Controlling access rights is a central function of a Laboratory Information Management System (LIMS). The access rights in the Labordatenbank dictate which employees may perform particular actions and for whom particular customers, orders, and samples are visible.
There are two levels for stipulating the access rights in the Labordatenbank: one derived from the employee access rights and another case-related restriction on data visibility.
Access rights: Assign rights
User rights are found under Settings Access rights.The functions available to each employee are defined in a clear table. For example, an intern may only be allowed to enter values whereas an experienced employee can define new parameters.
① In the first column, all possible access rights are listed and categorized.
② In the second column, access rights can be granted under a conditional qualification.
Example: Only employees who possess the qualification
Management of QM Documents can be granted the access right
Create/Edit Employee Groups.
In the third column, selected
Mitarbeitergruppen (a list of employees) can be given access permissions.
The permissions
are not displayed as green icons for individual assignments starting from column 4.
③ From the fourth column onwards, access rights can be changed by clicking on the symbol in the employee column. On the far right, there is a column
All, which is for assigning access permissions to all employees.
To change an access right, click on the symbol in the relevant function row in the employee column. Please note that you need the access right
Edit Access Rights to do this.
④ Under the button
Select User, access rights for individual employees can be chosen and displayed.
⑤ To ensure enhanced security, starting from January 1, 2024, specific accesses involving extensive insights (e.g., Audit Trail) or data modifications (e.g., editing parameters) will require an account with Single Sign-On (SSO) or Multi-Factor Authentication (MFA).
Access rights: Limit visibility
You can also limit which customers, samples, and orders are visible for specific employees or employee groups. The visibility limitation is managed directly for each order and customer. All samples belonging to an order with limited visibility are subject to the same restrictions.
Tip: Save time by assigning viewing rights for classified orders to employee groups
Mitarbeitergruppen rather than selecting each employee individually.
Siehe:
Mitarbeitergruppen,
Mitarbeiter archivieren