Note:

The PIV Card PIN will need to be entered again at any time the workstation is on and there has been no activity for seven minutes.

Once the system is booted up and the initial PIV Card PIN is input, the user must "LOGON" through a security package. LOGON requires input of a valid user ID and PassTicket to sign on to the RRACS LAN on the file server.

Another level of security is provided using the RRACS User Profile Table, which contains RRACS End-User Names and RRACS Mainframe UserIDs. This User Profile Table implements RRACS business rules to control how certain application windows function based on user access level as approved in the BEARS systems. As applied to the RRACS system, it allows one of the following four operational levels (profiles/user accounts) to be assigned to each RRACS user: 1. Database Administrator (DBA); 2. Technician (TECH) 3. Reporting Read Only (CRPT) or 4. Read only (READ).

A specific display screen is authorized for CFO HQ/Revenue Reporting Section and Service Centers Section. Only the authorized RRACS Client windows are available for each operational level.

Each RRACS user must have an accepted user account, which defines the user's profile, along with unique user identification (User ID).

Invalid user IDs and PassTicket will not be recognized by the system and access will be denied.

User accounts and profiles can only be authorized by management in each service center.

Only the DBA group has access to the DBA journal. The only windows available for selection on the RRACS Application Main Menu are the RRACS modules, and a toolbar options for Login and Exit.

REMEMBER: RRACS executable are not stored on the workstation. They are brought into the memory on the workstation from the LAN when the user selects the appropriate icon.

To run the RRACS server part of the RRACS client-server system, the users must LOGON to the mainframe at MCC/MBI2 with their PIV Card PIN and the system allows them to contact RACF at the mainframe. RACF permits users to begin certain RRACS server executable based on the User ID group to which they are assigned.