Not sure where to post this...but since I am doing an audit...Would it be OK for the LA to have manager access in all (**) applications? They would not be able to create or send transfers, per my understanding.

I think I recall that the LA should not have ** access as it allows them access to everything. They should only be assigned the LA function. I haven't done this audit for a while, but I do believe I have an audit program if you would like to see it, PM me.

I just finished the FedLine audit. I used the FFIEC IT Examination Handbook - FedLine Booklet dated August 2003. It was wonderful and explains everything. It says any staff member assigned access to the LA application, should not have access to either the FT or Host Communications applications. By giving the LA the ** it allows access to
all applications.

I too am using the FFIEC IT Exam for my program. But I am wondering if within the ** function, you can specify just manager access only. I know that the ** gives access to all applications, but there are 6 levels of access for each application (Inquiry, Entry/ Update, Verify/ Transmit, Assistant Supervisory, Supervisor, and Manager). If your LA does not have FT manager access, who does?

We have someone independent of the FT function as well as other functions handle the LA respponsibilities. Previously, this person was not part of the department, but now there are enough bodies that this can be appropriately segregated.

The LA should only have LA access and nothing else. Actually, the ** setting is not really good for anyone since it gives broad access. It is much better to go in to each user ID and set them up with only they functions they need.

I am an LA for our Fedline and not only do I only have access to the LA function, I also must have a 2nd person present when I am on the Fedline (per internal Audit). As LA I could go into my user and give myself access to anything I want!!

Are you sure you can change things for your own userid?
Our LA CANNOT change anything on their own userid.
We tested this yesterday.
We have 2 LAs, each had to change the other's access rights. When they tried to change their own, we got an error message.