Difference between revisions of "Users"

From Charitylog Manual
Jump to: navigation, search
(Created page with "{{template:admincomingsoon}} __TOC__ Since Charitylog is based online, and the whole organisation has access to the information stored on it, it is important that user acces...")
 
(Security)
 
(116 intermediate revisions by 6 users not shown)
Line 1: Line 1:
{{template:admincomingsoon}}
+
[[File:helpheader_small.png|right]]
 +
 
 +
 
 +
[[File:Admin_users.PNG]]
 +
 
  
 
__TOC__
 
__TOC__
  
Since Charitylog is based online, and the whole organisation has access to the information stored on it, it is important that user access is well controlled.
+
=User Set Up Overview=
  
We suggest that it is a good idea to be as lenient with access as possible, and to trust staff as much as possible. If you try to tightly control every single user with a set of complicated rules about what they can and can't see, it is likely to lead to an awful lot of extra work for administrators. However, there is plenty of control if you need it. Ultimately the degree to which you control access is entirely up to you.
+
All users require an account to access the system, which needs to be set up by a system administrator or any user with access to 'create new' (This is found under group access). We advise that all users have an individual account each for auditing and recording purposes. Each user account must be unique and you cannot use a user name twice. To find a list of all user records you have set up, you need to go to 'Users' under 'User Access' within the settings menu. There is also an option in the top right hand corner to 'Relist including inactive users', which enables you to view inactive user records.
 +
Once you have made a user record inactive, the user will be unable to log in. The following webinar explains the process:
  
There are three ways to limit user access within Charitylog.
+
{{#ev:youtube|S_Xp2MIc4Js|790}}
  
 +
[[File:Users_list.png]]
  
==Creating a user account==
+
=Editing a User Account=
In the munu search box, to the left of the settings cog (top right hand corner), type 'Users' (without the quotes).
 
This will search the menu and display the users link.
 
  
[[File:Admin_users.PNG]]
 
  
Click on Users on the displayed menu, this will take you to the list of current users. By default the display list will on show active users that can login to your system.
+
To edit an existing user, go to the User list and select the appropriate users name. From here you can make amendments to the users record, including changing the users password. Personal tab access, project access and branch access are the main access options that are only controlled under the '''individual user record.''' Other access options include website and call round access.
 +
 
 +
 
 +
==General Details Tab==
 +
 
 +
[[File:General_Users.png|1200px]]
  
===How to create a new user===
 
At the bottom of the list of users (you may need to scroll down the page) click on the button 'Create New User'
 
  
[[File:Admin users create.PNG]]
+
===Edit General User Details===
You will then be taken to the create new user page.
 
====General Details====
 
On the general details tab you will find the following options to complete;
 
  
'''Full Name (used in reports and lists)''': Enter the person's full name
+
The system can be set to use Usernames and Passwords of a certain length and type, see [[Operational Rules]] for full details.
  
Example:
+
'''Full Name (used in reports and lists)''': Enter the person's full name.  Example:
 
  John Smith
 
  John Smith
  
'''Username (used for logging in)''': This is case sensitive and the user will need this to login.  The username must follow the organisation settings in [[Operational Rules]]
+
'''Username (used for logging in)''': This is case sensitive and the user will need this to login.  Example:
 
 
Example:
 
 
  JSmith
 
  JSmith
 
 
 
 
'''Password''': Enter a password for the user to use, this is case sensitive and must follow the organisation settings in [[Operational Rules]]
+
'''Password''': Enter a password for the user to use, this is case sensitiveExample:
Example:
 
 
  DJ345DCF
 
  DJ345DCF
  
'''Retype Password''': This must match the password typed in the previous box.
+
'''Retype Password''': This must match the password typed in the previous box. Example:
Example:
 
 
  DJ345DCF
 
  DJ345DCF
  
 
'''Change password at next login''': Tick this box if you want the user to change the password you have set for them when they first log in.
 
'''Change password at next login''': Tick this box if you want the user to change the password you have set for them when they first log in.
  
'''Work Email Address''': Enter the user's work email address.
+
===Contact Details===
  
'''Work Telephone Number''': Enter the user's work contact number.
+
* '''Work Email Address''' - Enter the user's work email address.
 +
* '''Work Telephone Number''' - Enter the user's work contact number.
 +
* '''Work Mobile Number''' - Enter the user's work mobile number.
  
'''Work Mobile Number''': Enter the user's work mobile number.
+
===User Admin===
  
'''Password Recovery Email Address''': You can specify an email address, so the user can reset their password, if forgotten.  If left blank then it will be the responsibility of your Administrators, to change the password for the user.  Please note that Charitylog support cannot access user passwords, nor can they change these for users.  You can use the copy button on the right to use the work email address above. [[File:Admin_users_copy.PNG]]
+
* '''Password Recovery Email Address''' - You can specify an email address, so the user can reset their password, if forgotten.  If left blank then it will be the responsibility of your Administrators, to change the password for the user.  Please note that the support team cannot access user passwords, nor can they change these for users.  You can use the copy button on the right to use the work email address above. [[File:Admin_users_copy.PNG]]
 +
* '''Group''' - Select the appropriate security group.  See [[Group Access]] for details on how to set up these security groups.  If you click on the button for [[Group Access]], this will navigate away from this page and any changes will be lost.
 +
* '''Internal Support User''' -  If you set the user as an Administrator you can specify that they are an Internal Support User.  This will display their contact details on the login screen, if a user gets the login credentials wrong.  If you have an existing user that is set as an Internal Support User that is not an administrator then simply add them to the Administrators group set this option to 'No' and then change the group back.
 +
* '''Create New Org/Person Record or Link to Existing?''' -  Each user record must have an associated Person/Organisation record.  This is used to save time sheet information in the background, required for reporting.  You can select to link to an existing record (this will display a list of records below the option) or to create a new record.
  
