Mississippi Management and Reporting System

Transcription

1 Mississippi Management and Reporting System Department of Finance and Administration 2004 SAAS Security Profile Maintenance Form Procedures MMRS Policies and Procedures Revision Date: 01/26/2012 Version:5

2 Table of Contents 1. Introduction Scope SAAS Security Overview SAAS Security Administration Instructions for Completing #2003 SAAS Security Profile Maintenance Form... 4 Page: 2 of 5

3 1. Introduction The Department of Finance and Administration, Office of Mississippi Management and Reporting System (MMRS) maintains the security for the Statewide Automated Accounting System (SAAS). This document outlines the procedures for completing #2003 SAAS Security Profile Maintenance Form. 2. Scope This document gives an overview of SAAS security and administration and provides instructions for completing #2003 SAAS Security Profile Maintenance Form. Information located on the MMRS website is referenced, when applicable, as additional help in completing the security form. The information in this document is to be used by the designated authorized SAAS security contact in each agency when completing the SAAS Security Profile Maintenance Form. 3. SAAS Security Overview The security module is comprised of a series of tables. These tables contain all valid User IDs and access information, for a user's security profile. A security profile contains all of the information regarding the user's access to tables, documents, and/or predefined groups of tables, documents, and processes as well as which agency or agencies the user can access information for. 4. SAAS Security Administration The MMRS Chief Systems Information Officer (CSIO), or designee, serves as the SAAS Security Administrator. The Security Administrator handles all SAAS security requests. All SAAS security requests must be submitted on the appropriate form and approved by the MMRS CSIO, or designee, before any action will be taken to process the request. Copies of all security maintenance requests are kept on file at MMRS. The SAAS Security Profile Maintenance Form should be faxed to the MMRS CSIO at (601) or ed to MASH@dfa.ms.gov or mailed/handmail ed to: MMRS Chief Systems Information Officer Department of Finance and Administration 210 East Capitol St., 1400 Regions Plaza Jackson, MS When a SAAS User ID is created, an containing the new User ID will be sent via the MASH Helpdesk to the SAAS Security Contact and copied to the user. A separate containing a link to the SAAS login instructions, #2001 SAAS Front End Security, will be sent to the user the following day. The agency s SAAS Security Contact will be notified via when requested changes and deletions have been processed. Page: 3 of 5

4 Individual SAAS users may call the MMRS Call Center at to have his or her User ID enabled or password reset. However, if a user other than the agency's security contact calls requesting help with another User's ID, the request will be denied and the agency's primary security contact will be notified. 5. Instructions for Completing #2003 SAAS Security Profile Maintenance Form Complete one form per user. Each blank on the form is identified as Required or Optional. The form should be completed to show the capabilities a user should have when the request has been processed. For example, if a user currently has SCAN capability only and they need to have ENTER capability also, the request should have the 'Y' marked for both SCAN and ENTER. Maintenance Action Required Circle the appropriate action to be performed. Only one action can be requested per form. If Add New User or Delete User ID is specified, information in the **Update or Delete Only** block must be completed. See below. If a user is to be deleted, indicate the date the deletion should be effective in the space provided. If no date is given, the deletion request will be processed upon receipt. User Name: Required Enter the user s name. User Phone: Required Enter the user s phone number. User Address: Required Enter the user s address. Agency Name: Required The name of the user s agency. The middle section of the form is where specific security access is requested. The top part of this section briefly describes each of the processing capabilities available for each security group/document/table identified under Security Group. Circle 'Y' if the capability is requested, or 'N' if not requested for the SCAN through OVERRIDE options. Note: This section may be omitted if the requested action is to delete a user s security access. Add, Change, Delete Required if a Maintenance Action of Update Profile is requested. Coding an A, C, or D in this box for each security group listed will clarify what is to be done with that security group as it relates to the existing user profile. (If updating the user's profile requires a change to a security group or document or table, circle all of the capabilities desired for SCAN through OVERRIDE.) Security Group(s) Required Security groups are the basis for defining a user's access. The MMRS document #2002 SAAS Security Information Report by Security Group lists the existing security groups and the documents and/or tables within each group. This report is located on the MMRS web site at: > Security > SAAS. Tables and Documents can be identified independently or one of the security group names can be used. SCAN Required Permits the user to review documents or table entries in the system without modifying them. ENTER Required Permits the user to enter (add) new documents or table records. CORRECT Required Permits the user to correct (modify) table entries and existing documents in the suspense file. Page: 4 of 5

5 DELETE Required Permits the user to delete table entries and documents not yet accepted for processing. SCHD Required Permits the user to request overnight processing for a document or batch of documents. EDIT Required Permits the user to check a document for errors without processing or updating the document. HOLD Required Permits the user to stop the processing of document or batch until it is explicitly scheduled. RUN Required Permits the user to update documents on-line in background mode. This action is only allowed on documents for which the agency has final approval authority or if override authority is requested for the user. OVERRIDE Required Permits the user to override certain system errors (Error Message Codes ending in an "O"). Run authority must be requested in conjunction with override. Approvals Optional Provides the authority to approve documents with up to as many levels as allowed for an agency. Refer to the Security Information Report for the levels of approval available to an agency for each document. Agency Code(s) Required Enter the SAAS agency code(s) the user should have access to for each item entered under Security Groups. If your agency processes financial data for the entire state, and the user needs to access data for all agencies, enter "all" for the agency code. Assigned User ID For MMRS use only. When a Maintenance Action of Add New User is requested, the user's new SAAS User ID is written in this block. Update or Delete Only Required if a Maintenance Action of Update Profile or Delete User ID is requested. The eight character SAAS User ID should be entered. Authorized SAAS Security Contact For MMRS Use Only Required Name, phone number, title and signature of the agency s authorized primary or backup SAAS Security Contact and the date form was signed. MMRS will record the date the form was received and processed, as well as who processed the form. Page: 5 of 5