Role permission options (role-based access control)

⚠️ Important: This is currently a beta feature, available to a few CHR beta users in order to test and provide feedback. It will be available to more users once the beta period is complete.

When using role-based access control, you set default permissions for each user role and then assign that role, along with a resource set, to users. The role permissions define the operations allowed on the data specified in a resource set. For more information, refer to Managing user roles and Defining a resource set.

The following table describes the role permission options.

📌 Note: Permission options that are not described below are for TELUS Health use only.

Permission option	Description
Patients	Allows users to access the Patients area of the CHR and to search for and open patient charts. Available selections: All — provides permission for all of the items listed below. Create — add new patients. List — search for and return a list of patients. If this is not selected, the Patients icon does not appear in the main menu. Read — view patient charts. Update — make changes to patient charts. Delete — archive patient charts. Merge — merge patient charts. Reactivate — reactivate archived charts. Print — print chart information.
Appointments	Allows users to access the Schedules area of the CHR. Available selections: All — provides permission for all of the items listed below. Create — book appointments. List — search for and return a list of appointments. If this is not selected, the Schedules icon does not appear in the main menu. Read — view appointment details. Update — make changes to booked appointments. Delete — delete appointments. Logs — view appointment logs.
Encounters	Allows users to access the Encounters area of a patient's chart. Available selections: All — provides permission for all of the items listed below. Create — add new encounter notes List — view the list of a patient's encounters. Read — view encounter details. Update — make changes to encounters. Delete — delete encounter notes. Unlock — unlock and edit signed encounters.
Billing Dashboard	Allows users to access the Billing dashboard. Available selection: List — view the list of bills in the Billing dashboard. If this is not selected, the Billing dashboard icon does not appear in the main menu. 📌 Note: this does not affect a user's ability to create bills. That is set through the Public Billing and Private Billing permissions, below.
Referrals	Allows users to access the Referrals area of the CHR. Available selections: All — provides permission for all of the items listed below. List — view a list of referrals. If this is not selected, the Referrals icon does not appear in the main menu. Read — view referral details. Create — add new referrals. Update — make changes to referrals. Archive — archive referrals. Print — print referrals.
Injections	Allows users to access the Injections area of the CHR. Available selections: All — provides permission for all of the items listed below. List — view a list of injections. If this is not selected, the Injections icon does not appear in the main menu. Read — view injection details. Create — add new injections. Update — make changes to injections. Archive — archive injections.
Prescriptions	Allows users to access the Prescriptions area of the CHR. Available selections: All — provides permission for all of the items listed below. List — view a list of prescriptions. Read — view prescription details. Create — add new prescriptions. Update — make changes to prescriptions that have not been signed. Sign — sign a prescription. Cancel — cancel a prescription and delete draft prescriptions. Print — print, fax, and create PDFs of prescriptions.
Medications	Allows users to access the Medications area of the CHR. Available selections: All — provides permission for all of the items listed below. List — view a list of medications. Read — view medication details. Create — add new medications. Update — make changes to existing medications that have not been saved or signed. Cancel — stop medications.
Lab Results	Allow users to access the Lab Results area of the CHR, including Latest Lab Results. Also allows users to access electronic lab files and files tagged with Lab in the Inbox and Patient Files. All — provides permission for all of the items listed below. List — view a list of lab results. Read — view lab result details. Create — add new lab results. 📌 Note: You can only delete manually entered lab results if you have the Lab Results:Create permission. If you do not have this permission, the delete icon is greyed out.
Medical History	Allows users to access the Medical History section of the Health Profile. These permissions affect any areas where you can view medical history, such as in the patient summary and risk factors. All — provides permission for all of the items listed below. Read — view medical history entries. Create — add new medical history entries. Delete — delete medical history entries.
Surgical History	Allows users to access the Surgical History section of the Health Profile. These permissions affect any areas where you can view medical history, such as in the patient summary and risk factors. All — provides permission for all of the items listed below. Read — view surgical history entries. Create — add new surgical history entries. Delete — delete surgical history entries.
Family History	All — provides permission for all of the items listed below. List — view a list of family history entries. Read — view details of family history entries. Create — add new family history entries. Update — make changes to family history entries. Delete — delete family history entries.
Social History (Health Profile)	All — provides permission for all of the items listed below. List — view a list of social history entries. Read — view details of social history entries. Create — add new social history entries. Update — make changes to social history entries. Delete — delete social history entries.
Cases	All — provides permission for all of the items listed below. List — view a list of cases. Read — view case details. Create — add new cases. Delete — delete cases.
Contacts	Allows users to access the Contacts area of the CHR. All — provides permission for all of the items listed below. List — view a list of contacts and facilities. Required to create and manage referrals. Read — view contact and facility details. Create — add new contacts and facilities. Update — make changes to existing contacts and facilities. Delete — delete contacts and facilities.
Inbox	Allows users to access the Inbox area of the CHR. All — provides permission for all of the items listed below. Create — create a new inbox message. List — view a list of inbox messages. If this is not selected, the Inbox icon does not appear in the main menu. Read — view an inbox item. Update — make changes to an inbox message (such as marking as done).
Forms	Allows users to access to patients' forms in the CHR. All — provides permission for all of the items listed below. List — view lists of forms. Create — create new forms. Read — view forms and also view their modification history. Update — make changes to forms. Archive — archive or restore any forms. Print — generate, fax and print any forms and view their fax history.
Patient Files	Allows users to access to patients' files in the CHR. All — provides permission for all of the items listed below. List — view lists of patient files. Create — create new patient files. Read — view patient files and also view their modification history. Delete — delete (archive) patient files. 📌 Note: This does not affect a user's ability to view Patient Files in the Inbox. That is set through the Inbox permission.
Scheduled Qnaires	Allows users to access Scheduled Qnaires in the CHR. All — provides permission for all of the items listed below. List — view lists of scheduled Qnaires. Create — create new scheduled Qnaires. Read — view scheduled Qnaires. Delete — delete scheduled Qnaires. 📌 Note: This permission controls only scheduled Qnaires and does not affect manually sending Qnaires, Qnaire responses, attaching Qnaires to appointments, etc.
Letters	Allows users to access Letters in the CHR. All — provides permission for all of the items listed below. List — view lists of letters. Create — create new letters. Read — view letters. Update — make changes to letters. Delete — delete letters. Print — send letters and attach letters to messages or encounters.
Qnaire Responses	Allows users to access Qnaire Responses in the CHR, including attaching a Qnaire response and collecting data in the Qnaire section of an encounter. All — provides permission for all of the items listed below. List — view lists of Qnaire responses. Create — record Qnaire responses (Collect Data) during an encounter. Read — view Qnaire responses and attach Qnaire responses during an encounter. Update — make changes to Qnaire responses. Delete — delete Qnaire responses. Print — print Qnaire responses.

