POL

STATE 122290.txt
R250025ZJUN02
FM SECSTATE WASHDC
TO ALL DIPLOMATIC AND CONSULAR POSTS
SPECIAL EMBASSY PROGRAM
DUSHANBE POUCH
KABUL POUCH
KHARTOUM POUCH O o^
OJ-U^^
UNCLAS STATE 122290

E.G. 12958: N/A

TAGS: CMGT, KCSY
SUBJECT: NEW REPORT TO MONITOR CONSULAR USER ACCOUNTS AND
ROLES NOW AVAILABLE IN THE CCD

REF: 01 STATE 174388

1. A new report to assist consular managers monitor

consular system user accounts and roles is now available
through the Consular Consolidated Database (CCD). The
report, called Post Users, can be found under the Admin
tab in the CCD. It is available only to Consular Officers
with a CST Admin role at post. Field users will only see
information concerning their own post. Using the report,
managers can easily ascertain what user ids and roles are
currently in an enabled status for the various consular
applications at post.

2. Information in the report is drawn from the Consular

Shared Tables (CST) application. As described in reftel,
consular managers are responsible for ensuring that users
and roles assigned in CST are appropriate and up to date.
This CCD report provides another useful tool in performing
this function. By specifying "yes" under the parameter
"user enabled" and leaving everything else at the default
value, managers can see a report for all users who are
currently enabled in the system along with all roles
assigned to those users and whether those roles are
currently enabled or not. The report also provides
information on the expiration date of the password in use
by the user, the date the password was last changed, and
the user id of the user with a CST Admin role who enabled
the account.
 STATE 122290.txt
3. As emphasized in reftel, consular managers should
regularly review users and roles assigned in their
consular systems (at least semiannually). User roles
should be appropriate to the function of the user. User
IDs should be clearly identifiable with the user (standard
format is to use last name followed by initials of first
and middle names). Consular staff who change functions or
depart post should have their accounts disabled or
modified as appropriate. Department has noticed that at
some posts some accounts are left in an enabled status
long past the expiration of the user's password. Although
the expiration of the password indicates the accounts are
no longer being used, these accounts should be disabled.
No generic accounts should be set up (parser and sentinel
accounts are exceptions).

4. After viewing the report in the CCD, consular managers

will need to go into the CST application to make any
necessary changes. Directions for maintenance of CST
users and roles are available from the CST Users Manual,
which can be found on the CA intranet at the following
link:

http://10.18.160.34/CMWebData/AppDocs/CST/User-s%20Manual/
7ADMIN.DOC

For any questions about use of the CST or the CCD report,
please contact the support desk (supportdesk, ca on the e-
mail global address directory).

5. Minimize considered.
POWELL

Page 2