\u00a0o tom,<strong>\u00a0kdo m\u00e1 jak\u00e1 pr\u00e1va<\/strong>, kdy je dostane a kdy o n\u011b p\u0159ijde. T\u00edm p\u00e1dem nese i odpov\u011bdnost za to, \u017ee n\u011bkdo m\u016f\u017ee potenci\u00e1ln\u011b zneu\u017e\u00edt sv\u016fj \u00fa\u010det k v\u011bcem, ke kter\u00fdm nem\u00e1 ze podstaty sv\u00e9ho zam\u011bstn\u00e1n\u00ed p\u0159istupovat. Mus\u00ed si nav\u00edc zajistit informace o tom, kdy zam\u011bstnanci kon\u010d\u00ed. A ruku na srdce, tahle informace \u010dasto na IT nedoraz\u00ed v\u010das nebo tak\u00e9 v\u016fbec. Tak pro\u010d by m\u011bl admin rozhodovat, kdo m\u00e1 jak\u00e1 pr\u00e1va? On nen\u00ed ten, kdo ur\u010duje bezpe\u010dnostn\u00ed politiku spole\u010dnosti, kdo by m\u011bl stav\u011bt matici p\u0159\u00edstup\u016f. Tohle nesm\u00ed b\u00fdt zodpov\u011bdnost administr\u00e1tora.<\/p><p>Administr\u00e1tor IT syst\u00e9mu, t\u0159eba AD m\u00e1 b\u00fdt zodpov\u011bdn\u00fd prim\u00e1rn\u011b za provoz syst\u00e9mu, jeho \u00fadr\u017ebu a hlavn\u011b: systematick\u00e9 zlep\u0161ov\u00e1n\u00ed jeho chodu tak, aby firm\u011b jeho provoz p\u0159in\u00e1\u0161el co nejv\u011bt\u0161\u00ed benefit.<\/p><h3>Nechte svoje zam\u011bstnance tvo\u0159it \u2013 o tom je efektivita IT<\/h3><p>Nechte administr\u00e1tory, aby se starali o rozvoj IT syst\u00e9m\u016f. Jen\u017ee jak se m\u00e1 t\u00e9to \u010dinnosti v\u011bnovat, kdy\u017e se neust\u00e1le v\u011bnuje p\u0159id\u011blov\u00e1n\u00ed skupin, zakl\u00e1d\u00e1n\u00ed \u00fa\u010dt\u016f, resetov\u00e1n\u00ed hesel u\u017eivatel\u016fm atd.?\u00a0Zamezte rutinn\u00ed operativ\u011b.\u00a0<strong>Automatizujte.\u00a0<\/strong>Identity Management m\u016f\u017ee pomoci.<\/p><p>Zaveden\u00edm syst\u00e9mu pro spr\u00e1vu identit, identity management, m\u016f\u017eete jednodu\u0161e zbavit administr\u00e1tora rutinn\u00edch \u010dinnost\u00ed jako jsou:<\/p><ul><li><strong>Zalo\u017een\u00ed \u00fa\u010dtu<\/strong>\u00a0v AD, Exchange, helpdesk, doch\u00e1zka apod\u2026<\/li><li><strong>Distribuce hesla<\/strong>\u00a0zam\u011bstnanci, nap\u0159\u00edklad pomoc\u00ed SMS.<\/li><li><strong>Reset zapomenut\u00e9ho hesla<\/strong>. Modern\u00ed IdM SW, jako je nap\u0159\u00edklad Idstory, maj\u00ed samoobsluhu u\u017eivatele, kde si ka\u017ed\u00fd sv\u00e9 zapomenut\u00e9 heslo m\u016f\u017ee s\u00e1m resetovat.<\/li><li><strong>Zm\u011bna pr\u00e1v<\/strong>, nap\u0159\u00edklad \u017e\u00e1dost o novou AD skupinu. To m\u016f\u017ee p\u0159eci po\u017e\u00e1dat u\u017eivatel s\u00e1m a jeho \u017e\u00e1dost nad\u0159\u00edzen\u00fd (nebo garant syst\u00e9mu) schv\u00e1l\u00ed.<\/li><li><strong>Zru\u0161en\u00ed \u00fa\u010dtu<\/strong>\u00a0p\u0159i konci \u00favazku, archivace \u00fa\u010dtu dle intern\u00ed politiky firmy, smaz\u00e1n\u00ed z archivu po uplynut\u00ed archiva\u010dn\u00edho obdob\u00ed.<\/li><li><strong>Schv\u00e1len\u00ed z\u0159\u00edzen\u00ed \u00fa\u010dtu\/p\u0159id\u011blen\u00ed opr\u00e1vn\u011bn\u00ed.<\/strong>\u00a0Admin by nem\u011bl rozhodovat o tom, kdo m\u00e1 v AD jak\u00e1 pr\u00e1va. Definov\u00e1n\u00edm vhodn\u00e9ho mechanismu schvalov\u00e1n\u00ed p\u0159\u00edstup\u016f v IdM sejmete toto b\u0159emeno z jeho beder. Modern\u00ed IdM syst\u00e9my umo\u017e\u0148uj\u00ed v\u00edcekolov\u00e9 schvalov\u00e1n\u00ed p\u0159id\u011blen\u00ed opr\u00e1vn\u011bn\u00ed vlastn\u00edkem dat syst\u00e9mu nebo nad\u0159\u00edzen\u00fdm.