Version Release History

De-branding: application name changed to Personnel Authorization System (PAS); all references to Partners removed; Partners icon removed; PeC ID changed to DHeC ID
View Account Key (Key > Display Key) requires the viewer to select a reason why they are looking at the key. Options include defined reasons and entering a free-text reason.
New Admin Reports

Key Viewing Activity - history of looking at Key values by either the person being viewed or by the person doing the viewing or both options within the date range
System and SFA Admin Activity - history of people with access to the PAS System and SFA admin option actions
Both require PHSPAS - L access to view

Email Notifications for Authorization Updates - Keygivers and editors can setup email notifications based on system and SFA authorization events
MiniReg

Strip any leading/trailing spaces from entered name in account selection screen
Prevent any pure number being entered as an account’s first name - for example, Smith,2345 is not allowed

Updates to editing a PAS account using Partners Quick Registration (Mini-Reg)

When a disabled account is selected from the account lookup, the description section at the bottom is red and includes a note if the account is disabled.
If the account is merged, editing is not allowed. Users selecting a merged account for editing are notified that the account is merged, the account to which the selected account was merged, and that the selected account is in read-only mode.

The method used to retrieve the Partners password expiration date has been changed to accommodate changes to the Active Directory.
Trailing spaces are automatically removed from entries when searching for a system or SFA by name. (Trailing spaces are often entered unintentionally when users paste the name into the search criteria.)
The option to request a new system has been removed as obsolete.

BICS will not have new systems created.
To create a new system, submit a request through Service Now, assigned to the Client Support Services - phs group.

Keygiver training information under the Help menu has been updated.

PAS Keygiver training has moved to HealthStream and is managed by the Account Administration group.
The label has been changed from PAS Keygiving Support Site to How To Apply for Keygiver Training.
The links to KB0013211 use the ServiceNow permalink.
The PAS Keygiving Support Site is planned for shut down by the training team.

Retire System/SFA Tools (Systems Programming):

This function is restricted to PAS administration users and will not appear for normal PAS users.
Retire Systems and SFAs
View Retirement Batch Results
Validate Import File (Systems and SFAs)
Rollback Retirement Batch
View Rollback Retirement Results

PAS Batch View includes a new option to export results to a text file that can be imported to a spreadsheet.

The option to View Batch Results is under the Batch Tools menu, under Tools.
The new option to Export PAS Batch Accounts is included under the File menu.
When more than one system or SFA is included in a PAS Batch, users can select some or all to export.

Validate a batch authorization population file: Validate user data in a population text file or Excel spreadsheet before submitting a batch authorization job.
Issuing a Partners user key: When issuing a Partners key, if the selected account was merged into a different account, the issuer is notified of the correct account to issue the key for, and is not permitted to issue the key to the selected account.
Account List Report updates:

Report on multiple systems and/or SFAs in a single report
Define population of report with an imported text or Excel file
Define population of report by manually entering accounts
Export report results directly to a text file with a selected delimiter
Search criteria and report results displayed in separate views
Templates added for users to define the criteria for recurring reports, without having to reenter parameters manually each time they run the report

Account List Templates added:

Templates allow users to define the criteria for recurring reports, without having to reenter parameters manually each time they run the report. The user who creates a template is automatically assigned as its owner. The owner can add other users as owners. All owners can edit the parameters of the template, delete the template, and assign or remove owners.

Templates expire after one and a half years if not active in that time frame. The clock is reset whenever the template is used by any user to run a report, or edited, or copied to create another report. The template owner(s) are notified by email 30 days before a template is scheduled to expire; owners can renew a template to reset the expiration date. Templates are automatically deleted on the expiration date. Template deletions are permanent - deleted templates are not recoverable.

Templates are available for the Account List Report. All authorized users can run any existing template.

See also:

Creating a new template from scratch
Creating a template from the search criteria as you set up an Account List report
Editing an existing template
Copying existing as a new template
Renewing a template to reset the expiration date (template owner only)

PeCID (Epic ID) added to the following data displays:

Mini-Reg Find Account
Mini-Reg Create/Edit Select Account
PAS Main
Account List Report
Account Profile Information on the Account Information Report
Keygiver Search Report
Keygiver Activity Report

Associated Sites (sites that the account has connections to, including and in addition to the POL) added to the following data displays:

Mini-Reg Find Account
PAS Main
Account List Report
Account Profile Information on the Account Information Report
Keygiver Search Report
Keygiver Activity Report

Bug fixes:

PAS-AddIn on system level - Before the fix, when editing an authorization, if a system-level PAS-AddIn prevented authorization changes from being filed for an account, the PAS-AddIns were not reloaded when the user was returned to the Edit Account screen. Now, all applicable PAS-AddIns are reloaded.
The right-most column of the grid on the Rollback display was too wide, leaving inadequate space for the System and SFA columns. That column is now adjusted.

