Home → About NC Cardinal → Policies → Staff Login Accounts Permissions and Password Policies

1.6. Staff Login Accounts Permissions and Password Policies

Last Updated 03/24/2025

Staff Login Accounts and Permission Policies

• Cataloging and administrative staff login accounts shall be assigned to individual users, who are responsible for activities using that login to ensure compliance with all consortium policies. NC Cardinal libraries can retain generic circulation staff login accounts. Generic accounts currently in use for reporting will be transferred to a “reports only” permission group.

• Each library system shall have a local administrator who is responsible for maintaining staff user login accounts in consultation with their library director and State Library NC Cardinal staff, creating accounts for new library staff and updating, merging, and deleting staff login accounts as necessary to keep employee access current and in compliance with all NC Cardinal policies.

• Staff user login accounts are to be used only for access to Evergreen and work related activities, not to circulate materials or any other personal use.

Passed by the Governance Committee April 2017 

Staff Login Account Password Requirements

Cardinal staff login account users will be required to change their password every 90 days. Staff will be emailed a reminder to change their password two weeks before their account expires. Staff accounts will need to have an email address listed on their login account for this notification purpose. If passwords are not changed by the end of the 90 days, the staff member will be prompted to provide a new password before logging in. Staff will not be able to log in to the staff client until they’ve updated their password.

Login Account Password Strength Requirements

Patron Account Login Password Requirements

• Requirement: At least four characters.
• Maximum Password Age: None
• Force Reset at Maximum Age: no
• Permission Groups: All Patrons

General Staff Login Account Password Requirements 

• Requirement: Upper case letter, lower case letter, numeric character, and at least 8 characters.
• Maximum Password Age: 90 days
• Force Reset at Maximum Age: yes
• Permission Groups: Circulator, Circulation Lead, Item Cataloger, Bib Cataloger, Volunteers, Data Review

Administrator Login Account Password Requirements 

• Requirement: Upper case letter, lower case letter, numeric character, special character and at least 8 characters
• Maximum Password Age: 90 days
• Force Reset at Maximum Age: yes
• Permission Groups: Branch Administrator, System Administrator, Global Administrator 

Passed by Governance Committee 10/2/24

Staff Code of Ethics

Patron Privacy Policy

Statewide North Carolina Information Security Policies