Knowledge Base
Designer
How To
- eSignature Configuration
- Custom Field Types
- Create Advanced Automations
- Create Security Policies
- Visual Components & Dependencies
- Automated Notifications
- Automations That Trigger Outbound Communications
- CDT Configuration
- Charts & Graphs: How to Configure
- Create Formulaic Custom Data Type Fields
- Create Patient Facing Assessment (PFA) Folders
- Configure Help Section
- Configure Phone Names
- Customize Action Bar
- Defining Regions and Territories
- Document Types: How To Configure
- Filtering With Message Template Variables
- How to Add Assessments to a Template
- Filtering With Message Template Variables
- How To Associate Assessments with Programs
- How to Create Navigation Layouts
- How To Create an Assessment or Form Template
- Patient Data View
- Zoom: How to use telehealth in Designer
- Opt Out Patients from SMS Communications
- Assessments - How to Add Conditionality
- Create User Notifications
- Create Automated Appointment Reminders
- Turning on Notifications for Communications
- Create PDFs from Forms & Assessments
- Configuring Security Policies
- How to create and configure roles
- Designer: Enable Patient Delete
- Designer: How to Configure Scored Assessments
- Designer: How to Create Automations
- Encounters: Dependencies
- DocuSign: Implementation Checklist
- Export Designer Configuration
- Task Creation
- Creating a Message Template
Overview
Features Overview
- Visual Components
- Security Policy Detail
- Task Management
- API Exports: Usage
- Designer: User Access
- DocuSign: Feature Overview in Designer
- Enable Patient Delete
- Brand Terminology: Flexibility
- Designer Overview
- Forms: Conditional Logic
- Programs and Phases
- Webhooks
- Notifications and Alerts
- Data Views
- Dictionaries
- Custom Data Types (CDT)
- Change Summary and Version History
- eRx: Overview
Configuring Security Policies
Security Policies are groups of assigned privileges that are assigned to the care team and govern the user’s interaction with data in Care. For example, a system administrator policy may have view, edit, and delete access to every menu, patient, and encounter item within Care – while another policy may only have the security rights to view patient information.
![](https://welkinhealth.com/wp-content/uploads/2023/07/Screenshot-2023-07-20-at-3.46.12-PM.png)
Security Policies are a sub-menu item in the vertical bar on the left side of Designer under the ‘Access Control’ menu.
Click on either the copy button for an existing policy, or ‘New’ on the right side of the screen. Utilizing the copy button allows you to create a new policy from an existing one
.
If selecting ‘‘New’ , the user will then either select“New empty”, “Read only”, or “Admin full”.
“New empty” is a policy where there are not any rights currently configured. As can be seen in the below screen-shot, the policies on the left have ‘No’ next to them. The rights under the “General” listing for ‘Create’, ‘Read’, ‘Update’, and ‘Delete’ are empty. The “New Empty” policy allows a user to create a policy without any security rights being pre-selected.
“Read Only” is a pre-configured policy in which the user will only have ‘read only’ access to Care. As can be seen below, The majority of the items in the left side menu column have ‘Limited’ access, while “My Patients” under the “General” heading only has ‘Read’ selected.
![](https://welkinhealth.com/wp-content/uploads/2023/07/Screenshot-2023-07-20-at-3.46.35-PM.png)
“Admin Full” is a pre-configured policy in which the user will have read/write access to Care. Each of these pre-configured policies can be modified based on the policy being created.
NOTE: The pre-configured policies, including “Admin Full’ are not dynamic. As new CDTs, forms, etc. are created in Designer the policies’ will need updated.
![](https://welkinhealth.com/wp-content/uploads/2023/07/Screenshot-2023-07-20-at-3.46.41-PM.png)
When adding a policy, create a name and add a description*. The name has to be lower case letters, numbers, underscores, or hyphens. Clicking the space bar will automatically add a hyphen to the name.
![](https://welkinhealth.com/wp-content/uploads/2023/07/Screenshot-2023-07-20-at-3.46.47-PM.png)
*Best practice is to add a description of the policy’s purpose, although it is not a mandatory field.
Click on the policy boxes for each ‘Resource’ or ‘Field’ to indicate if the policy will have the right or not to perform the listed action.
![](https://welkinhealth.com/wp-content/uploads/2023/07/Screenshot-2023-07-20-at-3.46.53-PM.png)
Click on a policy category in the left-side vertical menu.
To make a mass change to every box under a category, click the box at the top. The below print-screen shows the user(s) assigned to the policy will not be able to delete any of the shown fields since the boxes are empty.
![](https://welkinhealth.com/wp-content/uploads/2023/07/Screenshot-2023-07-20-at-3.47.00-PM.png)
Click “Save” at the bottom right of the screen once all actions have been configured appropriately.
![](https://welkinhealth.com/wp-content/uploads/2023/07/Screenshot-2023-07-20-at-3.47.06-PM.png)
After creating a policy(ies) it will need added to a role. Click here to learn more about creating Roles in Designer.
More Questions?
If you have any questions, please email the Customer Success Management team at CSM@welkinhealth.com or contact your Implementation/CSM directly.