Does mandate for users having unique IDs preclude use of secondary or group logins?
They key requirement here is for individual accountability, which of course can be weakened by the use of group logins. If a secondary login is required as part of established business process, you would be advised to investigate whether sufficient accountability is still offered. If this is in doubt, (for example where group logins are used) you should look at alternative means of enabling access to the required service that offers sufficient accountability.
