About security roles and access

Access to information in TFACTS is carefully controlled by the user ID, user groups, and security profiles.

User security assignments

User groups are assigned to workers in order to give them access to specified functions in TFACTS. User groups consist of security profiles, which define the type of access allowed within a business process or system function. For example, an intake screener is assigned a user group that lets him or her record intakes in TFACTS but that access does not allow editing of case records.

In addition, the user groups determine what screens a user sees in TFACTS. Information one user sees in the system may be different from another user, because different workers are assigned different user groups.

User groups are associated with the worker's name, user ID, and organization. In TFACTS, an organization is an entity where groups of users perform related job functions. An organization may be defined according to a physical location and function, such as "DCS Central Intake." Some users may be assigned to more than one organization. If a worker performs work for more than one organization, his or her access may be different for each organization.

User group and security profile maintenance

Each organization identifies a number of user groups, which categorize types of workers according to the work they do in the system. In addition, there may be State-level or State-exclusive user groups. As a State security administrator, you can update these user groups for State and organization use. As an organization security administrator, you update the user groups defined by your own organization.

The user group consists of one or more security profiles. A security profile defines the tabs and screens to which access is allowed. Security profiles may be established for State or organization use. Security profiles are established first, and then selected on the user group record.

See also:

Create a new user

Create or update user groups

Assign user groups to a worker

Update employee access to business processes

Suspend a worker's access to the system