...
This is not a perfect system, some of the access levels were somewhat knee jerk reactions to problems that should have been handled administratively, not technically. Specifically the handling of birthdates. When staff and faculty birthdates were added to Amaint, there was some abuse of this information at the L2 level and so the ability to see birthdates was locked down. Birthdates should be visible to L1 with appropriate discipline in place when privacy is breached by users. Similar issues came up around email aliases, certain unprofessional aliases were denied by L2 staff in one office and then allowed by different L2 staff in a different office so alias creation was locked down as well. These are policy issues that need to be addressed through people management.