1 / 34

Information Coordinator Data Custodian Meeting of 05/17/06

Information Coordinator Data Custodian Meeting of 05/17/06. IS Security Team. The members of the team are: Myra Daly, Peter Giovinazzo, Mimi Mark, and Lorraine Sauro. The IS Director is Erik Anderson. The new manager is to be announced. Contact us by one of the following methods:

robbin
Download Presentation

Information Coordinator Data Custodian Meeting of 05/17/06

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Information CoordinatorData Custodian Meeting of 05/17/06

  2. IS Security Team • The members of the team are: Myra Daly, Peter Giovinazzo, Mimi Mark, and Lorraine Sauro. • The IS Director is Erik Anderson. • The new manager is to be announced. • Contact us by one of the following methods: • Sending an email to issecsd@syr.edu • Creating a Service Desk Request and assigning the group to is security • Submitting your question or problem on this web page http://its.syr.edu/admin-sys/fast/form.cfm

  3. AGENDA • HOST REGISTRATION • BUSINESS LAYERS • SSO FAST ENHANCEMENTS • FAQ • PREVIEW OF THE IS SECURITY WEB SITE • QUESTIONS • FUTURE MEETING TOPICS

  4. HOST REGISTRATION REQUEST

  5. BUSINESS LAYERS REQUEST

  6. FAST ENHANCEMENTS • PHONE NUMBERS • SSO USER LOCKS AND USER CONNECTON LOCKS • FAB REQUEST MODIFICATIONS • DRAFT STATUS FOR FAB REQUESTS

  7. PHONE NUMBERS IN FAST The telephone # is now included for all FAST users under the email address. 

  8. FAST uses Peoplesoft Business Phone #s. The accuracy is dependent on the employees updating their Phone numbers through the MySlice Personal Services Pagelet below:

  9. Once an employee selects the View/Update Phone Numbers link, the screen below will appear and it is the employee’s responsibility to update the Business Phone number.

  10. SSO User Account Maintenance - Update and Inquiry

  11. Requests Detail - For Requester

  12. Requests Detail - Approver

  13. When you click on the Approver button in the Tool Bar the Approver pop up box now lists the telephone # of the Data Custodian in the  Requests Detail - For Requester & Approver screens.

  14. USER LOCKS • Locked accounts and connections have proved to be problematic. The following enhancements will prevent requesting and approving access if the users are locked. • The overnight provisioning process reads FAST to verify a user’s status for system access the next day. If the user’s account is locked or if the requested connection is locked the user will not have access to some or all of the MySlice links (ex. HRSA, FAB, MyReports)   

  15. When an Information Coordinator starts to add a request, if the user's SSO accountis locked, a pop up message will appear with instructions to unlock the account and start a new request.

  16. The table in the next slide is taken from Service Desk Knowledge document # 2409. This table is used by the ITS Call Center to handle locked SSO Accounts inquiries. You can use the information to determine when you can unlock user accounts.NOTE: IS Security can lock or unlock for any reason.

  17. A Data Custodian will NOT be able to approve requests for users that have their SSO account locked. A pop up message will appear with instructions for the Data Custodian to contact the Information Coordinator to unlock the account. 

  18. A Data Custodian will NOT be able to approve a request if the user's connection is locked. A pop up message will appear with instructions to unlock the connection. NOTE: If the account and connection are both locked you will receive both pop up messages.

  19. INITIATING A FAB REQUEST

  20. Sometimes instead of entering a login ID for the user, an IC may want to add a request by selecting from the list on the left

  21. We have now corrected the problem that occurred with adding FAB requests when the highlighted request in the list was for the same user and the same connection

  22. REMINDER • An IC cannot add a Prod FAB Request if one currently exists for the same user and same connection in "Request", "Draft", or "Pending" status. The pop up message appears on the next slide. • The IC must either wait for the first request to be completed by the DC and then the IC can enter a new request. • Or if the conflicting request is in "Request" status, then that request can be removed by clicking on the "Delete" button in the Tool Bar and then creating a new request that contains the needed information.

  23. DRAFT STATUS FOR FAB REQUESTS • The option of using DRAFT status for Prod FAB connections (ex. PROD PS8.8 FAB Campus USE, PROD PS8.8 FAB Budget Worksheet) is now available. • Draft status has always been available for non FAB FAST requests.   • New FAST Requests are not set to Draft status automatically, but Draft status can be used if desired.

  24. ADDING A FAB REQUEST IN DRAFT STATUS • To create a new FAST Request in DRAFT status click on the "Add" button, enter the Login Id and select the Connection from the drop down list. Then before entering any information on page 2, change the status from the default of "Request" to "Draft". • As with any FAST Request in DRAFT status, information may be entered on page 2 into the "Request Information" area and/or the "Requester Comment" area. • For Prod FAB, if the request is in Draft status the IC will not be able to select the addition ("A") or removal ("R") of FAB privileges.

  25. You can enter information into this area You can not select privileges when in Draft Status You can enter information into this area

  26. CHANGING A FAB REQUEST FROM DRAFT TO REQUEST STATUS Information Coordinator steps to follow: • Select a Prod FAB Request that is in DRAFT status and change the status to "Request". • Before clicking the 'OK" button, select the addition ("A") or removal ("R") of FAB privileges. • Enter or remove information from the "Request Information" area and/or the "Requester Comment" area. • Click on the OK button. NOTE: The "A"s and "R"s cannot be changed after the "OK" button is clicked.

  27. TOP FREQUENTLY ASKED QUESTIONS Here are the top 4 frequently asked questions and their answers :

  28. How do I maintain access for people on Leave of Absence ? • IS Security will lock the SSO User only (we will no longer lock the connections). • IS Security will not send an email notification to the individual Data Custodian when we lock a SSO User for Leave of Absence   • The Information Coordinator can unlock the SSO User if and when needed. • To keep a person’s access unlocked, the Information Coordinator can email the request to:issecsd@syr.edu

  29. I am receiving a Failed to Launch Application message when clicking on the FAST button. What should I do ? Refer your DSPs to the Service Desk Knowledge document # 2674.  This document will walk them through the solution for this problem. Note: The document is available with the hand outs for this presentation.

  30. Why doesn’t the user have access when it is showing that it is approved ? • There is a 4:00 PM deadline for approved FAB access, to be processed, so the access may take another day if the deadline is not meet. • If the user’s SSO account or connection was locked they need to be unlocked. This will not be a problem after the previously mentioned enhancements are in place.

  31. Why has the user’s access been taken away ? • There is a Weekly Clean Up report run by the Security team on Mondays for people that have Left SU, Changed Department, or on Leave of Absence. • If users are on this report, their access is reviewed and deleted or locked depending on the Employee Status. • The SSO account is locked for a week for people that have Left SU. This gives the IC some leeway if there was a paperwork snafu because we can just unlock the account and the access will be reinstated the next day.

  32. PREVIEW OF THE NEW IS SECURITY WEB SITE QUESTIONS ? FUTURE MEETING TOPICS Guest Data Custodians What do you want to see for future topics

More Related