Incident Security Configuration

Last updated
Save as PDF

In myEvolv, there are multiple ways to set up security for incidents.

By worker role
By individual staff member - there is an additional level of security for sensitive incidents
By workgroup
By managing office
Default incident security by agency
By program

First, to be able to view incidents, each applicable Navigation Scheme must be given access to the Incidents module and the appropriate incident forms.

Go to Agency Setup > Staff and Security Setup > Navigation Access > Access to Forms.
Select Navigation Scheme and make a selection.
In the Select a Module drop-down list, select Incidents.
Expand the Incidents security options by selecting the black arrow.
In the Incidents row, click in the Has Access column until a green check mark displays. This gives the Navigation Scheme access to the Incidents module.
- Optionally, in the row for each incident form, click in a column until the appropriate selection displays (green check mark for yes and red x for no). These selections determine what actions the staff can take with regards to incidents.
Click Save.

Incident security matrix

The following table lists the options for incident security and the actions available to a user with that incident security.

Access to the Incident module	Associated to Managing Office with incident access granted	Security privileges granted for all incidents	Marked as a report holder on an incident	Security privileges granted for sensitive incidents	Actions available to a user
x					Create any new incident type.
x		x			Add any new incident type and open almost any incident regardless of the associated managing office. The user cannot access incidents marked as sensitive.
x		x	x		Add any new incident type and open almost any incident. The user cannot access incidents for which you are marked as a report holder or incidents marked as sensitive.
x		x		x	Create any new incident type and view almost any incident including those marked sensitive.
x	x				View all matching results for the managing office. The user cannot access incidents marked as sensitive.

Secure specific incidents events by Worker Role

For each worker role in your system, you can define which incident events a worker associated with that role can access.

Go to Agency Setup > Staff and Security Setup > Worker Roles > Security for Events.
In the toolbar, click Select Worker Role, then search for and select the role to configure.
Locate the Incidents Header section.
For each event, select the following as appropriate:
- Access - View the event.
- Add - Create an event.
- Edit - Modify the details of an event.
- Delete - Remove an event.
- Undelete - Remove a deleted event, in turn, making the incident accessible again.
Click Save.

Grant a staff member access to all incidents

When you grant a staff member access to all incidents, they can add any new incident type and open almost any incident regardless of the associated managing office. However, they cannot access incidents marked as sensitive.

Go to Agency > Staff & Security > Staff Information > Staff Profiles with Security.
In the toolbar, click Select Name and select the staff member.
Select Actions and select Open Form.
In the User Access section under Access to Incidents, select the Can Access All Incidents? check box.
Click Save.

Grant access to sensitive incidents

Staff access to sensitive incidents is configured in the staff profile. This access allows staff to view incidents that are marked as sensitive.

Go to Agency > Staff & Security > Staff Profiles with Security.
In the toolbar, click Select Name and select the staff member.
In the profile row, select Actions and choose Open Form.
In the User Access section, under Access to Incidents, search for and select the Incident Worker Role.
Select the Can Access Sensitive Incidents check box.
Click Save.

Grant a workgroup access to all incidents

You can also grant workgroups access to all incidents.

Go to Agency > Workgroups > Manually Assigned > Information.
In the toolbar, click Select Workgroup and select a workgroup.
Under Workgroup Information, select the Use for Incident Access? check box.
Click Save.

Secure incidents by Managing Office

When you choose to secure incidents by managing office, the incident pick list displays only incidents associated with the managing or reporting office in the incident record that matches the staff member's managing office.

Go to Agency Setup > Agency > Agency > Agency Information.
In the Defaults for Security section, under Module Options, select the Incidents - Only Secured by Managing Office check box.
Click Save.

Add a managing office to a staff profile

You must add a managing office to the staff profile for the system to appropriately filter incidents by the managing office for the logged in staff member.

Go to Agency > Staff & Security > Staff Information > Staff Profiles with Security.
In the toolbar, click Select Name and select a staff member.
In the Worker Profile section, under Managing Offices, click the plus sign and select a managing office.
Select the Incident Access? check box.
Click Save.

Add a managing office to a workgroup

To utilize incidents by managing office, you can set up a manual workgroup.

Go to Agency > Workgroups > Manually Assigned > Information.
In the toolbar, click Select Workgroup and select a workgroup.
In the Workgroup Information section, select the Use for Incident Access check box.
For the Site/Managing Office, select the appropriate managing office.
In the Programs that can use this Workgroup section, add each program that can assign the manual workgroup to clients enrolled in that program.
In the Enrollment Information section, enroll the worker role in the workgroup and assign a start date.
Click Save.

Select the default incident security access

An agency can choose to assign a default worker role for access to incidents at an agency level.

Go to Agency Setup > Agency > Agency > Agency Information.
In the Defaults for Security section, make the appropriate selections:
Default Incident Worker Role - The Default Incident worker role is used for any staff that does not have a specific incident worker role selected.
- Allow worker role to supersede existing view rights for Incidents - Select this check box to allow the specific worker role rights assigned to a staff member to take priority over the default agency-level selection. If this option is selected, the incident worker role identified in Staff Profiles with Security will override the default security.
- Incidents - Only Secured by Managing Office - If selected, the system can limit user access to incidents to only those associated with the managing or reporting office identified in the user's Staff Profiles with Security setup.
- Limit incidents by program - Select this check box to limit the incident search to those programs the staff member has access to as set up in staff security. The incidents need to be linked to a program.