'''Group''': Select the appropriate security group.  See [[Group Access]] for details on how to set up these security groups.  If you click on the button for [[Group Access]], this will navigate away from this page and any changes will be lost.
+
===Accessibility and Navigation===
  
'''Internal Support User''': If you set the user as an Administrator you can specify that they are an Internal Support UserThis will display their contact details on the login screen, if a user gets the login credentials wrong.
+
* '''Contrast''' - This allows the users to define a comfortable page contrast.
 +
* '''Page Tint''' - The background of the system is very light. The page tint can be used to reduce the brightness of the background.
 +
* '''Layout Density''' - Setting the Layout Density to Standard decreases the gap between fields for users. This is useful if using magnifying software to access the system.
 +
* '''Use Access Keys''' - Access keys are keyboard shortcuts to enable navigationSet to yes if the user requires Access Keys.
 +
*'''Text Size''' - Increase or decrease the text size for buttons and text across Charitylog. It is recommended for users to alter the text size before using zoom functions on the browser to optimise usage.
 +
*'''Home Page''' - Define the page the user lands on when selecting the home icon or logging in. NOTE FOR ADMINISTRATORS: *Make sure the user has full access to the page defined as their Home Page, or they may have difficulty logging in.*
 +
* '''Use Favourites?''' - The system has a [[Favourites]] page, specify if the user can use favourites.
  
'''Home Page''':  Use this drop down to specify which page the user will land on, once logged in.  For most users the individual action list is recommended.  Via [[Group Access]] you can allow users to change their own home page.
+
===Security===
  
'''General Display Style''':  This is useful if the user has difficulties seeing or reading from a computer display.
 
  
'''Page Tint''': The background of the system is very lightThe page tint can be used to reduce the brightness of the background.
+
* '''Which Organisations and People are Visible?''' - This feature allows you to restrict the user to see certain records depending on how they interact with them. You may need to activate this feature in [https://wiki.dizions.co.uk/index.php/Operational_Rules Operational Rules], in the Security section.
 +
** '''See All Clients''' - No restriction set.
 +
** '''See Own Clients Only''' - Restricts the user to see only records based on the 'Who counts as own clients?' optionIf this option is is not available, see the security tab of operational rules.
 +
** '''Which Clients are Visible?''' - This is a multi-select so that you can tailor what best suits the above restriction. The options are listed below:
  
'''Create New Org/Person Record or Link to Existing?''':  Each user record must have an associated Person/Organisation record.  This is used to save time sheet information in the background, required for reportingYou can select to link to an existing record or to create a new record, that is appropriate for this user.
+
*** '''Can access a Project for which the Client has a referral''' - this means, they will see all clients that have been referred to the project(s) they have access to.
 +
*** '''Created the Client Record''' - If the user created the record they will see the record.
 +
*** '''Has Recorded a Contact or has an outstanding action for the client''' - If the user created a referral for the person, previously added a contact (before this feature was activated) or has been given an action to do on a referral, they will see this record.
 +
*** '''Is the Additional Organisation or Person on a referral for the client''' - If the user has been assigned to the actual referral.
 +
*** '''Is the Handyperson on a Job Card''' - If the user has been assigned a Job Card on a Handyperson Job they will see the record.
 +
*** '''Is the Roster Worker on a Job Card''' - If the user has been added to a plan with jobs they will see the record.
 +
*** '''Is the Staff/Volunteer on a Job Card''' - If the user has been assigned to a Job Card via the Record A Contact.
 +
*** '''Is viewing their own person record''' - if the user is looking at their own record. Especially useful for staff and volunteers so they can interact with their own record.
 +
*** '''Is the Usual Support Worker for the client''' - If the Usual Support Worker is active and the user has been selected they will see the record.
 +
*** '''Is the Usual Volunteer for the client''' - If the user has been selected as the Usual Volunteer for a Project on the project tab they will see the record.
 +
*** '''Is a representative of the Main Referrer or the Referrer for the client''' - Originally this was the Limited Access Referrer feature.  If the user is connected to a referrer that is the Main Referrer (or has referred the client on a referral) they will see the records for the referrer and specified referrals where they are the referrerWhen this option is selected you will then need to specify the referrer that the user is connected to.
 +
* '''Outcome Star user?''' - This require licences from Triangle for the Outcome Star.  Set to yes if this user has a licence.
 +
* '''Copy Favourites from Another User''':  Use this to copy another user's favourites.
 +
* '''Allowed to Enter Project Sub-categories?''' - If you use [[Project Subcategories]] then specify if this user is allowed to enter [[referral|referrals]] in these subcategories.
 +
* '''Allowed to Delete Extension Database Records?''' - This will allow the user to delete information in [[Extension Databases| Extension Database]] recordsDeleting this data cannot be undone.
 +
* '''Allowed to Create Private Notes?''' - If this user is set to no they will not be able to create or see private notes.
 +
* '''Active User?''' - This means the user account is enabled, if set to No, the user will not be able to access the system.
  
'''Is this user a Referrer With Referrer Only Access - Select Referrer''': For a standard user, leave this set to 'Not a limited access referrer'.  If you are providing access for a third party organisation, select the organisation from the drop down list.
+
===Users with restricted access===
 +
{{#ev:youtube|6-79lwUNs6A|790}}
  
'''Outcome Star user?''': If you have licences available to use for the [[Outcome Star]], you can specify this user to have access to use these stars.
+
==Referrals/Actions Settings==
  
'''Allowed To Use Favourites?''':The system has a [[Favourites]] page, specify if the user can use favourites.
+
===Action List===
 
+
The [[Action_List|Action List]] displays the referrals on the systemThis list can be tailored per user, so that they can see outstanding work, completed work and work of team membersThe below settings control the default view for the user, which the user can change when required.
'''Copy Favourites from Another User''':  Use this to copy another user's favourites.
 
 
 
'''Allowed to Enter Project Sub-categories?''':  If you use [[Project Subcategories]] then specify if this user is allowed to enter [[referral|referrals]] in these subcategories.
 
 
 
'''Allowed to Delete Extension Database Records?''': This will allow the user to delete information in [[Extension Database]] recordsDeleting this data cannot be undone.
 
