Description
When a user has access to M&U their DPAS account cannot be deleted until the M&U access is removed. Additionally, if the user is assigned as an Operator/Technician the M&U account cannot be removed until the Operator/Technician assignment is removed.
DIACAP control IAAAC 1-4 - Ensure that user IDs are removed and passwords disabled within 48 hours of notification that a user no longer requires system/network access.
When working with the site to remove the Operator/Technician access this may make the 48 requirement impossible.
Recommended
Requesting when an application Security Officer deletes a user account that it removes the access from M&U and the Operator/Technician areas of the application.
Mission Critical
DIACAP control IAAAC 1-4 states “Ensure that user IDs are removed and passwords disabled within 48 hours of notification that a user no longer requires system/network access.”
When working with the site to remove the Operator/Technician access this may make the 48 requirement impossible. USAF currently has 66 Maintenance Activities. All users at the HQ level have access to all the Maintenance Activities. When a deleted is requested this is going to take a lot of time. If the account could be deleted without the existing requirements it could be done in seconds.
Benefits
Ensure we are in compliance with the regulation to delete the user within the 48 hour timeframe. It would be a time saver for the Account Management team.
Users
Use would be limited to the agency requesting the deletion.
Disclaimer | Accessibility