Assign Security Classifications to users via TW or SSMT

From Galen Healthcare Solutions - Allscripts TouchWorks EHR Wiki
Jump to navigation Jump to search

This page was designed to show you how to assign Security Classifications to a user via Allscripts Enterprise EHR or SSMT. In this example we will be loading a new Security Classification GHS ROLE to 1 user (idamon) via TW and 5 users (adermott, ahsuser, bjones, ceisner and csnapp) via SSMT.

A good place to start

A good place to start is in Allscripts Enterprise EHR. Assigning Security Classifications to a user will allow you to easily view the data you'll need when assigning the Security Classifications via SSMT. You'll see this when we extract the data.

For the purpose of this example I am going to throw in "how to create and New Security Classification" for your viewing pleasure.

Navigate to TWAdmin

Select 'Sec Admin' in the VTB

Select 'Security' tab in the HTB

Choose 'Security Classification' from the 'Security Setup' Drop Down Menu


Create a new Security Classification

Click Add (lower left)

Enter GHS ROLE as the NAME Enter GHSrole as the CODE

(What do 'Inactive', Patient Security' and 'Enforced' do?)


Highlight GHS ROLE


Click the 'Assign Codes' button. (Button in lower left of lower window, scroll down to view if not visible)

For example: To grant all security access except 'Chart-PrintChart' to this new classification called GHS ROLE. We would simply move everything from "Available Codes" to "Current Selection" except for 'Chart-PrintChart' using the Down Arrow.


Click OK.

Assign Security Classification to a User in Enterprise EHR

  1. Highlight the classification you wish to add the user to
  2. Click 'Assign Users' button
  3. Search for the user you want to assign
  4. Highlight the user
  5. Move the user down to the bottom section using the "down Arrow"


Click OK

You should now see your user as one the of "Assigned users" in the Assign user box.


Click Save.

Assign Security Classifications to Users via SSMT

In the above example a new security classification was created and assigned to a user via the 'Sec Admin' Workspace.

The following example shows how to take a classification assigned to one user and assign it to others.

1. Extract the 'User Security Classifications' data from Allscripts Enterprise EHR via SSMT

2. Paste the extracted data into Excel

3. Search for the security classification you wish to assign under "Access Group Entry Name", in this example 'GHS ROLE'. If you know of a user with the classification you wish to assign you can search for that user. In this example the security classification GHS ROLE has been assigned to idamon.


4. Insert a new row for every user you want to add this Security Classification to.

5. Copy the user's existing data into the newly inserted row and change the "Access Group Entry Code" and the "Access Group Entry Name" values to the new classification based on the already assigned user. In this example to GHSrole and GHS ROLE. (see examples in bold below)


6. Load the data back into Allscripts Enterprise EHR via SSMT

Verify data loaded properly

  1. Login to Allscripts Enterprise EHR as TWAdmin
  2. Click on TWUser Admin on the VTB
  3. Search for a user you added the Security Classification GHS ROLE to in SSMT. For this example I will use adermott.
  4. Verify GHS ROLE appears in the Security section for this user.