This is a requirement in RFC 4851 sec 7.4.4 so if a new user logs on the network from a device, he needs a new PAC file provisioned first.
This is a requirement in RFC 4851. He needs a new PAC file. This new PAC file is provisioned first. A new user logs on the network from a device.