Find User Screen

Restrict viewing access to the 'PeopleSoft ID', 'Birthdate' and 'Maiden Name' fields to PAS users granted the PHSPAS - I access.
Added fields to display the Department and POL (Primary Office Location) of listed accounts.

Account List Report

Selects the 'Include Programmers' checkbox by default.
Added the 'Output Results' button and menu option: New function that allows the report results to be outputted to a text (*.txt) file.

Keygiver Search Report

Added the 'Output Results' button and menu option: New function that allows the report results to be outputted to a text (*.txt) file.

Keygiver Activity Report

Added the 'Output Results' button and menu option: New function that allows the report results to be outputted to a text (*.txt) file.
Date Range Updates: Maximum date range restricted to 1 year (365 days); Removed 'All Available Dates' checkbox.
Bug Fix: When the actions criteria was set to either 'Added Authorizations' or 'Removed Authorizations', the entries with the opposite action (added/removed) where still displayed. No authorizations were displayed in the record entry so it would appear to be blank. These inappropriate record entries have been prevented from showing now.

Piggyback Authorizations Report

Added the 'Output Results' button and menu option: New function that allows the report results to be outputted to a text (*.txt) file.

Issue Partners Key

Update when issuing a new Partners Key to an account that has a Partners Programmer Key.
Previously when a new Partners Key was issued to an account that had a Partners Programmer Key, a new Programmer Key would be issued by default. Now the PAS user will be prompted to choose to issue either a Partners User Key or a Partners Programmer Key.

Help menu

Removed the "Subscribe to the PAS Enterprise Change management" menu option. This option is obsolete. See this ServiceNow How To (KB0020606) for instructions on subscribing for change management notifications. Look up "PAS" under applications. (You must be signed in to ServiceNow to view this information.)
Online help updated to webHelp format from PDF

MAG (Multiple Authorization Groups)

Previously Galen only allowed the 'G' authorization character in PC systems to be linked to an Active Directory (AD) group. Galen now allows other authorization characters in PC systems to be linked to an AD group.
PAS does not setup the link between an authorization character and an AD group. A request must be made to the Network Services group to establish a link between an authorization character of a PC system and an AD group.
PAS will show a linked image next to any authorization characters linked to an AD group on the View Authorizations, Edit System Authorizations, Edit Extended System Authorizations, View System Properties and Edit System Properties screens.
Any authorization characters marked with a , will display the AD group it is linked to when the mouse hovers over the authorization character.
On the System Properties screen, system owners are allowed to edit, add or remove authorizations for the system. Any authorization characters marked with a is not allowed to be removed from the system until after the authorization character has the link to the AD group removed. To remove the link, the system owner must contact the Network Services group

Icon Legend: An Icon Legend screen has been added to the PAS. This screen lists the various images used within the PAS and gives a brief description of what the image means or used within the PAS.

Update to allow members of Network Services with the 'N' authorization in PHSPAS to modify the system properties for all systems.
A fix was made to the Issue Programmer Key option. Previously if you issued a Programmer Key to an account and then selected another non-programmer account, the Issue Programmer Key menu option would not re-enable. The menu option will now re-enable as it should.
An update was made for users with only the ability to create test accounts. When they create a test account in the Mini-Reg, the Account Type field has 'Test Account' defaulted into it and the Account Type field is disabled so it cannot be changed.

An update was made on the 'Edit SFA Authorizations' screen to the PAS SFA Admin checking code. This code now looks to the SFA Admin element in the logged in user's security object.

The PAS application was recompiled to solve a display issue on the Account List and Keygiver Activity report screens at lower resolutions. At a screen resolution of 1024 x 768 a portion of the right side of the screen was cutoff. A recompile of the PAS executable resolved the issue. No code changes were made.
Code was added to allow PAS to transfer system properties to the PreProd platform.

