Security Role Configuration

Security roles in MediRecords control which areas of MediRecords each user can access and what administrative changes they can make. When you first register your account, your username is automatically assigned the Practice Owner role, the highest level of access, and every subscription must have at least one Practice Owner. New users are assigned a default role based on their user category, and a Practice Owner can update any user's role at any time from User Settings without affecting their category.

Contents:

1. Assigning/Changing a User's Security Role
2. Changing a Security Role's Access
3. Reading the Privileges Table
4. Granting Privileges
5. Accounts Privileges
6. Appointments Privileges
7. Billing Privileges
8. Clinical Privileges
9. Patient Privileges
10. Resources Privileges
11. Settings Privileges
12. Troubleshooting
13. Further Reading

Assigning/Changing a User's Security Role

1. Click More.
2. Click Settings.

3. Click Subscription Details. 

   

   
    

4. Click Users. 

   

   
    

5. Click the tick-box next to the name of the user that is having their security role changed.

6. Click Edit. 

   

   
    

7. Open the Security tab. 

   

   
    

8. Click into the Security Role field to change the user's role.
9. Click Save. The user's role is now updated.

Changing a Security Role's Access

Note: The Practice Owner security role cannot be altered, and every subscription must have at least one user assigned the Practice Owner role. Adjust or create another security role instead to match your requirements.

1. Click More, then select Settings.

2. Click Security. 

   

   
    

3. Select the role being modified and click View. 
4. Update the required privileges for the role by ticking or unticking the boxes beside the features in each tab.

5. Click Save to apply the changes. 

   

    

Reading the Privileges Table

Each privilege is shown as a row of tick-boxes. Ticking a box grants that level of access, the more boxes ticked for a privilege, the more access is granted, covering create, read, and update access to that feature.

You can also tick the All box to automatically granted create, read, update, and delete permissions for a feature. Similarly, you can tick the None box to un-tick all privileges for a feature.

Granting Privileges

All: Provides access to Create, Read, Update, and Delete functions for that feature.

None: Prevents access to Create, Read, Update, and Delete functions for that feature.

Create: Allows a user to create a record of that type.

Update: Allows a user to update a record of that type.

Delete: Allows a user to delete a record of that type.

Accounts Privileges

Expense: Allows access to logging expenses against outgoing payments.

GL Account:

Accounting Transaction:

Journal Entry: Allows access to a log of all the changes around finance within MediRecords.

Schedule Assignment: Controls who can assign a schedule to other users for billing.

Appointments Privileges

Appointment: Allows access to the appointment area, where you can book appointments for providers from specific practices and notify providers of upcoming patients.

Room: Allows specifying which location an appointment will be held within a specific practice.

Session: Allows access to scheduling practice hours, individual working hours, meal breaks, and off-site work.

Holidays: Allows access to view and edit a provider's holidays. An extended feature of Session.

Hide Appointment Type: Removes the Appointment Type area, where users can change or add how long certain appointments last and what common appointment types a clinic undertakes.

Billing Privileges

Adjustment: Allows access to the Adjustment area in Clinical.

Bulk Bill Claim: Allows access to bulk bill claiming on the invoice section of patient files.

Bulk Bill Payment Report:

Bulk Bill Process Report:

Invoice: Controls access to patient invoices.

Patient Claim: Controls access to online patient claiming in invoices.

Payment: Controls access to the payment section in invoices.

Cancel Bulk Bill Claim:

Disable Adjustment: Disables the ability to create new adjustments, while still allowing access to the Adjustment area.

Disable Payment: Disables the ability to perform any payment, while still allowing access to invoices.

Hide Claiming: Hides the claiming section from Accounts.

Hide Claiming > Claims Completed View: Hides Claims Completed, one of the three views in the claiming section.

Hide Claiming > In Progress View: Hides In Progress, one of the three views in the claiming section.

Hide Reconciliation: Hides the reconciliation section from Accounts.

Hide Sales: Hides the sales section from Accounts.

Remove Adjustment - Write Off: Removes the ability to adjust or write off an invoice.

Clinical Privileges

Measures: Refers to Observations, where patient height, weight, and other relevant information is recorded.

Allergy: Any allergies and the severity of the patient's reaction.

Antenatal: Any pre-birth details surrounding a pregnancy.

Birth: Any post-birth details surrounding a pregnancy.

Clinical Drawer: Where editable templates are saved and accessed.

Consult: Where today's clinic notes and past consultations are located.

Consult Reason: Allows access to the consult reason function.

Hospitalization: Whether the patient has had a hospital visit related to their care.

Immunization: Where immunization records are created and located.

InBox: Secure messaging, where correspondence between medical staff first arrives.

Investigation Results: Where the results of conducted investigations, such as pathology and radiology, are located and entered.

Investigation Request: Where requests for pathology or radiology are made.

Correspondence Inbound: Where inbound correspondence is located.

Correspondence Outbound: Where outbound correspondence is located.

Medical History: Patients' previous and/or current medical conditions.

Pap Smear Result: The creation and viewing of Pap smear results.

Pregnancy: A resource for any obstetrics details.

Pregnancy Result: New pregnancy details and results.

Procedure: Where medical procedures can be recorded and viewed.

Past Scripts: A list of all past medications prescribed to the patient.

Current Rx: A list of all current medications prescribed to the patient.

Extended Care: Access to health assessments and reviews, such as the K-10 assessment.

Patient Privileges

Here you can set the privileges for creating, reading, updating, and deleting patient areas, as well as exporting patient records.

Note: Consent cannot be deleted.

Resources Privileges

Service Provider: Allows access to where clinics and health funds are located.

Health Professionals: Allows access to where medical practitioners are located.

Drug Protocols: No longer in use.

Drug Recipe: Allows access to drug recipe creation.

Clinical Drawings: Allows access to the management of clinical drawings.

Letter Templates: Allows access to create and maintain letter templates.

Patient Education: Allows access to upload and manage patient education documents.

Settings Privileges

Bank Account: Allows access to bank account features.

Item: Allows access to items to add to schedules.

Role: Allows access to security.

Role Entity Privilege: Needed to update security settings and to avoid unforeseen issues.

Role Execute Privilege: Needed to update security settings and to avoid unforeseen issues.

Role Execute Report: Allows access to Report.

Hide Configuration: Allows and disallows configuration settings adjustments.

Troubleshooting

Access Denied error

Cause: An 'Access Denied' error usually means you don't have the security clearance to access that part of MediRecords.

Resolution: Contact your Practice Owner. They can update your security role or grant the required privileges using the steps below.

Escalate: If your Practice Owner has reviewed your role and privileges and you still can't access the area, contact MediRecords Support.

Further Reading

• User Management, Profile, & Preferences
• Access Denied: Troubleshooting Guide