# Cascades staff — working account setup list

**Prepared for:** Meredith Kuhn, John Trozzi, Ashley Jensen
**From:** Howard Enos — Computer Guru
**Date:** 2026-04-22

---

This is the working list I'm using to build every staff member's Microsoft 365 account, email, and access policy, based on the returned staff list. **Please skim and flag anything wrong, missing, or miscategorized.** Nothing is created yet — confirming this list is the go-ahead to start.

## How to read the columns

- **Email** — the M365 sign-in and email address the user will have. Existing AD accounts keep their current address; new accounts follow the `firstname.lastname@cascadestucson.com` pattern.
- **Phone (Y/N)** — Will this person use a Cascades-managed phone (shared handset or personal business phone) to sign into email / ALIS / Teams?
- **Outside sign-in (Y/N)** — **Default for everyone is NO** (building-only sign-in). A "Yes" here means the user is on the allow-list that permits signing in from home, personal cell, or off-site devices (with MFA and a managed device requirement). Call out anyone whose value here looks wrong.

Items marked **[?]** are the few things still needing a confirmation from you — see "Pending confirmations" at the bottom.

---

## Administrative

| Name | Title | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Meredith Kuhn | Executive Director | meredith.kuhn@cascadestucson.com | Y | Y |
| Ashley Jensen | Assistant Executive Director | ashley.jensen@cascadestucson.com | Y | Y |
| Lauren Hasselman | Business Office Director | lauren.hasselman@cascadestucson.com | Y | Y |
| Allison Reibschied | Accounting Assistant | allison.reibschied@cascadestucson.com | Y | N |

## Marketing / Sales

| Name | Title | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Megan Hiatt | Sales Director | megan.hiatt@cascadestucson.com | Y | Y |
| Crystal Rodriguez | Sales Associate | crystal.rodriguez@cascadestucson.com | Y | Y |
| Tamra Matthews | Move-In Coordinator *(leaving June 2026)* | tamra.matthews@cascadestucson.com | Y | Y |

## Assisted Living Nursing / Clinical

| Name | Title | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Lois Lane | Health Services Director | lois.lane@cascadestucson.com | Y | Y |
| Karen Rossini | Health Services Manager | karen.rossini@cascadestucson.com | Y | Y |
| Veronica Feller | Care, AL Aide | veronica.feller@cascadestucson.com | Y | Y |

## Memory Care

| Name | Title | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Shelby Trozzi | Memory Care Director | shelby.trozzi@cascadestucson.com | Y | Y |
| Christine Nyanzunda | MC Admin Assistant *(also part-time MedTech Sun/Mon — one account for both)* | christine.nyanzunda@cascadestucson.com | Y | Y |

## Resident Services

| Name | Title | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Christina DuPras | Resident Services Director | christina.dupras@cascadestucson.com | Y | Y |
| Cathy Kingston | Receptionist *(shared front desk)* | cathy.kingston@cascadestucson.com | N | N |
| Shontiel Nunn | Receptionist *(shared front desk)* | shontiel.nunn@cascadestucson.com | N | N |
| Kyla QuickTiffany | Receptionist *(shared front desk)* | kyla.quicktiffany@cascadestucson.com | N | N |
| Michelle Shestko | MC Receptionist *(shared front desk)* | michelle.shestko@cascadestucson.com | N | N |
| Sebastian Leon | Courtesy Patrol | sebastian.leon@cascadestucson.com | Y | N |
| Sheldon Gardfrey | Courtesy Patrol | sheldon.gardfrey@cascadestucson.com | Y | N |
| Ray Rai | Courtesy Patrol | ray.rai@cascadestucson.com | Y | N |

## Life Enrichment

| Name | Title | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Susan Hicks | Life Enrichment Director | susan.hicks@cascadestucson.com | Y | Y |
| Sharon Edwards | Life Enrichment Assistant | sharon.edwards@cascadestucson.com | Y | N |
| Alma R Montt | Memory Care Life Enrichment | alma.montt@cascadestucson.com | Y | Y |

## Culinary

| Name | Title | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| JD Martin | Culinary Director | jd.martin@cascadestucson.com | Y | Y |
| Ramon Castaneda | Kitchen Manager | ramon.castaneda@cascadestucson.com | Y | N |
| Alyssa Brooks | Dining Manager | alyssa.brooks@cascadestucson.com | Y | Y |

## Maintenance

| Name | Title | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| John Trozzi | Facilities Director | john.trozzi@cascadestucson.com | Y | Y |
| Matt Brooks | Memory Care Receptionist / Maintenance *(dual-department)* | matt.brooks@cascadestucson.com | Y | N |

