COM31001 - Background: Allocation of COTAX and CT Online user roles: introduction

COTAX and CT Online roles are requested for users and allocated to them using the Service Request System (SRS).

Anyone with line management responsibility, or their appointed delegate, can request a user role on behalf of their staff. This person is known as the Role Requester and is responsible for

  • Ensuring their staff only have the roles allocated that they need to do their job
  • Requesting only appropriate user roles using SRS
  • Deleting user roles that are no longer required by their staff using SRS

And

  • Advising the Role Authoriser when user roles that are no longer needed have been removed

A Role Authoriser is appointed within each Management Unit in which COTAX or CT Online roles are available. A list of Role Authorisers and the MUID (Word 27KB) for which they are responsible for can be found on the COTAX Intranet site as a ‘Useful Link’.

The Role Authoriser is responsible for

  • Setting up and maintaining a list of COTAX and CT Online users
  • Approval of user role requests, including
    • COTAX roles accessed via the Interim Single Sign-on (ISSO ) icon
And
And
  • The resolution of local access problems

The Role Authoriser also has responsibility for

  • Local security of COTAX

And

  • Maintenance of the Authorised User Registered (previously Establishment) File, containing full details of the COTAX and CT Online Services users for their MUID

The Role Authoriser will receive applications for COTAX or CT Online roles to be allocated within the MUID they are responsible for to members of staff in other offices, including those in other directorates.

To ensure continuity of operations, it is recommended that in addition to the nominated Role Authoriser, there is at least one, and where possible two, deputies. It is also recommended that, wherever possible, the appointed Role Authoriser is an experienced officer of HO grade.

It is a Departmental Security requirement that the following three activities are carried out by different members of staff whenever possible 

  • Approving access to COTAX and CT Online roles (Role Authoriser)
  • Using COTAX to generate repayments for example Technical Caseworker, CT Co Ordinator
  • Carrying out security checks on repayments and reallocations (Repayments and Reallocations Authoriser).

If office constraints mean that you cannot readily achieve the required segregation of roles, you must obtain a written dispensation from your Deputy Director (or equivalent). The application for dispensation must be in writing, must outline the reasons for being unable to fully comply with the Security Requirements, and provide details of the arrangements that you are able to put in place. This dispensation must be renewed every six months.