Features
Affiliates are automatically provisioned with the following IT services.
Basic Services
- IdentiKey
- CU Boulder email (50GB)
- Employee portal (MyCUInfo/CU Resources)*
- VPN service
Microsoft 365 Services
Google Services
*Sponsored affiliates are typically not entitled to portal access.
Who Can Get It
Campus affiliates with the following Human Resources classifications are eligible for these services:
- Unpaid faculty
- Recreational instructors
- People with a POI Type C designation
- Certain types of sponsored affiliates
How to Get It
OIT automatically provisions affiliates with these services approximately one business day after their IdentiKey is created.
If you already have an IdentiKey from a previous role but not a CU Boulder email account, your supervisor will need to request a new primary mailbox for you.
What to Expect If Your Eligibility Changes
OIT will adjust your access to IT services when your primary role changes or your eligibility is reevaluated based on a previous role change or an OIT policy change.
If the adjustment will result in a loss of services, you'll receive an automated email notifying you of the change and providing a grace period.
Changes to Your Primary Role
If your primary role changes in a way that affects your eligibility for IT services, OIT will automatically adjust your access to align with your new eligibility.
If you enroll in CU Boulder classes
If your enrollment status qualifies you for student-level services, your eligibility will change as follows:
| Original Role | New Role | Services Gained | Services Adjusted |
|---|---|---|---|
| Affiliate | Student | Buff Portal, Microsoft 365 desktop apps | CU Boulder email storage increased to 100GB, Microsoft OneDrive storage increased to 5TB |
To learn more, see Accounts & Eligibility - Students.
If you move to an employee position
If your role changes to an employee position, your eligibility will change as follows:
| Original Role | New Role | Services Gained | Services Adjusted |
|---|---|---|---|
| Affiliate | Employee | Microsoft 365 desktop apps, Microsoft Teams Calls, phone extension (upon request) | CU Boulder email storage increased to 100GB, Microsoft OneDrive storage increased to 5TB |
To learn more, see Accounts & Eligibility - Employees.
If your current employment or affiliation ends but you're a CU Boulder alum
If you graduated on or before Jan. 14, 2026, you will no longer be eligible for any campus-provided IT services. To learn more, see Accounts & Eligibility - Former Employees & Affiliates.
If you graduated after Jan. 14, 2026, you will have three months to save any important files from your CU Boulder Google and Microsoft accounts before your IT access changes to temporary alumni services:
| Original Role | Temporary Role | Services Retained | Services Discontinued |
|---|---|---|---|
| Affiliate | Alumni | IdentiKey, CU Boulder email (50GB), Buff Portal | Microsoft 365 Online, Microsoft OneDrive, Google Workspace, Google Drive, employee portal, VPN service |
After one year, you will lose access to your CU Boulder email account, as well. To learn more, see Accounts & Eligibility - Alumni.
If your employment or affiliation ends and you have no other campus role
You will no longer be eligible for any campus-provided IT services.
| Original Role | New Role | Services Retained | Services Discontinued |
|---|---|---|---|
| Affiliate | Former Affiliate | IdentiKey | CU Boulder email, employee portal, Microsoft 365 Online, Microsoft OneDrive, Google Workspace, Google Drive, VPN service |
To learn more, see Accounts & Eligibility - Former Employees & Affiliates.
If you retire from CU Boulder
When you retire from CU Boulder, you'll have approximately 90 days to save any important files before your IT access is downgraded to email-only services.
| Original Role | New Role | Services Retained | Services Discontinued |
|---|---|---|---|
| Affiliate | Retiree | IdentiKey, CU Boulder email (50GB), employee portal* | Microsoft 365 Online, Microsoft OneDrive, Google Workspace, Google Drive, VPN service |
*Retirees who select their annual benefits through CU's open enrollment process will retain access to the employee portal as long as their IdentiKey credentials remain active.
To learn more, see Accounts & Eligibility - Retirees.
Reevaluations of Your Eligibility
If OIT reevaluates your eligibility for IT services, you'll receive an email indicating that your Microsoft license is being adjusted from one role-based license to another.
This reevaluation may be due to a previous role change that OIT didn't fully address at the time or to recent changes to OIT's eligibility policies.
If you're changing to a retiree license
If the email from OIT states that your Microsoft license is changing to a retiree license, then you can expect your access to IT services to change as follows:
| Original License | New License | Services Retained | Services Discontinued |
|---|---|---|---|
| Affiliate | Retiree | IdentiKey, CU Boulder email (50GB), employee portal* | Microsoft 365 Online, Microsoft OneDrive, Google Workspace, Google Drive, VPN service |
*Retirees who select their annual benefits through CU's open enrollment process will retain access to the employee portal as long as their IdentiKey credentials remain active.
To learn more about retiree eligibility, see Accounts & Eligibility - Retirees.
If you're changing to a temporary alumni license
If the email from OIT states that your Microsoft license is changing to a temporary alumni license, then you can expect your access to IT services to change as follows:
| Original License | Temporary License | Services Retained | Services Discontinued |
|---|---|---|---|
| Affiliate | Alumni | IdentiKey, CU Boulder email (50GB), Buff Portal | Employee portal, Microsoft 365 Online, Microsoft OneDrive, Google Workspace, Google Drive, VPN service |
After one year, you will lose access to your CU Boulder email account, as well. To learn more, see Accounts & Eligibility - Alumni.
If you're not currently eligible for a Microsoft license
If the email from OIT states that you're not currently eligible for Microsoft services, then you can expect to lose access to all other IT services as well.
| Original License | New License | Services Retained | Services Discontinued |
|---|---|---|---|
| Affiliate | None | IdentiKey | CU Boulder email, employee portal, Microsoft 365 Online, Microsoft OneDrive, Google Workspace, Google Drive, VPN service |
To learn more, see Accounts & Eligibility - Former Employees & Affiliates.
What to Do Before You Lose Access
During your final weeks of employment, complete the recommended digital offboarding tasks for departing employees and affiliates linked below.
These steps will help you preserve important OneDrive data and email messages; transfer ownership of shared documents, calendars and accounts; update your login, MFA and account recovery email for external services; and close out your CU Boulder email account.
