SharePoint: Understanding Permissions for the UT System Employee Central Hub

SharePoint Web Delivery Platform

Before diving into the details about permission, let's ensure you understand SharePoint. SharePoint is a web-based collaboration platform developed by Microsoft. It integrates with Microsoft Office and allows organizations to manage documents, collaborate on projects, and store information securely and accessibly. A SharePoint Hub connects a curated selection of SharePoint Communications sites, called associated sites, into one cohesive group of sites that contain an overarching hub navigation and integrated search through all of its sites' content.  

An Explanation of the UT System Central Hub  

The UT System Employee Central Hub is a collection of SharePoint sites designed to streamline access to essential resources and information for University of Tennessee employees. By consolidating various services into a single, user-friendly interface, the UT System Employee Central Hub serves as an invaluable tool for faculty, staff, and administrators.

UT System Employee Central Hub Access

Most active employees within the UT ecosystem, including faculty, staff, and graduate students, can access the UT System Employee Central Hub. Read-only access is granted through an active directory group specifically created for the employee hub. This employee active directory group is updated daily and includes the following employees, campuses, and institutes:

All Campuses and Institutes have access to the UT System Employee Central Hub.

What constitutes an employee for the purposes of the UT System Employee Central Hub?

  • Regular and term employees
  • Pending employees
  • Graduate assistants, graduate teaching assistants, and graduate research assistants with employment status *

*  Please note that active undergraduate students with an active employment status WILL NOT have access to the UT System Employee Central Hub.. However, for SharePoint sites that reside outside of the UT System Employee Central Hub, you may grant access to everyone with valid campus credentials while excluding public access. Read more about sharing further in the article.  

When does someone become entitled?

DASH provides employee data. Once an employee is updated in the system, they are granted access within 2-3 days as their employment information syncs to all the IT systems.

Pending employees can be added to DASH before the employee’s hire date. See the KB article “NetID: Obtain a NetID for a New Hire Before They Start Work” for detailed information.

Check an employee’s status in the UT Online Directory.

Technical Details: Once this entitlement is set on the LDAP directory, it is synced overnight to Active Directory and used to add users to the “privilege” group that allows access to the UT System Employee Central Hub. The entitlement is removed when a person is terminated from employment. This group is automatically managed based on employment data; employees cannot be manually added.

What about Emeritus Faculty, Staff Retirees, Friends, and special statuses? Do they have access?

  • Faculty and Staff Retirees without active appointments DO NOT have access.
  • Faculty and Staff Retirees with active term/temp appointments  DO have access.
  • Emeritus Faculty members with active appointments DO have access.
  • Friends with employee titles, such as pending employees, adjunct faculty, and emeritus faculty, DO have access.
  • Sponsored NetIDs   DO NOT have access

What if I need to share content with the entire campus or just my department?

By policy and intent, the UT System Employee Central Hub needs to remain an employee intranet system. SharePoint Communications sites are an available option for publishing web-based intranet content, news, and announcements to a larger or smaller group of people. SharePoint Teams sites are also available when you need a group of people to actively chat, share, co-create, and manage group content and calendars. Anyone with a UT Microsoft 365 account can create a SharePoint Communications or Teams site. Once the site is created, the site owner can manage permissions at the site level, meaning you can allow anyone in the UT system to access your site or create a select group of members.

Consult the OIT SharePoint Support Team to learn more about SharePoint sites, roles, and permissions that best suit your needs. UTK-branded SharePoint Communications sites are also available upon request.