Create Security Policies

Welkin Health provides your organization the ability to create specific access controls through Security Policies. These access controls require you to:

• Create a Security Policy
• Create Role(s) for this Security Policy: Refer to KBC here: Roles
• Assign Policies to Role(s)
• Provision the Role/Policies to users
• Review and modify final Security Policies

1.  Create a Security Policy

• Under Access Control, click “Security Policies” and then “+ New” button.   Choose an option:
• “New Empty” creates a policy with only Welkin system fields
• “Read Only” only applies the ability to read system data.
• “Admin Full” grants access to all fields

Each category has multiple options, explained here: Security Policy Detail 

1. Create Role(s) that will leverage this Security Policy: Roles
2. Assign Policy to Role(s)
3. Provision the Role/Policy to users:

• In Admin, navigate to a user
• In the row pertaining to the environment you are modifying, click on the small edit box to the right of the toggles
• Make sure the user has a Role that contains your new policy (see Tips below)

5. Review and modify final Security Policy

• Return to Designer and make any needed policy tweaks that you would like.

Tips and tricks:

• A “New Empty” policy will show some fields checked that are needed for Welkin’s system to communicate, and cannot be unchecked
• Always review your policies when making configuration changes.  Many new elements will require additions to your policies
• Best practice is for a 1:1 Policy to Role assignment to best differentiate users and their permissions
• In Admin, use Role assignment rather than Policy Assignment when granting permissions to avoid unintentionally overlapping permissions

More Questions?

If you have any questions, please email the Customer Success Management team at CSM@welkinhealth.com or contact your Implementation/CSM directly.