 
 
'''Allowed to Create Private Notes?''': This will allow the user to have hidden notesSee [[Organisations_And_People#Extra_functionality_.28bottom.29|Private Notes]] for details.
 
 
 
'''Active User?''': This means the user account is enabled, if set to No, the user will not be able to access the system.
 
  
 +
[[File:Referrals_Access.PNG|1050px]]
  
====Referrals/Actions Settings====
+
* '''Own, Selected or All Users''' - This will set the default of the [[Action_List|Action List]] so the selected option will be first displayed.  If you have created a user as a group, you can select the new user and the group user.
 
 
=====Action List=====
 
The [[Action_List|Action List]] displays the referrals on the system.  This list can be tailored per user, so that they can see outstanding work, completed work and work of team members.  The below settings control the default view for the user, which the user can change when required.
 
 
 
'''Own, Selected or All Users''': This will set the default of the [[Action_List|Action List]] so the selected option will be first displayed.  If you have created a user as a group, you can select the new user and the group user.
 
 
Example
 
Example
 
  P Jones
 
  P Jones
 
  Advice Team
 
  Advice Team
 +
* '''Days to show into Past''' - This will display the number of days in the past that the user will see on their [[Action_List|Action List]].  If you are setting the user to see their own outstanding actions, you may wish to use 9999.  Setting the display to 9999 will then show all outstanding work, prompting the user to complete this work.
 +
* '''Days to show into Future''' - This will show the future actions, work that is upcoming.  You may wish to consider 7 to 14 days, this will show the upcoming actions in the near future. 
 +
* '''View Selection''' - Here you can specify what type of actions the user will see.  Generally it is recommended that the user is displaying the outstanding actions by default, showing their current work load.
 +
* '''Previous or Default?''' - This will determine how the [[Action_List|Action List]] will be displayed when the user next logs in to the system.  Set to default will mean the configuration set here will be used, previous will remember any changes the user has made.
 +
* '''List Order''' - Here you can set if the user will see the oldest actions at the top, or the newest.  You may wish to set this to oldest, this will display older outstanding work at the top of the list.
  
'''Days to show into Past''': This will display the number of days in the past that the user will see on their [[Action_List|Action List]].  If you are setting the user to see their own outstanding actions, you may wish to use 9999.  Setting the display to 9999 will then show all outstanding work, prompting the user to complete this work.
+
===History Tab===
 
 
'''Days to show into Future''': This will show the future actions, work that is upcoming.  You may wish to consider 7 to 14 days, this will show the upcoming actions in the near future. 
 
 
 
'''View Selection''': Here you can specify what type of actions the user will see.  Generally it is recommended that the user is displaying the outstanding actions by default, showing their current work load.
 
 
 
'''Previous or Default?''':  This will determine how the [[Action_List|Action List]] will be displayed when the user next logs in to the system.  Set to default will mean the configuration set here will be used, previous will remember any changes the user has made.
 
 
 
'''List Order''':  Here you can set if the user will see the oldest actions at the top, or the newest.  You may wish to set this to oldest, this will display older outstanding work at the top of the list.
 
 
 
=====History Tab=====
 
 
These settings determine how the [[referral|referrals]] will be displayed on a Person or Organisation record.
 
These settings determine how the [[referral|referrals]] will be displayed on a Person or Organisation record.
  
'''Referral Order''': This determines which order the [[referral|referrals]] are displayed.  Generally you may wish to select Referral Date (Newest On Top), this will show the latest [[referral]] at the top of the history tab.
+
* '''Referral Order''' - This determines which order the [[referral|referrals]] are displayed.  Generally you may wish to select Referral Date (Newest On Top), this will show the latest [[referral]] at the top of the history tab.
 +
* '''Order of Actions Within Each Referral''' - This will show how the individual actions are displayed under the [[referral]] header.
 +
* '''Remember filter choices''' - The history tab has selection filters for Projects and Referrals/Cases.  You can set that the user will have the filters remembered from the last record visited.
  
'''Order of Actions Within Each Referral''': This will show how the individual actions are displayed under the [[referral]] header.
+
===Referrals Diary===
 
 
=====Referrals Diary=====
 
 
This is a deprecated feature and is no longer available on the system.
 
This is a deprecated feature and is no longer available on the system.
  
====Project Access====
+
==Project Access==
The Project Access tab shows which projects the user is allowed to view and edit.
+
The Project Access tab shows which projects the user is allowed to enter view and edit.
 
 
  
[[File:A_access_8.png|790px|border]]
 
  
 +
[[File:Project_Access.PNG|1050px]]
  
If the top two radio buttons are filled in (for "User has Unrestricted Access (i.e. can see/edit all projects)"), the user will be able to see and edit everything on the system.
 
  
 +
You can specify if a user has:
 +
* '''Full Access (Except Enter New Referrals)'''
 +
** User has Unrestricted Access (i.e. can see/edit all projects)''' - The user will be able to view and edit existing referrals on the actions list and on the history tab.  The option 'Hide referrals in History tab' is '''not''' available when a user as this access set.
 +
** '''User has Restricted Access (i.e. can see/edit only projects below)''' This restricts the user to the projects listed in the section underneath and at least one project '''must''' be selected..  Under the Full Access column select the projects you wish the user to have full access to (to view or edit on actions list and history page).  You can also choose the option to 'Hide referrals in History tab', this will only display the summary and project details on the record.  If you select to hide on the history tab and the user has access to the 'Actions List' then they will still be able to view/edit the referral from here.
 +
* '''Enter New Referrals'''
 +
** '''User has Unrestricted Access (i.e. can see/edit all projects)''' - The user can create new referrals/cases for all projects, restricted by the [[Group Access]] for which people/orgs they can access.  If this is selected but full access is not granted the user will not see the referral/case once it has been saved.
 +
** '''User has Restricted Access (i.e. can see/edit only projects below)''' - The user will only have access to the projects selected on the list underneath and at least one project must be selected.
 +
* '''Hide referrals in History tab''' - This option only functions when the user has Restricted Full Access.
  
