Functional Administration Access and Role Rights Security Levels

Role Rights Model for OSCAR-CAISI

There are two frameworks of role rights in the OSCAR-CAISI case management system.  There is some overlap between role "permissions" set in OSCAR and role "access" set up in CAISI. A good rule to follow in the current version of the software is to use the following approach to role based access:

1. OSCAR system wide permissions: Apply OSCAR roles to determine which role has access to which system objects across the whole system. This is determined by OSCAR roles which can be created.
   
2. CAISI program based access rights: These allow you to customize the role rights that a user has that is program specific. This is determined by CAISI roles which can be created.

The user needs to have at minimum an OSCAR role defined in order to be able to log on. A CAISI role allows a user to gain rights and access within a program.

Applying Role Rights

The OSCAR and CAISI role rights can be applied to a user to set up a users access across the whole system and then further within a program. One simple and common structure is to have:

1. Administrators
2. regular users

You can set up different levels of administrators who can perform administrative functions in the system that are system wide or program specific. These administrative levels can be set up through a combination of OSCAR and CAISI role rights. Regular users who have no administrative privileges can also be set up through a combination of OSCAR and CAISI role rights.

Administrators

Administrators are able to access functional areas of the CAISI system that regular users cannot. Access to these functions is set within the OSCAR object Role/Rights functionality.

 The following is a list of administrator functions that may relate to administration for which access should be restricted:

Administrator Functional Access

1. Ability to access facility messages interface
   
2. ability to access system messages interface
   
3. ability to access manage beds screen
4. ability to access manage facilities screen
5. ability to access program list screen
6. ability to access agency information screen
7. ability to access staff list screen in PMM administration section
   
8. ability to access program list screen
   
9. ability to access add program screen
10. ability to access global role access
11. ability to access admin page screen
12. ability to set up 2 Factor Authentication for a computer or a user
13. ability to access user created forms page
14. ability to access staff tab in program edit page
    

Suggested Admin Level Functional Access

System Administrator

All access to all administrative areas

Facility Administrator

1. Ability to access facility messages interface
   
2. ability to access manage beds screen
3. ability to access manage facilities screen
4. ability to access program list screen
5. ability to access agency information screen
6. ability to access staff list screen
   
7. ability to access add program screen
8. ability to set up 2 Factor Authentication for a computer or a user
9. ability to access user created forms page
10. ability to access staff page in provider in a program

Program Administrator

Shelter User