Texas Student Data System TEAL for TSDS and the TSDS Portal

1. Simple Solution. Brighter Futures. Texas Student Data System TEAL for TSDS and the TSDS Portal

2. Course Agenda • What is TEAL? • How to Request a TEAL Account • How to Request Access to TSDS Applications • TSDS Portal Roles • TEAL Service Accounts • TEAL Auto Account Provisioning • TEAL Admin Access • TSDS Portal

3. TEAL Overview

4. TEAL • TEAL – Texas Education Agency Login • A single sign-on that provides users access to many TEA applications • Secure authentication ensures only authorized users can access the applications • Users must first create a TEAL identity and then request account access to the specific applications needed

5. TEAL  TSDS Portal  TSDS Portal Roles

6. Requesting a TEAL ID

7. Requesting a TEAL User Account (TEAL ID) To begin a request for a TEAL ID, the user must click the link on the TEAL login page. https://pryor.tea.state.tx.us/

8. TEAL User Profile A TEAL ID is created when the user completes and submits the TEAL User Profile.

9. TEAL Login Page https://pryor.tea.state.tx.us/

10. TEAL Security Questions After initial log on to TEAL, the user must change their password, agree to assurances (every 30 days) and answer security questions: The user must then request account access.

11. TEAL Account Access and Approval Process • Once a TEAL ID is created, the user must request access to the specific TEA applications to which they need access • If a request for account access is not made within 60 days, the TEAL account is inactivated (the user will get email notification each day for 7 days before the inactivation occurs) • Requests for account access must first be approved by the Organization Approver (Superintendent, ESC Director, or designated alternate; this also may be a Limited Approver) if no action is taken within 5 days the request is rerouted to the alternate approver (if the organization has one). If no action by the alternate within 5 days, the user gets an email notification & must resubmit the request. • Once requests are approved at the organization level, they are routed to the TEA Service Approver for approval

12. Requesting Access to TSDS Portal Applications

13. Requesting Access to Applications The user must click on Apply for Access to initiate the account request process.

14. Requesting Access to TSDS Applications The user must select Request New Account and then select TSDS Portal

15. Add Access The user must click on Add Access

16. Add Access The user must click on Add Access

17. Enter Employing Organization The user must enter their Employing Organization and select the roles they need:

18. Select TSDS Portal Roles

19. Select TSDS Portal Roles

20. Enter Additional Information The user must enter additional information: • Requested Organization (required for most TSDS roles) • Unique ID (required for LEA Dashboards roles) After the request is submitted, it is routed to all Approvers for organizations entered on this screen.

21. Manual studentGPS™ Dashboards Account Provisioning • studentGPS™ Dashboards users not set up via the automated account provisioning process must enter their Unique ID as part of the request • Notice the function to find a Unique ID

22. Unique ID Lookup in TEAL

23. Unique ID Lookup in TEAL

24. TSDS Roles

25. TSDS Portal Roles

26. TSDS Portal Roles

27. TSDS Portal Roles

28. ODS Data Loader Role

29. TIMS Support

30. TSDS Service Accounts

31. TSDS Service Accounts • TSDS has a web service available for Unique ID (optional) and secure FTP (sFTP) for the Data Transfer Utility (DTU) (required) • For security purposes, it is necessary to authenticate each time a user accesses the services by requiring a user name and password • At least one user within the organization must be set up as a Service Account Manager (SAM) to manage service accounts for the organization • Each district, charter school, or other user organization must set up at least one service account for Unique ID and DTU if they’re going to use the above mentioned features • Service account credentials are entered in the application that requires them

32. Service Account Managers • These users manage service accounts for the organization. This includes the ability to: • Request new service accounts • Reset service account passwords (required yearly) • Delete service accounts

33. Requesting Service Account Manager (SAM) Status • To request SAM status, the user must select Edit My Profile

34. Requesting SAM Status • Click the Service Account Manager Status link.

35. Requesting SAM Status • The user must click Request Service Account Manager Status

36. Requesting SAM Status • In the Service Account Manager Details popup the user must enter the Organization for which they are requesting SAM status and click Submit:

37. SAM Status Approval Process • Requests for SAM status must be approved by the Organization Approver

38. Managing Service Accounts • Once a user has SAM status, they can manage service accounts, by selecting Manage Service Accounts

39. Request Service Account • Click Request New Service Account

40. Request Service Account • Select the application from the Application dropdown enter an Administration email address (optional) and click Submit:

41. Request Service Account • A confirmation message is displayed:

42. Service Account Approval Process • Requests for Service Accounts are sent to the Organization Approver for approval • If approved, the user who submitted the request receives two separate email notifications (one with the service account user ID, and the other with the service account password) • These credentials must be entered into the application that requires this access

43. Resetting Service Account Passwords • Any user with SAM status can reset a password for a TSDS service account by checking the box associated with the service account, selecting Reset Password and clicking OK on the popup. • When this action is performed, all service account managers for the organization receive an email with the new password for the web service. All software applications that were using the previous password will not function until the new password is provided within the application.

44. Deleting Service Accounts • Any user with SAM status can delete a service account by checking the box associated with the service account, selecting Reset Password and clicking OK on the popup. • The requestor and all service account managers are notified by email when a service account is deleted. Any software application that is using the web service credentials associated with a deleted service account will no longer be able to use the web service in its processing.

45. Revoking SAM Status • Only Computer Access at TEA , or the user with Service Account Manager status, can revoke that status (no one at the organization can revoke another’s SAM status) • If it is necessary for an organization to terminate Service Account Manager status for a former employee or other user, the Organization Approver must contact Computer Access at computer.access@tea.state.tx.us.

46. How to Revoke SAM Status • A user with SAM status, may revoke it by: • Clicking on Edit My Profile • Clicking on Service Account Manager Status

47. How to Revoke SAM Status • Clicking Revoke Selected Status and clicking OK on the popup:

48. TEAL Admin Access

49. ESC TEAL Admin Privileges • Access granted by TEA (cannot be requested in TEAL) • Users with this permission can perform various TEAL administrative functions including: • Reset passwords • Make minor updates to TEAL user email addresses • Restore users

50. TEAL Admin Functions • Administration options are accessed via the left side navigation