Ghost Sessions

With the new security realm installed, district sysadmins can now use the new "ghost session" feature to log in as users to troubleshoot.

Currently, this feature is restricted to only sysadmin users or user with the following securable locations: 

parentaccess.setup.users.ghostSession and/or setup.security.users.modify.ghostSession  

You can use the ghost session feature for Genesis Logons as well as Parent Portal logons.

Any actions taken in the ghost session will affect that user's data but your genesis login will be shown in the audit logs.

You can only ghost as one user at a time.

TABLE OF CONTENTS

• Genesis Users
• Audit Info
• Parent Portal Users
• Audit Info

Genesis Users

If you are a sysadmin user, you can go to Setup>Security>Users, search for a logon ID, and on the Modify User screen, you will see a "Start a Ghost Session as this user" button.

Starting a ghost session allows you to enter genesis as if you were this user.

Sys admins have default access to this feature

• Other users can be given access by giving them the securable location of "setup.security.users.modify.ghostSession" with current year inquiry access.

Any actions taken will affect that user's data but your genesis login will be shown in the audit logs.

After you click that, you will get a pop-up. By clicking OK you agree to continue on with the Ghost Session as that user, and you'll be re-directed.

After you click OK, you will be brought directly to the Ghost Session screen.  When you're done, you must log out to return back to your regular Genesis session.

Click the "Exit Ghost Session" icon in the top right to return to your previous Genesis session.

You will know that you're still logged in to the Ghost Session by the icons in the top right and the top left of the screen, as well as the background.

NOTE: If you make any changes to data while in the Ghost Session, it still makes changes to the live data.  Be careful when reviewing users in this way.  All changes will still be recorded in the audit, for security purposes, as well.

After you click the "Exit Ghost Session" icon, you will be prompted with another dropdown and be returned to your regular Genesis session as your own logon.

Audit Info

When a Sysadmin users does a ghost session as a user, it gets recorded in the security audit for that user.

It will show on the log as "Ghost session started by User: (LogonID)"

Parent Portal Users

Sysadmin users will also be able to perform a ghost session as any parent portal logon ID via Parent Access>Setup>Users>Modify User.

It works in a very similar way to the Genesis Ghost sessions.

Starting a ghost session allows you to enter parent portal as if you were this user.

Currently only system admins can view/use this feature.

Any actions taken will affect that user's data but your genesis login will be shown in the audit logs.
 

If the page that opens up is blank go to 'Setup>Master District parameters>Basic Params in the Parent Portal Server name area to set the correct server name.

To start a ghost session as a Parent Portal logon ID, go to Parent Access>Setup>Users>Modify User and click on the "Start a New Ghost Session as this user" button.

You will be prompted with a pop up - click OK to continue on to the ghost session:

After you click OK, you'll be redirected to the Parent Portal screens so you can review what that parent portal user sees.

When finished, click the LOGOUT button in the top right hand corner of the screen.

Audit Info

When a Sysadmin does a ghost session as a parent portal logon, it gets recorded in the security audit.

It will show in the log as "Ghost session started by User: (Logon ID)"

Server Info

If the page that opens up is blank go to 'Setup>Master District parameters>Basic Params in the Parent Portal Server name area to set the correct server name.