Skilled Nursing Facilities

Creating Security Roles

Security Roles determine whether the user can: 

  • Access an application feature.

  • Only view information.

  • Add, change and delete information.

To maintain your organization's security requirements, you can create customized roles, providing or limiting users' access to features. To manage users' access across your organization, it is recommended you create roles based on the positions in your organization.

To create a new role, you must select the module. If the role requires access to more than 1 module, select Multiple, and all the modules appear. You can select the modules where access is required, one at a time. For each option in the module, select the appropriate access level. Then select the next module and select option access levels. Continue selecting modules and selecting option access until you complete all the modules required by the role. If you select Module, All, only the options accessible from all modules appear. Or, you can select access levels for options in All from any of the modules.

To set the access level for application features, the security options have either Yes or No access, or levels of access: 

  • Yes - allows full access.

  • No - restricts access.

  • None - user does not have a link or button to access the feature or option.

  • Read - user can see but not edit information.

  • Read/Add - user can see and add records. 

  • Read/Add/Edit - user can see and add records, and change information.

  • Read/Add/Edit/Delete - user can see and add records, and change and delete information.

Access to some features are dependent on access to another feature.  

Security options are organized in sections corresponding to the features or areas in the application. The section heading is the parent option and appears in bold. Each option under the parent is a child option. To quickly set up access levels for a section:

  • If the same access level is required for all the child options, you can select the access level for the parent. All the child options are automatically set to the same access level. For example, selecting Yes for the parent, Admin Tabs, automatically sets the access level for all the child options to full access.

  • If most of the child options require the same access level and 1 or more require a different level, you can select the level for the Parent and then change the access level for the few child options requiring a different access level. After you select the parent access level, if you change the access for a child option, the parent level changes to Custom, however the level for all the other child options remains the same. For example:

    1. You select Yes for the parent.

    2. All the child options are set to full access, Yes or Read/Add/Edit/Delete.

    3. You change the access for 1 child option to Read.

    4. The parent option changes to Custom.

    5. All the other child options remain set to full access.

If different access levels are required for all or most child options, in the parent, select Custom, and select the required level for each child option.

In New Role, you can find quickly find an option by pressing Ctrl+f on your keyboard.

Important

You must have the Admin Security Role (System) or a role with equivalent access to create a new role or change existing custom roles.

You must have Management Console access to edit roles with corporate scope. 

To ensure you give users appropriate access, before assigning role(s) to users, it is recommended you test role(s) you create.  

To give a user access, after you create the role, you must assign the role to the user. You can assign system roles to users. You cannot edit system roles. 

To give a user access to Management Console, you must assign a role having the EMC Module. 

For information on setting up security access for external providers, see Care Provider Access Only (CPAO) and Restricting Security Roles Quick Reference Guide.

Some integrated features include Single Sign On (SSO) access from PointClickCare to the vendor's platform. For example, Pro-Tracking and Integrated Claims Management. To provide SSO access, you must create the appropriate SSO security role and assign the role to appropriate users. 

  1. Do one of the following: 

    • Single facility: Admin > Setup > Security Roles.

    • Multi-facility: Management Console > Standards > Financial Management > Security Roles.

  5. To add access for another module, click the module name.

  7. To assign users to the role, click users.

    1. Select the users.