DRC: Administering Users
Roles and Privileges
See: Controlling User Access___Roles and Privileges
Privileges define what can or cannot be done in the system (view information, edit information, add information, etc).
Roles group Privileges into manageable sets.
Roles can inherit all the Privileges from another Role.
OpenMRS comes with special predefined Roles that can't be deleted.
Anonymous - Privileges for people who don't sign-in to OpenMRS, usually very restricted and view-only
Authenticated - Privileges for anybody that signs-in to OpenMRS, common to all users
Provider - the basic medical provider Role, can be used to build more specialized medical provider roles (physicians, nurses, medical students, etc)
System Developer - has access to everything in OpenMRS, be very careful in protecting the System Developer password
The best practice for creating and managing Roles is to create Roles based on job function and have Roles inherit common Privileges from more restricted Roles.
For example, you set up the default Authenticated role to be able to view all patient information on the system. You create a new role called Data Entry Clerk that can edit patient information. You let the Data Entry Clerk role inherit the privileges from the Authenticated role. The Data Entry Clerk role can now view what information is available to the Authenticated role with the additional editing privileges assigned to the Data Entry Clerk role. If you change the privileges of the Authenticated role, you also change the privileges of the Data Entry Clerk role since the Data Entry clerk role has inherited privileges from the Authenticated role. You could then create a Data Entry Manager role that inherits privileges from the Data Entry Clerk and then assign additional privileges to the Data Entry Manager.
Role | Inherited Roles | New Privileges | Inherited Privileges |
|---|---|---|---|
Authenticated | none | View | none |
Data Entry Clerk | Authenticated | Edit | View |
Data Entry Manager | Data Entry Clerk | Create patients | Edit + View |
Adding a User
https://app.tango.us/app/embed/Add-New-User-in-OpenMRS-8ffc17e7043b432e9cf7c8c71869bbdd
Type username
Click on Continuer
Type password
Click on Connexion
Select a location
Click on Confirm
Click on App Menu
Right click on System Administration
9.Click on Legacy Admin
Click on Manage Users
Click on Add User
Click on the Next button
Type the Given name. In this illustration, "Jane"
Type the Family name. This is optional. In this illustration, "Doe"
Select Gender from the radio-button. In this illustration, "Female"
Type user's password
Confirm the password
Check the applicable roles for DRC as illustrated.
Click on Save User