## Housekeeping

| Name | Title | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Lupe Sanchez *(aka Guadalupe)* | Housekeeping Director | lupe.sanchez@cascadestucson.com | Y | Y |

## Transportation (drivers)

**Access decision 2026-04-22 (Howard):** Drivers stay on the roster for tracking but do NOT get IT access — they drive and use their personal phones for Google Maps, no email, no ALIS, no Cascades login. Existing AD accounts will be disabled; they remain employees on this list.

| Name | Title | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Richard Adams | Driver | — *(no account)* | N | N |
| Julian Crim | Driver | — *(no account)* | N | N |
| Christopher Holick | Driver | — *(no account)* | N | N |

The `Transportation@` shared mailbox is a separate decision — confirm with Meredith whether to keep it for dispatch/scheduling emails or retire it once driver AD accounts are disabled.

---

## Caregivers / Shift staff

All caregivers sign into the shared company-issued Android phones using their own account — each person needs their own M365 identity. Building-only sign-in for everyone in this group.

### Tuesday–Saturday

| Name | Role | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Thelma Abainza | Caregiver — Tower | thelma.abainza@cascadestucson.com | Y | N |
| Niel Castro | MedTech / CCG — Tower | niel.castro@cascadestucson.com | Y | N |
| Espe Esperance | MedTech — Tower | espe.esperance@cascadestucson.com | Y | N |
| Barbara Johnson | Caregiver — Tower | barbara.johnson@cascadestucson.com | Y | N |
| Kasey Flores | Caregiver — Memory Care | kasey.flores@cascadestucson.com | Y | N |
| Richard Flores | Caregiver — Memory Care | richard.flores@cascadestucson.com | Y | N |
| Marie Kastner | Caregiver — Memory Care | marie.kastner@cascadestucson.com | Y | N |
| Bella Mendoza | Caregiver — Memory Care | bella.mendoza@cascadestucson.com | Y | N |
| Rosa Morales | MedTech — Memory Care | rosa.morales@cascadestucson.com | Y | N |
| Sandra Padilla | MedTech / CCG — Tower | sandra.padilla@cascadestucson.com | Y | N |
| Whisper Reed | MedTech — Tower *(overnight)* | whisper.reed@cascadestucson.com | Y | N |
| Patricia Sandoval-Beck | MedTech — Tower | patricia.sandoval-beck@cascadestucson.com | Y | N |
| Charity Sika | Caregiver — Memory Care | charity.sika@cascadestucson.com | Y | N |
| Ederick Yuzon **[?]** *(confirm spelling)* | Caregiver — Tower | ederick.yuzon@cascadestucson.com | Y | N |

### Sunday–Thursday

| Name | Role | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Juan Andrade | Caregiver — Memory Care | juan.andrade@cascadestucson.com | Y | N |
| Jahmeka Clarke | MedTech — Memory Care | jahmeka.clarke@cascadestucson.com | Y | N |
| Karina Aziakpo | MedTech / CCG — MC overnight | karina.aziakpo@cascadestucson.com | Y | N |
| Jinnelle Dittbenner | Caregiver — Tower | jinnelle.dittbenner@cascadestucson.com | Y | N |
| Agnes McFerren | Caregiver — Tower | agnes.mcferren@cascadestucson.com | Y | N |
| Samuel Ramirez | Caregiver — Tower | samuel.ramirez@cascadestucson.com | Y | N |
| Erica Sanchez | Caregiver — Memory Care | erica.sanchez@cascadestucson.com | Y | N |
| Katrina Wyzykowski | MedTech — Memory Care | katrina.wyzykowski@cascadestucson.com | Y | N |
| Corey Tate | Caregiver — Tower NOC | corey.tate@cascadestucson.com | Y | N |

### Friday–Monday / weekend

| Name | Role | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Ashli Atwood | MedTech / CCG — MC overnight | ashli.atwood@cascadestucson.com | Y | N |
| Cole Johnson | MedTech — Tower | cole.johnson@cascadestucson.com | Y | N |
| Roseline Cooper | Caregiver — MC overnight | roseline.cooper@cascadestucson.com | Y | N |
| Monique Lopez | Caregiver — Tower *(Fri+Sat doubles)* | monique.lopez@cascadestucson.com | Y | N |
| Gloria Williford | MedTech — MC *(Fri+Sat doubles)* | gloria.williford@cascadestucson.com | Y | N |

