The management messages only provides access to the message that applies to that particular user instead of providing informational access to all users assigned to that UIC. Recommended solution: Recommend the Management Messages be accessible to all users with UIC access and above (APO/PA) to be able to view those messages which pertain to that Accountable UIC/UIC. This will also allow access for the managers for that Accountable activity to ensure the job is being accomplished in a timely manner. Customer priority: 1

Change Requested:Federal Information Security Management Act (FISMA) Control AS-2.4.2 states "Owners periodically review access to ensure continued appropriateness." Our Account Management procedures state the Information Owners need to review user access biannually to ensure the access granted is appropriate. We are requesting inquiries or reports be developed so the DPAS Information Owners can review the access assigned to their users.Recommended Solution:Develop an inquiry to show the following information:User Id, Full Name, Email Address, Active, Last Login Date, Expiration date, Is Suspended, Is Expired, Established By, Established By Dt/Time, Last Updated By, Logistics Program, Region, Site, Warehouse, every role assigned for each Warehouse, Training Completion Date for each role and every Commodity Type for each Warehouse.If the user?s access is driven at the level (Logistics Program, Region, Site & Warehouse) where the roles are assigned, then we will need a way to reflect that information as well. For example, on the PA side this is the user?s Level of Access. On the Warehouse side it seems the user?s access varies depending on what level the roles are assigned to the user?s account.We will be developing a new role called Admin Reports. This role will not have any training associated with it. This report needs to be available to Security Officers and to anyone who is assigned the Admin Reports role.Joe Stossel comment, 2/24/2015 - Is this the same as SCR 603??

LPSEN15 - User Account Review / Form Attachment, LPSEN16 - Security Officer Review / Update Send email to security team when form is successfully uploaded by the user.? Email should state the user name, edipi (when applicable), User Id, Date form was uploaded, the date the user's IA is up for renewal, plus anything else is determined to be needed during the design walkthrough, etc. - do we provide the user with a date field to denote when the?training was completed?? if yes, then we could use this date to populated screen for the?Security Officer to accept and update DPAS w/o having to search the hard copy and extract it. Screen should display image in a box on the right hand side of the screen for the Security Officer to view and validate that the person successfully completed the required training when they say they did.

LPSEN13 - Functional Data Owner (FDO) Assignment / Review (support for PA, M&U and Warehousing, LPSEN14 - FDO Attestation, LPSEB09 - FDO Attestation Mesaging (initial notification, followup notification, etc) , LPSER14 - FDO Attestation Report

MDA requests the ability to load assets via the flat file process without DPAS Columbus Support team involvement. The time it takes to submit, correct and re-submit spreadsheets for a data load/conversion takes longer than MDA would like with the current process. Agency independence and convenience is less than optimal. Recommended solution:?Please build a DPAS program with all the current checks and balances in place, allowing an agency the ability to process flat files. ?Adapt the current File Upload process in the Property Accountability module of DPAS to include the ability to upload assets conversion spreadsheets. Customize a upload template to receive asset fields, include the appropriate validations, and a method to see and correct any errors in loading the data. Customer priority: 3

Description
Give the DPAS user the capability to reset their DPAS account.

Recommended
When the user tries to login to DPAS and their account is inactive they would receive one of the following scenarios:
#1 – User account is inactive due to inactivity – PIN required for reset (safest & strongest) A screen displays saying “The user account you are trying to access is Inactive due to inactivity. Do you need a PIN to reset your account? Yes or No” If Yes is selected – A message appears that says “An email has been sent to the predetermined email address on file. Please check the email and follow the instructions provided. The email to the user could read: DPAS has received a request to reset your DPAS account. Please return to (insert DPAS URL) and enter the following PIN. If you did not request an account reset, please forward this email and your contact information to This email address is being protected from spambots. You need JavaScript enabled to view it. for DPAS Account Management to investigate.
NOTE: DPAS would need to randomly generate a 10 character PIN. The PIN must contain at least two of each of the following: upper case letters, lower case letters, numbers, and special characters. Once the user completes the determined requirement, the DPAS account is activated and the user is logged into their account. If No is selected, the user is logged out of the website. If the user enters an incorrect PIN three times, the account would be locked. The users email on file and This email address is being protected from spambots. You need JavaScript enabled to view it. would be notified that the account is locked and Account Management must be contacted for a reset. The unsuccessful PIN attempts would need to be captured on the Failed Logins Report.
#2 – User account is inactive due to expiration of IA training date A screen displays saying “The user account you are trying to access is Inactive due to the annually required IA training being expired. Please provide a new IA training artifact. Once the artifact is uploaded it may take up to 3 business days for the artifact to be validated and your DPAS account to be reset.”
#3 – User account in inactive due to a manual change of status by DPAS Account Management A screen displays saying “The user account you are trying to access is Inactive. Please contact the DPAS Account Management at This email address is being protected from spambots. You need JavaScript enabled to view it. for further information.”