[[File:A_access_9.png|border]]
+
==Personal Details Section Access tab==
  
 +
Users can be restricted to viewing and editing the personal details section of a record, you can move sensitive data fields to the personal details section via [[Customise Orgs %26 People]].
  
If either of the bottom two radio buttons are filled in (for "User has Restricted Access"), you will need to specify which projects the user in question can work with.
 
  
If you want to let the user view and work with a project, but not enter new referrals, put a tick in the first column - "Full Access (Except Enter New Referrals)".
+
[[File:Personal_Tab_Access.png|1050px]]
  
If you want to also let the user enter new referrals, put a tick in the second column - "Enter New Referrals".
 
  
If you want to hide the detail of interactions with clients, but still show the fact that the client is active in a particular project, put a tick in the third column - "Hide Referrals In History tab". Tick this box if you want the user to be able to see simply that the client has had a referral for this project, but not see the outcome or the details of the contacts. '''This works irrespective of which other boxes you have ticked for this project.'''
+
To block a user from all Personal Details sections select the tick box for 'BLOCK ACCESS TO ALL "PERSONAL DETAILS" SECTIONS (This will override all settings below)'.
  
====Personal Tab Access tab====
+
If you wish to give them access to only some records then select the record type that they are '''allowed'' to view or edit.  This option above will over ride these settings.
  
This tab allows you to specify whether users have access to the details which are stored on the [[Organisations_And_People#Personal_Details_tab|Personal Details]] page of the Client Record. If you wish, you can also specify that a user can see these details, but not edit them.
+
==Branch Details (Requires [[Modules| Branch Module]])==
 +
This tab contains the access to the branches on the system.
  
Usefully, these settings do not mean that the user cannot enter these details as part of [[Input Field Rules]], so your users can enter information about somebody on first contact, after which it can be hidden from them.
+
[[File:Branch_Details_User.PNG|1050px]]
  
 +
* '''All Branches''' - When selected the user will have access to all branches.  If they are in the administrators group (General User Details) they will also be a full 'Branch Administrator', allowing them to change all branches and add/remove/edit users from all branches.
 +
* '''Individual Branches''' - The user will only have access to the selected braches.  If they are in the administrators group (General User Details) they will add/remove/edit users in the selected branches.
 +
* '''Set As Default''' - This allows a default branch to be selected, which the user will automatically log in to.  In addition to the default branch you can specify if the user can switch between the branches that they have access to (on the left).
 +
* '''Groups of Branches (Views''') - You can specify a [[Branch Groupings (Views)| group of branches]] that they have access to.  If they are in the administrators group (General User Details) they will add/remove/edit users in the branches of the selected group(s).
 +
* '''Further Visibility Settings'''
 +
** '''Organisation and People Visibility In Extended Searches''' - This allows you to specify which records the user will have access to.
 +
** '''Allow user to see referrals across all visible branches?''' - This allows you to specify what referrals/cases are visible on the record history tab.
 +
** '''User can switch between branches'''
 +
*** '''Yes - User can switch branches''' - This will allow the user to change from the default branch and access the branches specified on the left tick boxes.
 +
*** '''No - user is locked to their default branch''' - The user will not be able to change branches.  They will see data from the selected branches based on the security options above.
  
[[File:A_access_10.png|790px|border]]
+
==CRM and Call-round access==
 +
This section allows you to specify if the user can access the system, including what days and if they can access the system via the Call Round App (requires the [[Modules| Roster Module and Call Round App]]).
  
===Copying an existing user===
 
  
As an administrator, you can choose to copy an extisting user or create a new user from scratch.  On the list of existing users, identify a user you wish to copy.  Click on the Copy Icon at the end of the row; [[File:Admin_users_copy.PNG]].  This will copy the security, project and system access settings from the existing user, to the new user.
+
[[File:CRM_Access.PNG|1050px]]
  
On the following page, complete the details on the General User Details tabWhen you have finished you can Save Details and Close, taking you back to the user list, or Save and go to the associated person/org record.
+
* '''Charitylog/Crossdata''' - select the tick box at the top to give access to the systemYou can then specify which days and at what times the user can log in.
.
+
* '''Call Round''' - If the user is only using the Call Round app you can leave the Charitylog/Crossdata option unticked and tick the Call Round.  Once selected you will need to enter a pin number for the user to use when the Call Round App is opened.  You can specify an expiry date, the user will then no longer be able to use the Call Round App.
For full details of each tab, please see [[User_Access_Management#General Details|Creating a new client]]
 
  
 +
==3rd Party System Access (Obtaining Org and User API keys)==
 +
The system uses an  Application Program Interface (API) which enables it to communicate securely with other software packages.
  
[[File:Admin_users_save.PNG]]
+
[[File:System_Access.png|1050px]]
  
==Changing details and access for an existing user==
+
This section will display the APIs connected to the system.
  
In the menu search box, to the left of the settings cog (top right hand corner), type 'Users' (without the quotes).
+
This will search the menu and display the users link.
+
To enable the user to use this API you need tick Enable, this will produce the keys required for the API integration.  The source key would have been supplied via Text message when first ordered. Once you have revealed the keys for use, save and close the record.
  
 +
'''Important - If you untick enable this will automatically delete the current keys without saving the record.  If you tick Enable this will produce new unique keys.'''
  
[[File:Admin_users.PNG]]
+
When setting up a user for these integrations it is worth considering Website access.  If you have a user that only uses the integrated system they can be set not to be able to log on to this system.  This will allow the integrated application to communicate using the security specified by this user account.  If you have a user that logs in to this system and pass data to the integrated application then they would need Website access (previous tab) and the integration (selected on this tab).  For each integration there is a reveal button for both the Org and User keys.  These keys are then added to the 3rd Party applications users.
  
 +
=Copying an existing user=
  
Click on Users on the displayed menu, this will take you to the list of current users. By default the display list will on show active users that can login to your system.  If the user is not displayed, click the 'Relist Including Inactive Users' button in the top right of the page.
+
There are two methods to copy a user account.
On the user you wish to change, simply click on their full name.
+
* The first method is to click on the copy icon to the right of an existing icon.
For full details of each tab please see [[User_Access_Management#General Details|Creating a new client]].
+
* The second method is to click the 'Create New User' button, select the user you wish to copy from in the copy user drop down list and click the copy button.
  
