PASIprep is a software application that is managed by Alberta Education and made available via the Alberta Education Extranet.

The purpose of this document is to:

• Provide an overview of the security controls implemented within PASIprep
• Identify processes and procedures that should be implemented by schools and school authorities to ensure PASI data accessed via PASIprep is used as described in the PASI Usage Agreement.

See the PASI Security page for a full listing of the PASIprep permissions and WebGuard roles

All organizations must implement policies and procedures to ensure PASI data accessed via a PASIprep is limited to those persons who are authorized to access such information as part of their employment by, or contracts with, the organization.

The ability to view and/or update specific PASI student data must be limited to only those users who require that level of access to perform their job. As such, users must only be granted the PASI security roles required to perform their jobs.

Each security role defined in PAS (WebGuard) will only be provided to a specific set of users. The roles have been split up in two main groups; roles that can be assigned to users that have the O.1 organization and those that can be assigned to users without O.1. The user will have the union of the PASIprep permissions from all their assigned roles.

The PASIprep User Authorization form is used to request the roles for users. In order to access PASIprep, a user will require a role that has the PASIprep Level 01 Permission - PASIprep Access. Other roles should only be granted if they are required for the user to do their job function.

To request access to PASIprep, a PASIprep User Authorization form must be completed. This form is available from the Alberta Education Extranet Login page (https://phoenix.edc.gov.ab.ca/login/default.asp)

The External User PASIprep User Authorization form is available for use by school authorities to request PASIprep access for up to five staff members who will be assigned the responsibility to perform certain PASIprep functions. School and school authority staff MUST have Extranet access prior to requesting PASIprep access.

The PASIprep User Access List provides a list of authorized users from a user’s organization. For each authorized user, the PASIprep User Access List identifies the following information for the users:

• Organization
• Username
• Email Address
• PASI Security Roles

The PASIprep User Access List can be access by the selecting User Access List menu option from within PASIprep.

The end-use agreement is shown to a user the first time they log into PASIprep. The agreement must be accepted for the user to continue on into PASIprep. The users that have accepted the agreement is tracking in a table in the PASI database

See the PASIprep END-USER AGREEMENT page for more information on the contents of the agreement.