<\/li><li><strong>P\u0159\u00edprava dat pro audit.\u00a0<\/strong>Usnadn\u011bte pr\u00e1ci adminovi. A\u0165 ze zm\u011bti log\u016f r\u016fzn\u00fdch syst\u00e9m\u016f nelov\u00ed auditn\u00ed informace o p\u0159\u00edstupech zam\u011bstnanc\u016f. S IdM m\u00e1te p\u0159ehled pr\u00e1v u\u017eivatel\u016f na jednom m\u00edst\u011b. Audit bez Identity Managementu m\u016f\u017ee zabrat dny pr\u00e1ce.<\/li><\/ul><p>Tohle v\u0161echno v d\u016fsledku u\u0161et\u0159\u00ed \u010das zam\u011bstnanc\u016fm IT, kter\u00fd m\u016f\u017eete investovat daleko efektivn\u011bji, ne\u017e do rutinn\u00edch \u010dinnost\u00ed.<\/p><h3>Shrnut\u00ed: identity management a efektivita IT<\/h3><p>Na praktick\u00e9m p\u0159\u00edkladu jsme si uk\u00e1zali, jak m\u016f\u017ee zaveden\u00ed identity manageru pomoct p\u0159i spr\u00e1v\u011b \u00fa\u010dt\u016f, jedn\u00e1 se zejm\u00e9na o oblasti:<\/p><ul><li>automatizace proces\u016f spr\u00e1vy identit<\/li><li>integrace IT syst\u00e9m\u016f, \u010dasto tak\u00e9 HR syst\u00e9m\u016f<\/li><li>schvalov\u00e1n\u00ed p\u0159\u00edstup\u016f<\/li><li>centr\u00e1ln\u00ed p\u0159ehled pr\u00e1v<\/li><li>auditing zm\u011bn a p\u0159\u00edprava report\u016f pro audit<\/li><li>zv\u00fd\u0161en\u00ed bezpe\u010dnosti<\/li><\/ul><h3>Chcete efektivn\u011b \u0159\u00eddit p\u0159\u00edstup zam\u011bstnanc\u016f?<\/h3><p>V\u00edce informac\u00ed o tom, jak IdM funguje, m\u016f\u017eete naj\u00edt v na\u0161\u00ed\u00a0<a href=\"https:\/\/wiki.czechidm.com\/devel\/documentation\/start\" target=\"_blank\" rel=\"noopener\">online dokumentaci<\/a>. Prakticky si CzechIdM m\u016f\u017eete vyzkou\u0161et v\u00a0<a href=\"http:\/\/demo.czechidm.com\/\" target=\"_blank\" rel=\"noopener\">online demu.<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Spr\u00e1va \u00fa\u010dt\u016f a opr\u00e1vn\u011bn\u00ed v IT prost\u0159ed\u00ed m\u016f\u017ee b\u00fdt n\u00e1ro\u010dn\u00fdm \u00fakolem, kter\u00fd \u010dasto klade administr\u00e1tor\u016fm velkou zodpov\u011bdnost. Zjist\u011bte jak\u00e9 jsou nejen rutinn\u00ed operace spojen\u00e9 se z\u0159izov\u00e1n\u00edm a spr\u00e1vou \u00fa\u010dt\u016f.  Ale tak\u00e9 odhalte pot\u0159eby efektivn\u011bj\u0161\u00edch postup\u016f a automatizace pomoc\u00ed identity management syst\u00e9m\u016f. Jak\u00e9 jsou v\u00fdzvy, rizika a jak lze dos\u00e1hnout v\u011bt\u0161\u00ed efektivity v t\u00e9to oblasti?<\/p>\n","protected":false},"author":6,"featured_media":8724,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_theme","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[32],"tags":[],"class_list":["post-8723","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identity-manager"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/8723","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/comments?post=8723"}],"version-history":[{"count":0,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/8723\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media\/8724"}],"wp:attachment":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media?parent=8723"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/categories?post=8723"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/tags?post=8723"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}