 +
You will then need to complete:
 +
* '''Full Name (used in reports and lists)'''
 +
* '''Username (used for logging in)'''
 +
* '''Password'''
 +
* '''Retype Password'''
 +
* '''Work Email Address'''
 +
* '''Work Telephone Number'''
 +
* '''Work Mobile Number'''
 +
* '''Password Recovery Email Address'''
 +
* '''Create New Org/Person Record or Link to Existing?'''
  
 +
Once finished click on the 'Save Details and Close' button.
  
 +
=Batch Options for All Users=
 +
Batch options allow you to update all users:
 +
* '''Force all users to change their password at next login'''
 +
* '''Change all user home pages to'''
  
 +
Simply select the option you wish and click the 'Run Option' button, you will then be prompted to enter a phrase to agree to the update.
  
===Group Access screen===
+
=See My Own Organisations/People=
 +
As default, if you grant access to particular record types in [https://wiki.dizions.co.uk/index.php/Group_Access_Rights Group Access]a user will be able to see all records. There may be scenarios where you only want users to access certain client records, for example if they have been allocated a client, or have an outstanding action etc. To enable this, first you need to enable the option in [https://wiki.dizions.co.uk/index.php/Operational_Rules Operational Rules], on the ''Security'' section, then enable ''Allow Creation of Users Who Can Only See Their Own Client'' by setting it to ''Yes''. Once enabled, you can edit a user permissions as you will see the below options:
  
The Group Access screen allows administrators to control what each User Group has access to throughout the Charitylog system. It is one of the most powerful tools that administrators have in running the system. We advise that when getting up and running, you start with the user groups that are already set up on the system, rather than creating new ones from scratch. In general it is best to keep the number of user groups to a minimum, as each group will require some administration and housekeeping - so, the simpler your system is, the better. Some organisations work with only one or two user groups, and there is no reason that this can't work perfectly well. If you need some guidance on how strict you should be with your user groups, discuss this with Charitylog support on 01989 763 691, or with your assigned trainer.
+
[[File:userrestrictedaccess.png]]
  
After clicking on the menu link, you will need to select which group you want to edit, and then click "Set Group Access Rights".
+
The following options are available. Bear in mind you can select more than one option by holding the CRTL key whilst selecting the options. Note that it will apply to all record types, not just client records.  
  
 +
* '''Can access a project for which the client has a referral''' - this means if they have restricted project access and a client has been referred to a project they have access to , they can see all of those clients.
 +
* '''Create the client record''' - can only see a client record when they created it.
 +
* '''Has recorded a contact or has an outstanding action for the client''' - has created a referral, or has an outstanding action.
 +
* '''Has an outstanding action for the client''' - can only see a client record when they have an outstanding action. Note when they action has been completed, they won't be able to see that client anymore
 +
* '''Is the Additional Organisation or Person on a Referral for the client''' - when the referral itself is assigned using the Additional Org option.
 +
* '''Is the Handyperson on a Job Card'''
 +
* '''Is the Staff/Volunteer on a Job Card'''
 +
* '''Is the Support Worker on a Job Card''' - useful if you want users to be able to update their own jobs, but not see other clients
 +
* '''Is the Usual Support Worker for the client'''
 +
* '''Is the Usual Volunteer Worker for the client'''
 +
* '''Is viewing their own person record'''
 +
* '''Is a representative of the Main Referrer or the Referrer on a Referral for the client'''
 +
----
 +
[[File:helpheader_small.png|right]]
  
[[File:A_access_12.png|border]]
+
Keywords: creating users add users new user
 
 
 
 
This will take you to a screen with a series of tabs across the top - each tab relates to a different area of the system. Each tab has three columns below it (or occasionally four if there is a "delete" option available);
 
 
 
* View - controls whether the usergroup can see this part of the system
 
* Create new - controls whether the usergroup is allowed to add to this part of the system
 
* Edit - controls whether the usergroup is allowed to change previously added parts of the system
 
* Delete - controls whether the usergroup is allowed to delete these sections.
 
 
 
Exactly how each "line" in Group Access relates to the system itself is variable. If somebody does not have access to a part of the system, and it seems that they should have it, a Group Access setting is very likely to be the issue. It is easiest to address these issues with the person in question logged in to Charitylog on one computer, and you (the administrator) logged in on another. Have a look at Group Access, starting from the relevant tab if you can narrow it down. Tick boxes, ask the other user to refresh their browser window, and then try to access the feature they need. If this does not work, reset the tick boxes and move on to something else.
 
 
 
* Note: remember you can always call the support line on 01989 763 691 for help with Group Access.
 
* Note of caution: if you are an administrator, do not un-tick the "Administration" view access boxes on the "Administration" tab. This will disallow access to the Administration menu itself for the Administrator usergroup, meaning that you will not be able to get back into Group Access and reset it! If this happens, you will need to call the support line, and one of our team will reset the permissions for you.
 
 
 
At the top of the Group Access screen is a tick box, as shown:
 
 
 
 
 
[[File:A_access_13.png|border]]
 
 
 
 
 
Ticking this box will select every option on all tabs. You may like to create a special "Chief Executive" usergroup or similar, just for your CE, so that somebody in the organisation always has access to everything.
 
 
 
 
 
===Deleting user groups===
 
 
 
Clicking on "Group Access" displays the groups that are set up on your system. You may wish to delete old or obsolete groups. Next to each group is text telling you how many users are in that group, or a red cross. Clicking on the red cross will delete the group in question.
 
 
 
 
 
[[File:A_access_23.png|border]]
 
 
 
 
 
You will not be allowed to delete a user group until all users have been moved out of it. '''This includes inactive users''', so you may like to create an "Old Users" group with no permissions, and move all inactive users into this group when you make them inactive. This will allow you to delete groups which are not being used any more.
 
