UN High Commissioner for Refugees (UNHCR), UNHCR Access Control for IT Systems Applications, 1 March 2024, https://www.refworld.org/policy/opguidance/unhcr/2024/en/149371 [accessed 16 February 2025]
This Administrative Instruction (AI) applies to all UNHCR offices and all users requiring access to the organization’s IT systems, applications and services whether using an identity assigned to them by UNHCR or using any other (non-UNHCR assigned) Identity. Its primary audience is workforce developing and supporting software systems, but sections are also relevant for managers hiring contractors and procuring and owning systems, and for workforce owning and using normal and privileged accounts.
This Administrative Instruction does not address digital identities for forcibly displaced and stateless persons - or any access that these individuals may have to UNHCR IT systems – unless they would also qualify as an authorized user under this Instruction.
This Administrative Instruction defines the requirements and standards to manage accounts within UNHCR’s Information Technology (IT) systems, applications and services.