Re: E-Biz POC and new G.g security measures Bob Beattie 17 Dec 2009 10:56 EST
This process was included in the last system build by Grants.gov. It was fully discussed at the October webcast. That webcast was at just about the worst time for university/research institutions as it was the day SRA convention ended and NCURA con began. I did see it so followed the explanation closely. It seems that HHS, if not all government agencies have rules that passwords for their systems must be changed every 90 days. This is true for the NIH eRA Commons, by the way. This is just now being imposed by higher ups on the Grants.gov people, so they had to implement it. Grants.gov does not restrict institutions to only one e-biz POC and an alternate. That is a CCR limitation. Currently, only the that e-biz POC can establish the original link to Grants.gov and then register new AORs. The new rule will allow the CCR e-biz POC to delegate others in the institution to register AOR's and do other functions. "If the AOR account is granted the E-Biz POC role, the account owner can perform E-Biz POC functionality. These functionalities are available to all AORs who have the AOR role assigned. When a user selects the E-Biz POC links they will be prompted for an MPIN the first time an E-Biz POC link is selected. If the MPIN is correctly entered they will be granted access to the E-Biz POC links. " This should be useful to places where the eBizPOC is far from the grants office. The distant person could grant the functionality to the grants office director, for example, so that person could look at all applications submitted by the office, or to add new AOR's if needed. Many schools have a someone in the Finance branch or a VP as the eBizPOC and it is a pain to get needed, timely access. This will make that easier. All the new info is posted here http://www.grants.gov/help/stakeholder_communications.jsp Watch the webcast if you missed it. They had a non-government person on for the first time, to talk from the "user" perspective. Or just download the Security Build Overview. While the changing passwords is a pain, the rest is quite good. By the way, none of the password aspects apply to the use of S2S. All the more reason to move in that direction. Bob ------------------------------ Robert Beattie UMich e-Business Point of Contact UMich Grants.gov Liaison Managing Senior Project Representative for Electronic Research Administration Division of Research Development and Administration University of Michigan xxxxxx@umich.edu (734) 936-1283 Member, NIH Commons Working Group Member, FDP eRA Standing Committee and Grants.gov Joint Application Design Team On Dec 17, 2009, at 10:18 AM, Kris A. Monahan wrote: This isn't something I have heard about yet. Have you heard about this through any of your era news alerts? Trying to figure out ifthis is worth investigating-not sure on the level of knowledge/credibility of the person posting. Research Administration Discussion List <xxxxxx@hrinet.org> writes: I am curious in light of the new requirement for quarterly password changes in Grants.gov. Institutions are currently limited to two E- biz POCs (designated and one alternate) and E-biz POC approval is required for each 90-day password update. Has anyone heard of any G.g plans to allow for more than two POCs? Many thanks! Cindy Fuqua Manager, Administrative Post-Award Sponsored Research and Program Development The Rockefeller University 1230 York Avenue, Box 82 New York, NY 10065-6399 p: 212-327-8055 f: 212-327-8400 e: xxxxxx@rockefeller.edu Kris A. Monahan Director of Pre-Award Services Wellesley Centers for Women www.wcwonline.org e-mail: xxxxxx@wellesley.edu Phone: 781 283-2508 Wellesley College 106 Central Street Wellesley, MA 02481-8203 ====================================================================== Instructions on how to use the RESADM-L Mailing List, including subscription information and a web-searchable archive, are available via our web site at http://www.hrinet.org (click on "Listserv Lists") ====================================================================== ====================================================================== Instructions on how to use the RESADM-L Mailing List, including subscription information and a web-searchable archive, are available via our web site at http://www.hrinet.org (click on "Listserv Lists") ======================================================================