The "Request a New System" function has been updated to only allow BICS system creation requests. All other type of system requests will cause a message window to appear that will direct you to either the Computer Help Desk web site or the Forms web site.
An update was made to the Mini-Reg's lookup screen. Account names beginning with a comma will not be allowed.
- The following updates were made to the Mini-Reg's Edit screen.
- Last Name field: Having a comma or space in the first character or in the last character of the field will prevent the account updates from being filed
- First Name field: Having a comma or space in the of the field will prevent the account updates from being filed.
- An update was made to the Account List report screen to correct an issue with the System/SFA selection button expanding and covering the name of the selected system or SFA when the screen was maximized.
- An update was made to the Edit System Authorizations and Edit SFA Authorizations screens: Accounts that do not have the needed PAS authorization to access the PAS keygiver functions will be prevented from being granted keygiver rights to systems and SFAs. Without access to the PAS keygiver functions, being made a keygiver for a system or SFA can lead to confusion since the new 'keygiver' would not be able to perform any keygiver tasks in the PAS. To receive access to the PAS keygiver functions, you must take the PAS Keygiver Training class. Links to the class can be found on the PAS Keygiver Support Site.

The Submit New Batch Job menu option has several major enhancements regarding how the batch population is identified and targeted.

Population Identification Updates (additional methods added to populate the batch job.) The ability to load the Batch population from a file was added. The ability to manually enter a list of accounts as the population was added.
Target Updates: The PAS Batch option now enables the selection of multiple systems or SFAs for authorization adds, removes or replacements. Previously each batch could only target one system or SFA. Rules for multiple targets are as follows:

All target items must be of the same type. So either all items must be systems or they must all be SFAs.
All target items will have the same batch action taken. For example, to add authorizations to a target resource or to remove authorizations from another target resource, you will need to run a batch job for each action separately.

The View PAS Batch screens have been updated to reflect the changes made in the PAS Batch Submit
The Account List report had a 'Reset' button added to the screen. This button resets all the report's search criteria to their default settings. It also removes any data returned from a previous search.
The Keygiver Activity report includes the following updates.

Two new columns were added to the report results section: Keygiver NID, Account NID
A 'Reset' button was added to the screen. This button resets all the report's search criteria to their default settings. It also removes any data returned from a previous search.

The Keygiver Search report had a NID column added to the report results section. This column will display the keygiver's Network ID.
Alternate platform notifications were added to the menu bar of major PAS screens. When running PAS on either Development or QA, the major PAS screens will display a message in the menu bar. When running PAS in Production, no notification will be displayed.

When running on QA 'Running on QA' will be displayed.
When running on Development, 'Running on Development' will be displayed.

The 'Exit' button on the PAS main screen has been removed. Exiting from PAS can be done by either clicking the X in the top right corner of the screen, the Escape key or selecting 'Exit' under the File menu option.
Auditing has been added for PAS System and SFA Administrators.
Transfer options to the Preproduction platform has been added. This is in preparation of Preproduction platform work. Until the Preproduction platform is enabled these transfer options will not be visible or enabled.
The Account Edit (Mini-Reg) screen was updated to not allow invalid characters in the account's first and last names.
The PAS was updated to use the GAC. Direct references of resources that now reside in the GAC have been removed.

Added an Inactivity Time-Out feature to the account authorization edit screens:

Edit System Authorizations
Edit SFA Authorizations
Edit Extended Systems
After 10 minutes of inactivity, a time-out warning message is displayed. The keygiver has 5 minutes to click the 'Continue' button or the edit session is closed and the keygiver is returned to the main PAS screen.
If the keygiver times out, the lock on the selected account is released and no pending authorization changes are saved.
On the 'Edit System Authorizations' and 'Edit SFA Authorization' screens, the message box that was displayed after successfully applying authorizations has been removed. Upon a successful save, the keygiver will be directly returned to the main PAS screen. Previously the keygiver would need to click 'OK' on the message box before being returned to the PAS' main screen.

