Guided Notes

Security, Roles & Access

Role-based access control, security classes and templates, provider vs user records, break-the-glass, sensitive records, provisioning/deprovisioning and access audits.

Role-based access control (RBAC)

Slide 1 / 5

Users get access based on their job role, not individually: • A role/security template (e.g. 'Ambulatory RN', 'Hospitalist', 'Registration') bundles permissions: which activities they can open, what they can view/edit/sign, which orders they can place. • Users may have several roles (a nurse who is also a super user). • Least privilege: give only what the job requires. • Department/location context can further restrict access.