Acceptable Use Policy

1. Purpose

This Acceptable Use Policy establishes the requirements for using the Ahobilam Temple ERP System ("ERP System") in a secure, responsible, and authorized manner.

The ERP System is provided for legitimate institutional and operational activities of Sri Ahobila Narasimha Swamy Devasthanam.

2. Authorized Users

Access to the ERP System is limited to users who have been authorized by the appropriate institutional administrator.

Users may access only the functions, information, and modules permitted by their assigned account and role.

3. Account Responsibilities

Each user is responsible for protecting the account assigned to them.

• Keep your username and password confidential.
• Do not share your password with another person.
• Do not allow another person to use your authenticated ERP session.
• Log out when finished using the system.
• Report suspected account compromise immediately.

4. Permitted Use

The ERP System may be used for legitimate institutional activities, including where authorized:

• Personnel and attendance administration.
• Seva and booking administration.
• Accounting and cash transaction management.
• Inventory and stock management.
• Asset and land record management.
• Jewellery and valuables records.
• Vehicle records.
• Surveillance-related administration.
• User and access management.
• Authorized reporting and auditing.

5. Prohibited Activities

Users must not use the ERP System to perform activities that are unauthorized, unlawful, malicious, disruptive, or inconsistent with their institutional responsibilities.

• Attempting to bypass authentication, authorization, or security controls.
• Attempting to access another user's account.
• Guessing, obtaining, or using another person's password.
• Creating unauthorized accounts.
• Sharing ERP credentials.
• Accessing confidential records without authorization.
• Changing, deleting, or manipulating records without appropriate permission.
• Falsifying institutional records.
• Downloading or copying confidential information for unauthorized purposes.
• Introducing malware, malicious scripts, harmful files, or other malicious content.
• Attempting to disrupt, overload, disable, or damage the ERP System.
• Attempting to interfere with another user's access to the system.
• Using automated tools to access or extract ERP information without authorization.
• Attempting to discover or exploit vulnerabilities without authorization.
• Using ERP information for unauthorized personal, commercial, or external purposes.

6. Confidential Information

Users may have access to confidential, personal, financial, personnel, inventory, security, or other institutionally sensitive information.

Such information must only be accessed, processed, copied, transmitted, or disclosed when necessary for the user's authorized responsibilities.

7. Personal Data

Users must handle personal information responsibly and only for legitimate institutional purposes.

Personal information must not be copied, exported, photographed, transmitted, or shared outside authorized channels without appropriate permission.

8. Password Requirements

Users must use appropriate passwords and follow password requirements established by the ERP System or administrator.

• Do not use easily guessable passwords.
• Do not share passwords.
• Do not intentionally store passwords where unauthorized persons can obtain them.
• Change a password when instructed or when compromise is suspected.

9. Devices and Workstations

Users accessing the ERP System are responsible for using reasonably secure devices and workstations.

• Keep operating systems and browsers reasonably updated.
• Avoid saving ERP passwords on shared computers.
• Lock or log out of the workstation when leaving it unattended.
• Do not install unauthorized software for the purpose of accessing ERP information.

10. Network and System Security

Users must not attempt to interfere with the security, availability, or performance of the ERP infrastructure.

This includes unauthorized scanning, exploitation, denial-of-service activity, credential attacks, privilege escalation, malicious automation, or other activities intended to compromise the system.

11. Data Accuracy and Integrity

Users must take reasonable care when creating, updating, approving, or deleting ERP records.

Users must not knowingly enter false, misleading, fraudulent, or unauthorized information into institutional records.

12. Location and Technical Information

Where enabled by the ERP System, technical information such as IP addresses, session information, and authorized location information may be processed for security, operational, attendance, auditing, or other legitimate institutional purposes.

Users must not attempt to manipulate or falsify technical or location information for the purpose of bypassing institutional controls.

13. Exporting and Sharing Data

ERP data must not be exported, downloaded, emailed, copied, or transferred outside authorized institutional channels unless the user has appropriate permission.

Special care must be taken with personal, financial, personnel, security, and other confidential information.

14. Use of Automated Tools

Scripts, bots, automated requests, data extraction tools, browser automation, or other automated mechanisms must not be used against the ERP System unless specifically authorized.

15. Security Testing

Security testing, vulnerability scanning, penetration testing, or similar activities may only be performed with explicit authorization from the appropriate system administrator.

16. Reporting Security Incidents

Users should promptly report suspected security incidents, including:

• Stolen or compromised credentials.
• Unauthorized account access.
• Accidental disclosure of confidential data.
• Suspicious login activity.
• Unexpected changes to ERP records.
• Suspected malware or malicious activity.
• Suspected vulnerabilities or security weaknesses.

17. Monitoring and Logging

The ERP System may maintain security and operational logs to support authentication, troubleshooting, auditing, incident response, and system security.

Users should not attempt to disable, alter, delete, or circumvent authorized system logging mechanisms.

18. Administrator Responsibilities

Authorized administrators are responsible for assigning appropriate permissions and managing ERP access according to institutional requirements.

Administrative access should be used only for legitimate operational, support, security, and management purposes.

19. Consequences of Misuse

Violation of this Acceptable Use Policy may result in appropriate action, which may include:

• Warning or instruction.
• Temporary suspension of an account.
• Permanent removal of access.
• Administrative investigation.
• Recovery or correction of affected records.
• Referral to appropriate institutional authorities.
• Referral to appropriate legal authorities where required or appropriate.

20. Relationship With Other Policies

This policy should be read together with the ERP Terms of Use, Privacy Policy, Security Policy, and other applicable institutional policies.

Terms of Use  |  Privacy Policy  |  Security Policy

21. Changes to This Policy

This Acceptable Use Policy may be updated when system functionality, security requirements, institutional procedures, or operational requirements change.

22. Contact

Questions regarding acceptable use of the ERP System should be directed to the appropriate authorized administrator of Sri Ahobila Narasimha Swamy Devasthanam.