Mission Critical
Mr. Stossel is interested in this feature to phase out the need for the user to contact the Columbus Call Center for a reset.

Benefits
The new process would allow the user to reset their account when needed and reduce the workload on the Columbus Call Center. Currently the process is as follows:

1. The user has to contact the CCC.
2. A Remedy ticket must be created and assigned to the DPAS Account Management.
3. The user’s account must be reset by Account Management.
4. Account Management updates and closes the Remedy ticket.
5. Account Management must email the user with login information.

Challenges:
1. If the account is reset and the user does not log in by the time the stored procedure for the ageing process runs, the account has to be placed back to Inactive status and the process starts all over again. This is extremely difficult for users in Japan. Typically Account Management has to delete the account and rebuild it so the user can login.
2. Account resets are completed Monday-Friday excluding holidays from 0630-1500. Often times it takes a few days for a user in different time zones to complete the reset process.

Users
Use would not be limited to specific users; it could be used by users who are inactive in all agencies

Description
This change is being requested for the DPAS Warehouse. In accordance with FISMA control IAAC-1. We need the ability to see inactive/cancelled user accounts.

Recommended
On the PA side this report is automatically generated overnight. The fields include: User Name, User Id, Estbd Dt, Last Login Dt, Last Site Accessed (this will need changed to Last Warehouse Accessed), Email Address, Phone Nbr & History Remarks. When the user is inactivated or cancelled the History Remarks on the user record is updated with the appropriate action completed. For example Inactivated 30-44 days Inactive; email sent to user. A report from the Property Accountability side is being included with the SCR.
We will be developing a new role called Admin Reports. This role will not have any training associated with it. This report needs to be available to Security Officers and to anyone who is assigned the Admin Reports role.

Mission Critical
This is required to be in compliance with the control.

Benefits
The ability to take the item off of the POA&M.

Users
No, this will only be used by the DPAS Account Management and anyone assigned to the Admin role.

SCR is duplicate of 00505

Description
Due to the Navy's Capitalization threshold change, effective 01 October 2013, the Navy requires a new process to identify and run reports for Capital Assets which meet the new threshold ($1M). ?The Acquisition Date and the Activation Date are not on the Search Criteria under Asset Management/Asset/Inquiry module AND there is no option to filter by "to and from" values for Total Cost field.

Recommended
Add the Acquisition Date and Activation Date to the Search Criteria under Asset Management/Asset/Inquiry module AND add the option to filter by "from and to" values on the Total Cost field.

Mission Critical
Yes. Due to the large number of Capital Assets in DPAS for Navy activities, we require an inquiry to identify capital assets in support of the new OUSD memo dated 20 Sep 13 that increased the capitalization threshold for GPP&E. This SCR is in direct support of Navy FIAR efforts.

Benefits
Will enable the Navy to identify capital assets to meet the new DOD threshold changes.

Users
Just Navy users.

Customer priority: 1

Joe Stossel comment, 2/24/2015 -
Same as SCR 00585

Completed - Release 4.0 - 29 April 2016

Standard Users cannot initiate or run accounting reports such as Capital Asset Trial Balance and CFO Accounting Statement Reports for their own accountable UIC. Recommended solution:?Have "Agency Reports and Forms" generation available to Navy Standard Users with Site ID and UIC access. Customer priority: 2

Description
The current process is a two or three step process.
Select the Browse button, enter criteria, select the Search button.

Recommended
The user can skip entering criteria and simply select the Search button.
Can the process eliminate the Browse button altogether and replace it with a list box of available Custodian Numbers or eliminate the need to enter criteria or hit the Search button and simply display all available Custodian Numbers immediately.

Mission Critical

Benefits
Creates a more efficient process for the users to select the Custodian Number.

Users

Completed - Release 4.0 - 29 April 2016