Howard Enos
b01105d1f9
- Document forced-change-at-logon gotcha + fleet-wide fix (shared-phone err 50126) - Record PSO-Caregivers (never-expire FGPP on SG-Caregivers) - Log hard-delete of 7 offboarded leavers; Juan Andrade offboard scheduled 2026-07-11 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
72 lines
3.4 KiB
Markdown
72 lines
3.4 KiB
Markdown
# Cascades — Caretaker phones-only tracking list
|
|
|
|
**Purpose (Howard, 2026-07-01):** for the interim, ALL caretakers may sign in on both
|
|
desktops and phones (on-network only). Near the end of the rollout, the phones-only
|
|
cohort gets locked down to just the phones (device allow-list scoped to `CSC-*`).
|
|
This file is the tracking list for that lockdown.
|
|
|
|
**Enforcement mechanism when the time comes:** a dedicated group (e.g.
|
|
`SG-Caregivers-PhonesOnly`) targeted by a block policy whose device filter excludes
|
|
only `device.displayName -startsWith "CSC-"` — or promote the existing allow-list
|
|
policy `1b7fd025` with a narrowed filter. Do NOT re-enable the compliance-block
|
|
policy `ede985e2` (disabled 2026-07-01, superseded).
|
|
|
|
## Current knowledge (from the 2026-04-22 staff CSV, verified 2026-06-29)
|
|
|
|
Every caretaker row in the client's CSV was `Access = D+P` (desktop + phone) —
|
|
**phones-only = NONE confirmed yet.** The only phone-only staff were the 3
|
|
Transportation drivers, who do not get ALIS/M365 caregiver access at all.
|
|
|
|
## Roster (35 in SG-Caregivers, 2026-07-01) — phones-only column to fill with client
|
|
|
|
| Caretaker | Account | Device access | Phones-only? |
|
|
|---|---|---|---|
|
|
| Agnes McFerren | a.mcferren | D+P (CSV 4/22) | TBD |
|
|
| Ashli Atwood | a.atwood | D+P | TBD |
|
|
| Alejandra Vallejo | a.vallejo | new hire 7/1 | TBD |
|
|
| Barb Johnson | b.johnson | D+P | TBD |
|
|
| Charity Sika | b.sika | D+P | TBD |
|
|
| Cole Johnson | c.johnson | D+P | TBD |
|
|
| Celia Lassey | c.lassey | D+P | TBD |
|
|
| Espe Esperance | e.esperance | D+P | TBD |
|
|
| Erica Sanchez | e.sanchez | D+P | TBD |
|
|
| Ederick Yuzon | e.yuzon | D+P | TBD |
|
|
| Gina Williams | g.williams | D+P | TBD |
|
|
| Juan Andrade | j.andrade | D+P | **LEAVING** — last day 2026-07-11; held active until then, offboard on 07-11 |
|
|
| Jahmeka Clarke | j.clarke | D+P | TBD |
|
|
| Jinnelle Dittbenner | j.dittbenner | D+P | TBD |
|
|
| Jen Higdon | j.higdon | D+P | TBD |
|
|
| Jeanpabtiste Munezero | j.munezero | new hire 7/1 | TBD |
|
|
| Karina Aziakpo | k.aziakpo | D+P | TBD |
|
|
| Katlyn Robinson | k.robinson | new hire 7/1 | TBD |
|
|
| Katrina Wyzykowski | k.wyzykowski | D+P | TBD |
|
|
| Luriz Fuster | l.fuster | D+P | TBD |
|
|
| Luke Hogan | l.hogan | D+P | TBD |
|
|
| Marie Kastner | m.kastner | D+P | TBD |
|
|
| Monique Lopez | m.lopez | D+P | TBD |
|
|
| Nicole Cota | n.cota | new hire 7/1 | TBD |
|
|
| Patricia Camarena Doran | p.doran | D+P | TBD |
|
|
| Patricia Sandoval-Beck | p.sandoval-beck | D+P | TBD |
|
|
| Roseline Cooper | r.cooper | D+P | TBD |
|
|
| Richard Flores | r.flores | D+P | TBD |
|
|
| Rosa Morales | r.morales | D+P | TBD |
|
|
| Sarah Carroll | s.carroll | D+P | TBD |
|
|
| Shontiel Nunn | s.nunn | D+P | TBD |
|
|
| Sandra Padilla | s.padilla | D+P | TBD |
|
|
| Samuel Ramirez | s.ramirez | D+P | TBD |
|
|
| Thelma Abainza | t.abainza | D+P | TBD |
|
|
| Whisper Reed | w.reed | D+P | TBD |
|
|
|
|
Not in the group: e.huerta (front desk as of 7/1), christine.nyanzunda (admin-adjacent,
|
|
frontline-only rule).
|
|
|
|
## Interim CA posture (as of 2026-07-01)
|
|
|
|
| Policy | State | Effect on caretakers |
|
|
|---|---|---|
|
|
| Require MFA for all users | enabled, SG-Caregivers EXCLUDED (fix applied 7/1) | no MFA prompt |
|
|
| CSC - Block caregivers off Cascades network | enabled | on-network only |
|
|
| CSC - Block caregivers on non-compliant device | **DISABLED 7/1** | no device restriction |
|
|
| CSC - Caregiver sign-in frequency 8h | enabled | 8h re-auth |
|
|
| CSC - Caregivers: allow-listed devices only | enabled, TEST group only | no effect on live group |
|