 
 
==Limiting access to a specific document, etc==
 
 
 
===Uploaded documents===
 
 
 
Uploaded Documents are files which you upload to keep in the same place as somebody's details. They are usually used with clients, to upload scanned forms, risk assessments and so on, but you can upload documents to any person/organisation in Charitylog if you wish. When you upload a document, you can specify who is able to see this document after upload. Click on the "Uploaded Documents" button on the person/organisation's Details screen (Client Details screen shown).
 
 
 
 
 
[[File:A_access_14.png|border]]
 
 
 
 
 
The button shows how many documents are uploaded, if any. Click on the button to see the list of uploaded files, then click the "Upload Document" button to upload a new one.
 
 
 
 
 
[[File:A_access_15.png|border]]
 
 
 
 
 
At the bottom of the page will be a box headed "Users These Documents Will Be Visible To". Here you can set who will be able to see the document. You can select usergroups, individual people, or a combination of both (e.g. you can make a document available to all administrators, plus two other particular members of staff). You can do this by holding the "ctrl" button (PC) or "Command" (Mac) and clicking the combination of people you want. You can also use shift-click (PC or Mac) to select a range.
 
 
 
 
 
[[File:A_access_16.png|border]]
 
 
 
 
 
Once you have selected all the required options and the document to be uploaded, click "Save Details". Note: if you do not select yourself when you specify who the document is to be visible to, once it is uploaded you will not be able to see it. This may be appropriate, but more often you will want to keep documents that you upload visible to yourself. If you are about to save a document which will be invisible to you, you will see this error message.
 
 
 
 
 
[[File:A_access_17.png|border]]
 
 
 
 
 
For more details of how to use Uploaded Documents, see the end user manual: [[Office_Functionality#Uploaded_Documents|Uploaded Documents]].
 
 
 
===Private Notes===
 
 
 
Earlier in this chapter you saw how to enable users to create [[User_Access_Management#Allowed_to_Create_Private_Notes.3F|Private Notes]]. Private Notes are simply pieces of text, and there is no reporting available on them. They are usually used to record sensitive, personal or private information about a person/organisation. When you create a private note, you will probably want strict control of who will be able to see this information once it is added to the system. As with Uploaded Documents, there is control over visibility of every note.
 
 
 
Clicking on the "Private Notes" link at the bottom of the any Details screen will show the notes that are already stored for this person/organisation, if there are any. Click the "Create New Notes" button to create a new one.
 
 
 
 
 
[[File:A_access_18.png|border]]
 
 
 
 
 
At the bottom of the resulting screen will be a field headed "Staff Access".
 
 
 
 
 
[[File:A_access_19.png|border]]
 
 
 
 
 
In this box you can select groups, individual users, or both. Use the "ctrl" key (Windows) or "Command" key (Mac) to select as many as you need. Remember to select yourself, or the note will be invisible to you once you have saved it. If you try and save a note without having made it visible to yourself, you will see the following error message.
 
 
 
 
 
[[File:A_access_20.png|border]]
 
 
 
===Extension Databases===
 
 
 
Extension Databases have control over who can see them. Click on the name of the Extension Database.
 
 
 
 
 
[[File:A_access_21.png|border]]
 
 
 
 
 
At the bottom of the resulting screen is a field labelled "Available to users in these groups", where you can control who will be able to see the Extension Database. Unlike Uploaded Documents or Private Notes, Extension Databases can only have their visibility controlled by usergroup, not by individual user.
 
 
 
Select the groups you want the Extension Database to be visible to.
 
 
 
 
 
[[File:A_access_22.png|border]]
 
 
 
 
 
----
 
[[File:helpheader_small.png|left]]
 
[[Category:Delete]]
 

Latest revision as of 09:18, 17 April 2024

Helpheader small.png


Admin users.PNG


User Set Up Overview

All users require an account to access the system, which needs to be set up by a system administrator or any user with access to 'create new' (This is found under group access). We advise that all users have an individual account each for auditing and recording purposes. Each user account must be unique and you cannot use a user name twice. To find a list of all user records you have set up, you need to go to 'Users' under 'User Access' within the settings menu. There is also an option in the top right hand corner to 'Relist including inactive users', which enables you to view inactive user records. Once you have made a user record inactive, the user will be unable to log in. The following webinar explains the process:

Users list.png

Editing a User Account

To edit an existing user, go to the User list and select the appropriate users name. From here you can make amendments to the users record, including changing the users password. Personal tab access, project access and branch access are the main access options that are only controlled under the individual user record. Other access options include website and call round access.


General Details Tab

General Users.png


Edit General User Details

The system can be set to use Usernames and Passwords of a certain length and type, see Operational Rules for full details.

Full Name (used in reports and lists): Enter the person's full name. Example:

John Smith

Username (used for logging in): This is case sensitive and the user will need this to login. Example:

JSmith

Password: Enter a password for the user to use, this is case sensitive. Example:

DJ345DCF

Retype Password: This must match the password typed in the previous box. Example:

DJ345DCF

Change password at next login: Tick this box if you want the user to change the password you have set for them when they first log in.

Contact Details

  • Work Email Address - Enter the user's work email address.
  • Work Telephone Number - Enter the user's work contact number.
  • Work Mobile Number - Enter the user's work mobile number.

User Admin

  • Password Recovery Email Address - You can specify an email address, so the user can reset their password, if forgotten. If left blank then it will be the responsibility of your Administrators, to change the password for the user. Please note that the support team cannot access user passwords, nor can they change these for users. You can use the copy button on the right to use the work email address above. Admin users copy.PNG
  • Group - Select the appropriate security group. See Group Access for details on how to set up these security groups. If you click on the button for Group Access, this will navigate away from this page and any changes will be lost.
  • Internal Support User - If you set the user as an Administrator you can specify that they are an Internal Support User. This will display their contact details on the login screen, if a user gets the login credentials wrong. If you have an existing user that is set as an Internal Support User that is not an administrator then simply add them to the Administrators group set this option to 'No' and then change the group back.
  • Create New Org/Person Record or Link to Existing? - Each user record must have an associated Person/Organisation record. This is used to save time sheet information in the background, required for reporting. You can select to link to an existing record (this will display a list of records below the option) or to create a new record.

