...
(Should we put specific password requirements on these accounts?)
Vendor Account
A vendor accounts will account can be created for vendors that we have a signed contract withrequested for a vendor only after a contract is in place. The account will follow the naming convention as established in the Privileged Access Standard and is limited to non-privileged user activities such as using the University VPN.
If the vendor will be doing work that requires privileged access they will be required to use a vendor administrative account using the established Privileged Access Standard. The account may only be used for the purpose it was created for.
...