Files
claudetools/clients/cascades-tucson/docs/cloud/caretaker-phones-only-list.md
Howard Enos b01105d1f9 cascades: caretaker roster + phone-login remediation updates
- Document forced-change-at-logon gotcha + fleet-wide fix (shared-phone err 50126)
- Record PSO-Caregivers (never-expire FGPP on SG-Caregivers)
- Log hard-delete of 7 offboarded leavers; Juan Andrade offboard scheduled 2026-07-11

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-02 15:23:20 -07:00

3.4 KiB

Cascades — Caretaker phones-only tracking list

Purpose (Howard, 2026-07-01): for the interim, ALL caretakers may sign in on both desktops and phones (on-network only). Near the end of the rollout, the phones-only cohort gets locked down to just the phones (device allow-list scoped to CSC-*). This file is the tracking list for that lockdown.

Enforcement mechanism when the time comes: a dedicated group (e.g. SG-Caregivers-PhonesOnly) targeted by a block policy whose device filter excludes only device.displayName -startsWith "CSC-" — or promote the existing allow-list policy 1b7fd025 with a narrowed filter. Do NOT re-enable the compliance-block policy ede985e2 (disabled 2026-07-01, superseded).

Current knowledge (from the 2026-04-22 staff CSV, verified 2026-06-29)

Every caretaker row in the client's CSV was Access = D+P (desktop + phone) — phones-only = NONE confirmed yet. The only phone-only staff were the 3 Transportation drivers, who do not get ALIS/M365 caregiver access at all.

Roster (35 in SG-Caregivers, 2026-07-01) — phones-only column to fill with client

Caretaker Account Device access Phones-only?
Agnes McFerren a.mcferren D+P (CSV 4/22) TBD
Ashli Atwood a.atwood D+P TBD
Alejandra Vallejo a.vallejo new hire 7/1 TBD
Barb Johnson b.johnson D+P TBD
Charity Sika b.sika D+P TBD
Cole Johnson c.johnson D+P TBD
Celia Lassey c.lassey D+P TBD
Espe Esperance e.esperance D+P TBD
Erica Sanchez e.sanchez D+P TBD
Ederick Yuzon e.yuzon D+P TBD
Gina Williams g.williams D+P TBD
Juan Andrade j.andrade D+P LEAVING — last day 2026-07-11; held active until then, offboard on 07-11
Jahmeka Clarke j.clarke D+P TBD
Jinnelle Dittbenner j.dittbenner D+P TBD
Jen Higdon j.higdon D+P TBD
Jeanpabtiste Munezero j.munezero new hire 7/1 TBD
Karina Aziakpo k.aziakpo D+P TBD
Katlyn Robinson k.robinson new hire 7/1 TBD
Katrina Wyzykowski k.wyzykowski D+P TBD
Luriz Fuster l.fuster D+P TBD
Luke Hogan l.hogan D+P TBD
Marie Kastner m.kastner D+P TBD
Monique Lopez m.lopez D+P TBD
Nicole Cota n.cota new hire 7/1 TBD
Patricia Camarena Doran p.doran D+P TBD
Patricia Sandoval-Beck p.sandoval-beck D+P TBD
Roseline Cooper r.cooper D+P TBD
Richard Flores r.flores D+P TBD
Rosa Morales r.morales D+P TBD
Sarah Carroll s.carroll D+P TBD
Shontiel Nunn s.nunn D+P TBD
Sandra Padilla s.padilla D+P TBD
Samuel Ramirez s.ramirez D+P TBD
Thelma Abainza t.abainza D+P TBD
Whisper Reed w.reed D+P TBD

Not in the group: e.huerta (front desk as of 7/1), christine.nyanzunda (admin-adjacent, frontline-only rule).

Interim CA posture (as of 2026-07-01)

Policy State Effect on caretakers
Require MFA for all users enabled, SG-Caregivers EXCLUDED (fix applied 7/1) no MFA prompt
CSC - Block caregivers off Cascades network enabled on-network only
CSC - Block caregivers on non-compliant device DISABLED 7/1 no device restriction
CSC - Caregiver sign-in frequency 8h enabled 8h re-auth
CSC - Caregivers: allow-listed devices only enabled, TEST group only no effect on live group