Accessibility and Navigation

  • Contrast - This allows the users to define a comfortable page contrast.
  • Page Tint - The background of the system is very light. The page tint can be used to reduce the brightness of the background.
  • Layout Density - Setting the Layout Density to Standard decreases the gap between fields for users. This is useful if using magnifying software to access the system.
  • Use Access Keys - Access keys are keyboard shortcuts to enable navigation. Set to yes if the user requires Access Keys.
  • Text Size - Increase or decrease the text size for buttons and text across Charitylog. It is recommended for users to alter the text size before using zoom functions on the browser to optimise usage.
  • Home Page - Define the page the user lands on when selecting the home icon or logging in. NOTE FOR ADMINISTRATORS: *Make sure the user has full access to the page defined as their Home Page, or they may have difficulty logging in.*
  • Use Favourites? - The system has a Favourites page, specify if the user can use favourites.

Security

  • Which Organisations and People are Visible? - This feature allows you to restrict the user to see certain records depending on how they interact with them. You may need to activate this feature in Operational Rules, in the Security section.
    • See All Clients - No restriction set.
    • See Own Clients Only - Restricts the user to see only records based on the 'Who counts as own clients?' option. If this option is is not available, see the security tab of operational rules.
    • Which Clients are Visible? - This is a multi-select so that you can tailor what best suits the above restriction. The options are listed below:
      • Can access a Project for which the Client has a referral - this means, they will see all clients that have been referred to the project(s) they have access to.
      • Created the Client Record - If the user created the record they will see the record.
      • Has Recorded a Contact or has an outstanding action for the client - If the user created a referral for the person, previously added a contact (before this feature was activated) or has been given an action to do on a referral, they will see this record.
      • Is the Additional Organisation or Person on a referral for the client - If the user has been assigned to the actual referral.
      • Is the Handyperson on a Job Card - If the user has been assigned a Job Card on a Handyperson Job they will see the record.
      • Is the Roster Worker on a Job Card - If the user has been added to a plan with jobs they will see the record.
      • Is the Staff/Volunteer on a Job Card - If the user has been assigned to a Job Card via the Record A Contact.
      • Is viewing their own person record - if the user is looking at their own record. Especially useful for staff and volunteers so they can interact with their own record.
      • Is the Usual Support Worker for the client - If the Usual Support Worker is active and the user has been selected they will see the record.
      • Is the Usual Volunteer for the client - If the user has been selected as the Usual Volunteer for a Project on the project tab they will see the record.
      • Is a representative of the Main Referrer or the Referrer for the client - Originally this was the Limited Access Referrer feature. If the user is connected to a referrer that is the Main Referrer (or has referred the client on a referral) they will see the records for the referrer and specified referrals where they are the referrer. When this option is selected you will then need to specify the referrer that the user is connected to.
  • Outcome Star user? - This require licences from Triangle for the Outcome Star. Set to yes if this user has a licence.
  • Copy Favourites from Another User: Use this to copy another user's favourites.
  • Allowed to Enter Project Sub-categories? - If you use Project Subcategories then specify if this user is allowed to enter referrals in these subcategories.
  • Allowed to Delete Extension Database Records? - This will allow the user to delete information in Extension Database records. Deleting this data cannot be undone.
  • Allowed to Create Private Notes? - If this user is set to no they will not be able to create or see private notes.
  • Active User? - This means the user account is enabled, if set to No, the user will not be able to access the system.

Users with restricted access

Referrals/Actions Settings

Action List

The Action List displays the referrals on the system. This list can be tailored per user, so that they can see outstanding work, completed work and work of team members. The below settings control the default view for the user, which the user can change when required.

Referrals Access.PNG

  • Own, Selected or All Users - This will set the default of the Action List so the selected option will be first displayed. If you have created a user as a group, you can select the new user and the group user.

Example

P Jones
Advice Team
  • Days to show into Past - This will display the number of days in the past that the user will see on their Action List. If you are setting the user to see their own outstanding actions, you may wish to use 9999. Setting the display to 9999 will then show all outstanding work, prompting the user to complete this work.
  • Days to show into Future - This will show the future actions, work that is upcoming. You may wish to consider 7 to 14 days, this will show the upcoming actions in the near future.
  • View Selection - Here you can specify what type of actions the user will see. Generally it is recommended that the user is displaying the outstanding actions by default, showing their current work load.
  • Previous or Default? - This will determine how the Action List will be displayed when the user next logs in to the system. Set to default will mean the configuration set here will be used, previous will remember any changes the user has made.
  • List Order - Here you can set if the user will see the oldest actions at the top, or the newest. You may wish to set this to oldest, this will display older outstanding work at the top of the list.

History Tab

These settings determine how the referrals will be displayed on a Person or Organisation record.

  • Referral Order - This determines which order the referrals are displayed. Generally you may wish to select Referral Date (Newest On Top), this will show the latest referral at the top of the history tab.
  • Order of Actions Within Each Referral - This will show how the individual actions are displayed under the referral header.
  • Remember filter choices - The history tab has selection filters for Projects and Referrals/Cases. You can set that the user will have the filters remembered from the last record visited.

Referrals Diary

This is a deprecated feature and is no longer available on the system.

Project Access

The Project Access tab shows which projects the user is allowed to enter view and edit.


Project Access.PNG


You can specify if a user has:

  • Full Access (Except Enter New Referrals)
    • User has Unrestricted Access (i.e. can see/edit all projects) - The user will be able to view and edit existing referrals on the actions list and on the history tab. The option 'Hide referrals in History tab' is not available when a user as this access set.
    • User has Restricted Access (i.e. can see/edit only projects below) This restricts the user to the projects listed in the section underneath and at least one project must be selected.. Under the Full Access column select the projects you wish the user to have full access to (to view or edit on actions list and history page). You can also choose the option to 'Hide referrals in History tab', this will only display the summary and project details on the record. If you select to hide on the history tab and the user has access to the 'Actions List' then they will still be able to view/edit the referral from here.
  • Enter New Referrals
    • User has Unrestricted Access (i.e. can see/edit all projects) - The user can create new referrals/cases for all projects, restricted by the Group Access for which people/orgs they can access. If this is selected but full access is not granted the user will not see the referral/case once it has been saved.
    • User has Restricted Access (i.e. can see/edit only projects below) - The user will only have access to the projects selected on the list underneath and at least one project must be selected.
  • Hide referrals in History tab - This option only functions when the user has Restricted Full Access.

