Managing Security

Manage Access Control Lists

An Access Control List (ACL) is a set of permissions. An ACL enables you to provide users only the level access needed to complete tasks in DrCloudEHR. For example, you can use ACLs to allow a billing person to view insurance and billing information, but not patient treatment records.

To assign ACL permissions, you create an ACL group, and then assign ACL permissions to the the group. You then assign users to the group, thus granting the user the ACL permissions in the group.

The access granted to users assigned an ACL group is determined by a combination of read, add, and edit permissions set on the group, and the ACL permissions included in the group. You select the read, add, and edit permissions in the Return Value menu when you create a group.

Note: Using the Advanced ACL Administration feature is NOT recommended. In addition, you should not assign standard users to the Auditor or Emergency Login ACL groups.

This topic contains the following sections:

Add a New ACL Group

1. Click the Administration tab.
2. Click the ACL tab in the left navigation bar.
3. Click the Add New Group link in the the Access Control List Administration page.

4. Enter the properties under New Group Information. All of the properties are required.
   For the Return Value, select one of the following values:

   readonly	Users can read items. This is the lowest level permission that can be assigned to a group.
   addonly	Users can add or create items, as well as view items.
   write	Users can edit or update items, as well as create and view items.

5. Click Submit. The group is added to the list of groups.

Grant ACL Permissions to a Group

1. Click the Administration tab.
2. Click the ACL tab in the left navigation bar.
3. Click the Edit link next to the group in the Access Control List Administration page.
4. Select an ACL permission to add to the group in the Inactive column, and then click the arrow button to move it to the Active column.