No ACL setup yet! Denying access to everyone.

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
public:gorev:restrictedaccess [2020/01/12 15:20]
sgriffin
public:gorev:restrictedaccess [2020/06/03 22:59] (current)
mgriffin [4. Restricting User Access]
Line 1: Line 1:
 +
 ====== GoRev Administrative Setting up Restricted Access ====== ====== GoRev Administrative Setting up Restricted Access ======
-Welcome to the GoRev Administrative Setting up Restricted Access Tutorial. This will guide you through the process of setting up a new location, utilizing the custom location during patient registration, setting up a custom user with permissions restricted to this new location, and the ability to remove accounts from access. 
  
-This type of setup can be useful to grant outside entities access to their specific patient accounts.    It is your responsibility to access to patient information utilizing this method is strictly governed (make sure you have HIPAA controls in place and staff is appropriately trained).+Welcome to the GoRev Administrative Setting up Restricted Access Tutorial. This tutorial will guide you through the process of setting up a new location, utilizing a custom location during patient registration, setting up a custom user with permissions restricted to this new location, and removing access from users' accounts. 
 + 
 +This type of setup can be useful to grant outside entities access to their specific patient accounts. It is your responsibility to grant access to patient information. Patient information is strictly regulated by **HIPAA**, so please ensure that you have **HIPAA** controls in place as well as appropriate staff training.
  
 **Note:** If you need assistance with a particular portion of this tutorial, please use the **Table of Contents** on the left hand side of this screen to navigate to the topic that you require.  **Note:** If you need assistance with a particular portion of this tutorial, please use the **Table of Contents** on the left hand side of this screen to navigate to the topic that you require. 
  
-====== 1. Setting up a new location ======+====== 1. Setting Up New Location ====== 
 + 
 + 
 +In the event that you would like to setup a **New Location** for **Restricted Access**, please begin by navigating to the **Configuration** drop-down menu present in the **System Management** section of the **Admin tab**. Then, click on the **Locations** option present on your screen. 
 + 
 +{{:public:gorev:step_1_setting_up_a_new_location.png?900|}} 
 + 
 +Once the **Location Directory** window has launched, please select the **+** button in the top right corner of the **location Directory** window.  
 + 
 +{{:public:gorev:step_1_part_2_click_the_sign.png?900|}} 
 + 
 +At this point, fill in the required **New Location** fields and click **Save New Location** to successfully create the new location.  
 + 
 +{{:public:gorev:step_1_part_3_now_save_the_new_location.png?900|}} 
 + 
 +The **New Location** should now be present on your device. To continue, please fill in any fields necessary to complete the **New Location** process. Once you have created the required location, you may assign this **Custom Location**, or any **Existing Location**, to all users whose access you wish to restrict. All Users whose access is restricted to this location, will only be able to access patient information for patients assigned to this location.  
 + 
 +====== 2. Utilizing the New Location ====== 
 + 
 +The new location will be available for use immediately after creation. You will have the ability to set a patients account to this location during the creation of a **New Visit** or in the **Patient Overview** window.  In order to set a patients account to the restricted location during a **New Visit**, please utilize the **Visit Location** drop down provided. 
 + 
 +{{:public:gorev:step_2_part_1_select_the_location_in_new_visit.png?900|}}
  
 +You will also have the ability to change the **Visit Location** in the **Patient Overview** window by utilizing the **Visit Location** field present in the Visit section of the **Patient Overview** window. 
  
-Setup a new location by utilizing the locations guide [[public:gorev:locations|here]].   You will assign this custom location in the next step to any user you wish to have restricted access only to patients who are assigned this new location.  For this test setup we have created a location titled "Test WorkComp Location."+{{:public:gorev:step_2_part_2_select_the_location_in_patient_overview.png?900|}}
  
-====== 2. Utilizing the new location ====== 
  
-The new location will immediately be available for use during registration or in patient overview.  During registration, you can select this new location on the second step as shown below.+====== 3Setting Up a Custom User Account ======
  
 +In order to create a new **User Account**,first, begin by navigating to the **Users** button located in the **System Management** section of the **Admin** tab. 
  
-{{:public:gorev:testwcomplocation.png?600|}}+{{:public:gorev:step_3_part_1_click_on_the_users_button.png?900|}}
  
 +Once the **User Management** window becomes visible, you may create a new **User Account** by utilizing the **New User** button provided. 
  
-In patient overview you can change the location as well.  This is where you could remove access to a specific account by changing the location to one the user does not have access to.+{{:public:gorev:step_3_part_2_creating_the_new_user.png?900|}}
  
-{{:public:gorev:ptoverviewlocation.png?600|}}+At this point, the **New User** window should be present on your device. Please enter any information required in order to create the **New User's** account and select the **Create User** button.
  
-====== 3Setting up a custom user account ======+{{:public:gorev:step_3_part_3_create_the_new_user_.png?900|}} 
 +====== 4Restricting User Access ======
  
-First go to Admin --> Click on Users --> The below form will appear +Now, in order to restrict **User Access** for a **New User's** account, please begin by opening the newly created patient account in the **User Management** window.
  
-{{:public:gorev:newuserbg.png?600|}}+{{:public:gorev:step_4_part_1_select_the_new_user_to_begin_restricting_access.png?900|}}
  
-Click New User and setup as you would any normal user Be sure to assign the appropriate permission level this outside entity will need to utilize.  For exampleif they only need to see information and not update it we would suggest utilizing a Read Only permission set.+Once visible, please enter the **Required Location** or **Locations** into the **Location Access** field providedIf you wish to **Restrict Access** to more than one facilityplease utilize the **Location Access** field(s) that correspond to the required facility or facilities needed
  
-{{:public:gorev:newuserbg2.png?600|}}+{{:public:gorev:step_4_part_2_enter_the_restricted_location.png?900|}}
  
-(THIS PART IS ESSENTIAL) Open the user back up and make sure the location access ONLY has the new location you created.  It is this step that restricts a specific user to seeing only patients who have been assigned a specific location for access.  If the user is to have access to multiple GoRev units you will need to make sure this location restriction is set on each.+Now, in order to save the changes made on the **User Account** please select the **Save Changes** button in the bottom right corner of the **User Management** window
  
-{{:public:gorev:newuserbg3.png?600|}}+{{:public:gorev:step_4_part_3_save_the_changes_made_.png?900|}}
  
-Once all of the above is doneany user setup with restricted location access will only be able to see patients who have had that location assigned.    They will not be able to instant search, advanced search, or find any other patient data within the system.+At this pointthe **User's Account** will be successfully restricted to patient accounts assigned to the provided locationAny user or user's with restricted access will not be able to conduct a search, or advanced search for any patient's not located in the **Provided Location**.
  
 +Note: You may also restrict location access to **Existing User Accounts** by locating the correct **User Account** and following the steps detailed above. 
  
 ====== Additional Resources ====== ====== Additional Resources ======
QR Code
QR Code public:gorev:restrictedaccess (generated for current page)