Personal Details Section Access tab

Users can be restricted to viewing and editing the personal details section of a record, you can move sensitive data fields to the personal details section via Customise Orgs & People.


Personal Tab Access.png


To block a user from all Personal Details sections select the tick box for 'BLOCK ACCESS TO ALL "PERSONAL DETAILS" SECTIONS (This will override all settings below)'.

If you wish to give them access to only some records then select the record type that they are 'allowed to view or edit. This option above will over ride these settings.

Branch Details (Requires Branch Module)

This tab contains the access to the branches on the system.

Branch Details User.PNG

  • All Branches - When selected the user will have access to all branches. If they are in the administrators group (General User Details) they will also be a full 'Branch Administrator', allowing them to change all branches and add/remove/edit users from all branches.
  • Individual Branches - The user will only have access to the selected braches. If they are in the administrators group (General User Details) they will add/remove/edit users in the selected branches.
  • Set As Default - This allows a default branch to be selected, which the user will automatically log in to. In addition to the default branch you can specify if the user can switch between the branches that they have access to (on the left).
  • Groups of Branches (Views) - You can specify a group of branches that they have access to. If they are in the administrators group (General User Details) they will add/remove/edit users in the branches of the selected group(s).
  • Further Visibility Settings
    • Organisation and People Visibility In Extended Searches - This allows you to specify which records the user will have access to.
    • Allow user to see referrals across all visible branches? - This allows you to specify what referrals/cases are visible on the record history tab.
    • User can switch between branches
      • Yes - User can switch branches - This will allow the user to change from the default branch and access the branches specified on the left tick boxes.
      • No - user is locked to their default branch - The user will not be able to change branches. They will see data from the selected branches based on the security options above.

CRM and Call-round access

This section allows you to specify if the user can access the system, including what days and if they can access the system via the Call Round App (requires the Roster Module and Call Round App).


CRM Access.PNG

  • Charitylog/Crossdata - select the tick box at the top to give access to the system. You can then specify which days and at what times the user can log in.
  • Call Round - If the user is only using the Call Round app you can leave the Charitylog/Crossdata option unticked and tick the Call Round. Once selected you will need to enter a pin number for the user to use when the Call Round App is opened. You can specify an expiry date, the user will then no longer be able to use the Call Round App.

3rd Party System Access (Obtaining Org and User API keys)

The system uses an Application Program Interface (API) which enables it to communicate securely with other software packages.

System Access.png

This section will display the APIs connected to the system.


To enable the user to use this API you need tick Enable, this will produce the keys required for the API integration. The source key would have been supplied via Text message when first ordered. Once you have revealed the keys for use, save and close the record.

Important - If you untick enable this will automatically delete the current keys without saving the record. If you tick Enable this will produce new unique keys.

When setting up a user for these integrations it is worth considering Website access. If you have a user that only uses the integrated system they can be set not to be able to log on to this system. This will allow the integrated application to communicate using the security specified by this user account. If you have a user that logs in to this system and pass data to the integrated application then they would need Website access (previous tab) and the integration (selected on this tab). For each integration there is a reveal button for both the Org and User keys. These keys are then added to the 3rd Party applications users.

Copying an existing user

There are two methods to copy a user account.

  • The first method is to click on the copy icon to the right of an existing icon.
  • The second method is to click the 'Create New User' button, select the user you wish to copy from in the copy user drop down list and click the copy button.

You will then need to complete:

  • Full Name (used in reports and lists)
  • Username (used for logging in)
  • Password
  • Retype Password
  • Work Email Address
  • Work Telephone Number
  • Work Mobile Number
  • Password Recovery Email Address
  • Create New Org/Person Record or Link to Existing?

Once finished click on the 'Save Details and Close' button.

Batch Options for All Users

Batch options allow you to update all users:

  • Force all users to change their password at next login
  • Change all user home pages to

Simply select the option you wish and click the 'Run Option' button, you will then be prompted to enter a phrase to agree to the update.

See My Own Organisations/People

As default, if you grant access to particular record types in Group Accessa user will be able to see all records. There may be scenarios where you only want users to access certain client records, for example if they have been allocated a client, or have an outstanding action etc. To enable this, first you need to enable the option in Operational Rules, on the Security section, then enable Allow Creation of Users Who Can Only See Their Own Client by setting it to Yes. Once enabled, you can edit a user permissions as you will see the below options:

Userrestrictedaccess.png

The following options are available. Bear in mind you can select more than one option by holding the CRTL key whilst selecting the options. Note that it will apply to all record types, not just client records.

  • Can access a project for which the client has a referral - this means if they have restricted project access and a client has been referred to a project they have access to , they can see all of those clients.
  • Create the client record - can only see a client record when they created it.
  • Has recorded a contact or has an outstanding action for the client - has created a referral, or has an outstanding action.
  • Has an outstanding action for the client - can only see a client record when they have an outstanding action. Note when they action has been completed, they won't be able to see that client anymore
  • Is the Additional Organisation or Person on a Referral for the client - when the referral itself is assigned using the Additional Org option.
  • Is the Handyperson on a Job Card
  • Is the Staff/Volunteer on a Job Card
  • Is the Support Worker on a Job Card - useful if you want users to be able to update their own jobs, but not see other clients
  • Is the Usual Support Worker for the client
  • Is the Usual Volunteer Worker for the client
  • Is viewing their own person record
  • Is a representative of the Main Referrer or the Referrer on a Referral for the client

Helpheader small.png

Keywords: creating users add users new user