Accounts - Groups | Office of Information Technology

Accounts - Groups

Last Updated: 12/07/2015


Group accounts, also known as entity accounts, are usually used for generic email addresses, departments, clubs, and managing websites. The Identity Manager tool calls these accounts "secondary accounts."

Request a Secondary Account

  • An account must be sponsored by a faculty or a staff member currently affiliated with CU-Boulder. If the account is being requested for a student group, that group must be affiliated with SOFO. Requests for accounts can be made by calling the IT Service Center. Usernames can be specified, if the id is not currently in use. Requested user names can be up to 8 characters in length, but numbers, spaces and punctuation marks cannot be used.
  • An account is typically good for 2 years, after which is will expire. An email is sent to the account. It can then be renewed or deleted.


E-mail and Calendar Service

What is it:

  • An email address and a collaborative calendar service.

How to access it:

  • You'll use the secondary IdentiKey account to log in.
  • Depending on what the secondary account has access to you may use one of the following. Ask OIT.

Manage it:

CU-Boulder's Identity Manager allows you to set how your outgoing email address is displayed, create alternate addresses, and adjust where your email is delivered to.


What is it:

  • An IdentiKey consists of a CU Login Name and a unique password, and is used to authenticate to various computing services at CU-Boulder.
  • Secondary IdentiKey accounts do not have the same access privileges that primary user IdentiKeys do, like MyCUInfo.
  • In most instances, secondary IdentiKey accounts are only used to access departmental/club email accounts and website space.
  • Learn more about IdentiKey, including how to activate at the IdentiKey page.

Who owns it and activates it:

  • A secondary account is owned by a CU-Boulder faculty, staff, student, or affiliate.

Activate it:

  • To activate a secondary account, the primary account holder must log into Identity Manager with their own credentials.

Manage it:

  • Once the secondary account is activated, you can log in to Identity Manager directly with your secondary account CU Login Name and IdentiKey password to perform account adjustments.
Unix Server Secondary Accounts

What is it:

  • An account on an OIT unix server, like or
  • Uses the secondary account's CU Login Name and a unique password, which you choose. You can make this password the same as the secondary account's IdentiKey password.
  • Used primarily as an authentication method to manage departmental webpages on
  • Can be used as an email delivery destination, and has PINE, IMAP, and POP capabilities. However, it is not OIT's recommended solution for secondary accounts. Learn more about this option.

Manage it:

To change the secondary account's unix server password login via a SSH terminal application to the server and type the command passwd. Or contact the IT Service Center.