UGA Housing Systems & Assignments Audit

Division of Student Affairs

Spring 2026 Governance Review

Role-Based Access Control (RBAC) Specification

StarRez Access
Architecture & Hierarchy

A comprehensive operational review of permission boundaries across Desk Assistants, Resident Assistants, and Professional Staff.

✓ 13 Audited Data Scopes ✓ Least Privilege Framework ✓ FERPA 34 CFR Part 99

Technical Systems Support Team:

Darrel Hormeku (Principal Systems Programmer) • Mitchell Cassaday (Specialist) • Tanvi Kaurwar (Specialist)

Press Space or → to begin

1. Governance Framework

Executive Summary & Compliance Purpose

Slide 2 of 8

Principle of Least Privilege

Every account is provisioned with the strict minimum data scope required for employment functions. Zero speculative or unverified permissions are granted to student workers.

Strict Role-Based Scoping

FERPA & Student Privacy

Federal statutes legally safeguard educational, financial, and behavioral records. Student staff are strictly walled off from fellow students' billing disputes and conduct notes.

34 CFR Part 99 Federal Shield

Forensic Auditability

Every action—parcel distribution, lockout key issuance, and check-in timestamping—generates an immutable audit record tied to the authenticated operator's UGA MyID.

Immutable Transaction Logs

University Housing Systems & Assignments • StarRez Security Audit UGA Division of Student Affairs

2. Interactive Blueprint

Live Role Permission Simulator

Desk Assistant Scope Operational front-desk tier: package intake, lockout keys, and visitor parent verification.

8 Granted • 5 Restricted

Click buttons above to simulate what each user sees in their StarRez interface Slide 3 of 8

3. Audited Data Modules

Comprehensive Master Matrix

Interface Tab / Module	Desk Assistant	RA / Belonging	Professional	Administrative Protection Policy

Summary: 6 Core Shared Modules • 2 Student Role Operational Differentiators • 5 Enterprise Protected Sectors Slide 4 of 8

4. Operational Discrepancies

Why DAs & RAs Have Distinct Access Models

Slide 5 of 8

Desk Assistant (DA)

Front Desk Operations

1. Family Members Tab (Visible) DAs interact face-to-face with visiting parents and authorized guardians picking up packages or checking in; verified relationship access is operationally required.

2. Situation Response History (Visible) Front desk shifts rotate hourly. Reviewing recent log handoffs ensures incoming staff are aware of active emergency building protocols.

3. Communication Window Tracking DAs can verify when package arrival automated notifications were dispatched to residents.

Core Function: Physical facility flow & verified parcel release

RA & Belonging (RBA)

Community Mentorship

1. No Family Contact Exposure RAs live alongside residents in student wings. Withholding parental contact data protects resident personal autonomy and peer boundaries.

2. No Incident Log Surveillance Withholding formal administrative situation history ensures student peer relationships remain centered on community belonging rather than punitive surveillance.

3. Streamlined Rez 360 Focus RAs retain critical building rosters and emergency contact numbers for crisis triage without access to extraneous communication logs.

Core Function: Peer mentorship, community inclusion & resident safety

Principle: Data exposure strictly matches employment function, not convenience Slide 5 of 8

5. Enterprise Boundary Enforcement

The 4 Strict "No-Access Zones" for Student Staff

Slide 6 of 8

1. Financial Records & Ledgers

Complete lockout from student account balances, payment receipts, fee disputes, and meal plan ledgers. Protects student financial dignity and satisfies federal PCI-DSS compliance.

2. Judicial & Behavioral Files

Zero access to student conduct history, behavioral flags, Title IX notices, or confidential staff mediation documentation. Student staff never evaluate peers' disciplinary records.

3. Assignment Overrides & Holds

Student employees cannot alter room bookings, execute manual room swaps, bypass administrative holds, or modify future housing contracting cycles.

4. Database Change Logs & Forensics

System transaction change logs remain restricted to professional staff to guarantee independent oversight, accountability investigations, and uncompromised forensic tracking.

Enforced via StarRez Security Profile Templates & Enterprise Permissions Slide 6 of 8

6. Visual Interface Verification

Rez 360 Viewport Visual Inspector

StarRez Web • 1. Desk Assistant (DA) Viewport

Click to Zoom Full Resolution

Notice visible Family Members and Situation Response History tabs. Engagement Summary tracks Last Communication.

Click viewport tabs above to toggle between StarRez production roles Slide 7 of 8

Conclusion & Review

Key Takeaways & Open Discussion

Q&A Session

1

Purpose-Built Role Scoping

Front-desk logistics require family & shift handoff visibility; residential peer mentors thrive on personal trust, mutual respect, and boundary isolation.

2

Ironclad Enterprise Walls

Student employees are completely walled off from student financial ledgers, judicial conduct histories, and assignment override tools under FERPA.

3

Continuous Governance

University Housing Systems continuously audits StarRez security templates against evolving EITS standards, university policy, and institutional audit criteria.

University Housing Systems & Assignments

Thank You • Questions & Discussion

Darrel Hormeku • Mitchell Cassaday • Tanvi Kaurwar

StarRez Access Architecture & Hierarchy