|
|
|
|
|
Role Based Access Control
Role Based Access Control (RBAC) has been in place for some time without directly affecting your access to specific functions in Vision. However, RBAC becomes a compulsory part of Vision once EPS2 is enabled at your practice. This means that when you login to Vision with your Smartcard, your access to related Vision modules and functions is dictated by the roles and activities that are stored on your Smartcard.
Please note the following:
- RBAC and Vision Offline Access - When you login with your Smartcard, a copy of the role profile access rights is saved to Vision. When you next access Vision offline (ie without your Smartcard), this information is used to determine your system access rights. Where a Vision user has never authenticated their Smartcard, the usual Vision Security access applies.
- RBAC and Mail Manager - When RBAC is fully implemented, you can only allocate messages in Mail Manager to users that have logged in at least once since compulsory RBAC has been switched on.
- New Vision Modules and Functionality – When new Vision modules and functionality are introduced, you may need your Smartcard updated to gain access.
The Smartcard defines the user’s role and business activities. Within your practice, you should have an allocated sponsor who is responsible for managing your practice’s Smartcards. Sponsors should identify the correct role for their member of staff or GP, and the activities they need to use, particularly within Vision and liaise with the Registration Authority if necessary. It is strongly advised that you re-check each users role(s) on their card before compulsory RBAC is implemented. If you do not do this and cards have incorrect roles, you run the risk of staff not being able to perform their usual Spine or Vision activities. Sponsors need to familiarise themselves with the roles established on the system and the sort of access that this gives a user to correlate with the tasks that the user's job requires them to undertake. See also Is there any information available to guide practice sponsors and or RAs?
