Managing Security

Manage Access Control Lists

An Access Control List (ACL) is a set of permissions. An ACL enables you to provide users only the level access needed to complete tasks in DrCloudEHR. For example, you can use ACLs to allow a billing person to view insurance and billing information, but not patient treatment records.

To assign ACL permissions, you create an ACL group, and then assign ACL permissions to the the group. You then assign users to the group, thus granting the user the ACL permissions in the group.

Note: Using the Advanced ACL Administration feature is not recommended. In addition, you should not assign standard users to the Auditor or Emergency Login ACL groups.

This topic contains the following sections:

Add a New ACL Group

1. Click the Administration tab.
2. Click ACL in the left-hand navigation bar.
3. Click Add New Group.
4. Enter the properties under New Group Information. All of the properties are required.
   • A title that is displayed in the application.
   • An identifier that is used internally to add the group to the DrCloudEHR database.
   • A value that is appended to the group title.
   • A description.
5. Click Submit. The group is added to the list of groups.
6. Click Edit next to the group.
7. Select an ACL permission to add to the group in the Inactive column, and then click the arrow button to move it to the Active column.

Using OTP Authentication

If your site is configured to one-time password (OTP) authentication, you must get a password to verify your identity before you can assign or unassign ACL permissions for a group.

Click the OTP Verification button, and enter your email address. The system generates a password that is sent to your email. Enter the password to verify your identity.