The Edit System Properties screen has been updated to allow editing of the system's long name description.
An update was made to the Edit System Authorizations and Edit SFA Authorizations screens. If the system/SFA authorization granted was not visible in the selected account's treeview due to a large number of items, the newly granted authorization would be given but would not be visible in the selected account's treeview. This has been updated to move the granted authorization into view on the selected account's treeview.
An update has been made to minimize the parent screens as well when a child screen is minimized. Previously the parent screens would remain visible.
All references to 'PHSPAS' have been replaced by 'PAS' except for the actual name of the system used to authorize access to the PAS. That has remained PHSPAS.
A fix was made to the Account Information report. If after viewing the Inactive Authorizations for a selected account, a new account was selected. The new account would not show any entries under the Inactive Authorizations section in the Account Information report.
Fix to Edit System Properties screen. When closing the screen with unapplied changes, the user is given the option to save the changes before exiting. When the user chooses to save the unapplied changes, they were not being applied. This has been corrected.
The Help menu option, 'PHSPAS Keygiver Training' has been changed to 'PAS Keygiving Support Site' by the Training group's request.
An update was made on the Keygiver Search report. When the user sends an email to a selected keygiver from this screen, the user will receive a copy of the email.
PAS Admin Tools were added to manage PAS Lock down features. This is a restricted PAS feature.
The Partners Password validation dll was updated. This allows PAS to default the logged in user's Network ID into the Partners Password validation form.
Update in the Mini-Reg Screen (PHSUSER) when creating new accounts.

If a new account is being created, the State field will default to 'MA'.
This was the default in the retired visual basic version of the Mini-Reg screen.

A new menu option called "Network Services Tools" was added under the PAS Tools menu option. Access to this menu option is restricted to accounts with the PHSPAS - N authorization.
The "N" authorization was added to PAS (PHSPAS - N). This authorization will allow access to the new Network Services Tools menu option.
Added the HomeServ application functionality to the PAS for Network Services.

A new menu option "Email Server Members" was added for this update.
This functionality was needed to replace the old HomeServ application which is starting to become unstable.
Access is restricted to accounts with the PHSPAS - N authorization.

An update was made in the Keygiver Tools' system and SFA transfer screens. An update has been made to the message that is displayed when the selected account or keygiver does not exist on either the QA or Development platforms. The message informs the keygiver to use the full account transfer to the alternate platform.
A fix was made to the Post-File AddIn for edits made to system authorizations. This fixed a time-out issue.

Update to the "Transfer Account from Production" menu option

Previously this menu option was disabled unless the PAS user had the PHSPAS - C (Allow Full Account Transfer to Dev or QA) authorization.
Now this menu option will be enabled for all PAS users that have the PHSPAS - G (General Access) authorization. But conditional logic will be applied before allowing a full account transfer to happen. The conditions are:

Allowed - If the PAS user has the PHSPAS - C authorization.
Allowed - If the PAS user is transferring their own account.
Allowed - If the account to be transferred does not exist or is inactive on the target platform (QA/Dev).
Denied - If none of the above conditions are meet. If denied, a message will be displayed to the PAS user explaining what alternatives are available.
Update to the Keygiver Tools System and SFA transfer options to allow sub-level authorizations to be transferred to an alternate platform. Examples of this would be the sub-level authorizations in the ADO application.

Update to the PAS Batch Job Population Selection. Fixes a problem when a Distribution List is chosen that contains members missing their department information in Active Directory entry.
Adds a PAS Administration Management tool.

The screen used to retrieve the initials for a newly created account has been updated to not be re-sizable.
Various updates to PHSUSER which is used in the "Create or Edit Account" function.

Fix for the Web Browser based Addin in for ADO.
Fixes to the Create/Edit Account function:

The IP Address was being passed under the wrong parameter.
Updated the Edit System and SFA screens to remember what systems/SFAs had been expanded between visits to the screen during the same session.
Allow PAS System and SFA administrators access to the System and SFA Edit screens even if they keygiver rights to any system or SFA.
Updated IP Address retrieval for Win 7 devices.
Changed the wording on the Keygiver Activity report screen for the 90 day range checkbox. It has been changed from "90 Day Review" to "Last 90 Days".

Minor bug fix release

COURIONPC check in account profile fix.
Keygiver Email System/SFA problem with email body fix.

General Release of the Partners Authorization System (PHSPAS)

Upgrade the Partners Authorization System (PAS) from VB60 to .Net
The Partners Authorization System (PAS) will be retired on December, 12, 2011


PAS System Administrator Removal Mode for a system


PAS System Administrator Removal Mode for an SFA

Version Release History Detail