### Thursday–Monday / other

| Name | Role | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Sarah Carroll | Caregiver — Tower | sarah.carroll@cascadestucson.com | Y | N |
| Luke Hogan | Caregiver — Tower | luke.hogan@cascadestucson.com | Y | N |
| Gina Williams | Caregiver — Tower | gina.williams@cascadestucson.com | Y | N |
| Jen Higdon | Caregiver — Tower *(M/W/F AM)* | jen.higdon@cascadestucson.com | Y | N |
| Mary Kariuki | Caregiver — Tower *(Sat–Mon + Wed PM)* | mary.kariuki@cascadestucson.com | Y | N |
| CeCe Lassey | Caregiver — Tower *(Sun/Mon doubles + Tue PM)* | cece.lassey@cascadestucson.com | Y | N |
| Patricia (Paty) Camarena Doran | MedTech / CCG — Tower *(Sun/Mon only)* | patricia.doran@cascadestucson.com | Y | N |

### PRN / part-time

| Name | Role | Email | Phone | Outside sign-in |
|---|---|---|---|---|
| Ezekiel Huerta | Caregiver PRN — Tower | ezekiel.huerta@cascadestucson.com | Y | N |
| Maia Baker | MedTech PRN — Memory Care | maia.baker@cascadestucson.com | Y | N |

### Agency caregivers — no shared logins (HIPAA decision 2026-04-22)

Originally planned as shared logins `reliable1@` / `reliable2@`. **Dropped** after HIPAA review — shared log-on IDs for PHI access violate 45 CFR §164.312(a)(2)(i) Unique User Identification (Required spec, no compensating-control exception). See `docs/security/hipaa-review-2026-04-22.md`.

**Policy going forward:** Reliable Agency must provide individual names before any shift where a caregiver needs PHI access. Per-person accounts only. If the agency won't commit to that, their caregivers don't get ALIS / email access and must work under direct supervision of a Cascades-employed caregiver who does.

No entries on this list until names arrive.

---

## Summary counts

### Identities / accounts being created or kept

| Category | Count |
|---|---|
| Office staff with outside sign-in | 18 |
| Office staff in-building only (Allison, Sharon, Ramon, Matt) | 4 |
| Shared front-desk receptionists | 4 |
| Courtesy Patrol | 3 |
| Caregivers / shift staff | 37 |
| Agency caregivers | 0 *(per-person only; no accounts until Reliable provides names — HIPAA decision 2026-04-22)* |
| **Total active identities / mailboxes** | **66** |

### Employees on the roster but no IT account

| Category | Count |
|---|---|
| Drivers (on roster, no IT access) | 3 |

### Departures (2026-04-22)

| Name | Action |
|---|---|
| Britney Thompson | Disable existing AD account, harvest M365 license (Business Standard + Exchange Online Essentials) |
| Polett Pinazavala | Remove from roster (no existing account) |

### Existing accounts to disable (drivers)

| Account | Reason |
|---|---|
| `Richard.Adams` | Drivers no longer get IT access per 2026-04-22 decision |
| `Julian.Crim` | Same |
| `Christopher.Holick` | Same |

## Resolved from John's 2026-04-22 reply

- **Britney Thompson — DEPARTED.** Disable existing AD account and harvest Business Standard + Exchange Online Essentials license.
- **Polett Pinazavala — DEPARTED.** Not in AD, no action needed other than removal from roster.
- **Alma R Montt — ANSWERED.** Title "Memory Care Life Enrichment", D+P, ALIS=Y, Outside=Y.
- **Agency usernames — SUPERSEDED by HIPAA review.** John approved `reliable1` / `reliable2`, but shared-login accounts for PHI access are not HIPAA-compliant (§164.312(a)(2)(i)). No accounts created. Reliable Agency must provide individual names for per-person accounts.
- **Drivers — NO ACCOUNTS.** Disable existing 3 AD accounts (Richard Adams, Julian Crim, Christopher Holick).

## Still pending from Meredith/John

1. **Ederick Yuzon — first-name spelling.** (Ederick / Edrick / other?)

## Separate decisions from Meredith

- Business Premium tenant-wide vs. mixed SKUs (purchase decision for the ~68 accounts).
- What to do with `Transportation@` shared mailbox after driver accounts are disabled — keep for dispatch emails or retire.

## Policy summary

- **Sign-in is locked to the Cascades building by default for every account above.**
- **Off-site sign-in is only allowed for the accounts marked "Outside sign-in = Y"**, and those accounts still require MFA and a managed device to sign in from off-site.
- Phones are provided for anyone marked "Phone = Y". Front-desk receptionists and drivers-without-a-phone are exceptions.
- Tamra Matthews' access will be removed in June 2026 when she leaves.

Please reply with corrections, or reply "all good" and I'll start building accounts.

Thank you —

Howard