Feature permissions

Permission option	Description
Break glass on a Patient Chart	Allows users to gain access to a chart that is not included in their assigned resource sets.
Restrict access to a Patient Chart	Allows users to specify who has access to specific patient charts.
Force access on a Patient Chart	Allows users to gain access to a chart that is restricted.
Restrict access to an Encounter	Allows users to specify who has access to specific encounters in a patient chart.
Force access on an Encounter	Allows users to gain access to an encounter that is restricted.
Encounter: Owner Restricted Access	Prevents users from viewing and accessing all encounters for a patient, and only see encounters they created. This permission is off by default, meaning users with access to encounters can see all encounters for that patient. To limit access to only that user’s own encounters, enable this permission for that user. 📌Note: If this permission is enabled, the user is also prevented from attaching any encounters other than their own to messages, Cases etc.
Outbox	Allows users to access the Outbox area of the CHR. From the Outbox, users can view a log of all outgoing messages and other communications sent by themselves and other users.
Edit Qnaires	Allows users to build and modify Qnaires.
Export Patient Chart	Allows users to export part or all of a patient's patient chart as a PDF file for printing, faxing, or sending to those requesting it.
Edit unlocked answer sheets	Allows users to review and change patients' Qnaire responses.
Point of Care app access	Allows users to login and access the Point of Care (POC) app.
Edit Other Users	Enables users to manage CHR user accounts. This includes deactivating accounts and modifying account settings. 📌 Note: To see the list of users, they must also have the User Settings permission.
Edit Roles	Allows users to add roles, modify role settings, and assign roles to users.
Folders	Allows users to organize and group Qnaires, forms and templates for providers.
Public Billing	Allows users to create, update and delete claims for provincial insurance ("ministry") billing.
Batch public billings status update	Allows users to change the status of multiple selected insured claims at once from the Billing dashboard.
Private Billing	Allows users to create, update and delete bills for products and services billed directly to patients and third parties.
Presenting Issues	Allows users to create and modify presenting issues (reasons that patients come in for visits).
Edit/Delete Admin Notes	Allows users to modify or delete existing admin notes in patient charts.
Delete patient data entries	Allows users to delete patient data from a chart.
Analytics	Allows users to access the Analytics area of the CHR.
Unlock Referral Letters	If your clinic enabled the ability for users to sign/lock letters they create, this permission allows users to unlock any of their signed letters. 📌 Note: Only the user who created a letter can unlock the letter.
View Embedded Views	Allows users to view the Embedded Views widget Summary view of patient charts. From here users can perform a number of calculations and view patient-specific analytic dashboards.
Import Patients	Allows users to use the background import tool to import patient data.
Provider Mobile App	Enables users to access the TELUS CHR Mobile setting and see a QR code. This is used to pair a user's device with the TELUS CHR Mobile application.

Settings permissions

Permission option	Description
User Profile Settings	Enables users to modify their profile settings. This includes their credentials and billing number. 📌 Note: Users can edit their own profile and update their profile picture with either the Edit Other Users or User Profile Settings permission.
Scheduling settings	Allows users to manage schedule settings (provider hours, etc.), appointment types, locations and rooms.
Notification settings	Allows users to set and modify outgoing email and SMS (text message) notifications for appointments, Qnaires and portal messaging.
Public Billing settings	Allows users to modify billing status options, to manage billing integrations and bill defaults, and to modify public and private billing settings. Users can create, update, and delete payment tags.
User Settings	Enables users to add user accounts (invite users) and to view the list of users.
Patient settings	Allows users to add and modify patient identification options, status tags, patient groups, and other patient settings.
Disclaimer settings	Allows users to modify the disclaimer that appears to patients at the beginning of Qnaires.
Tablet settings	Allows users to customize how Qnaires are seen and managed on tablet devices.
Smartphone settings	Allows users to customize how Qnaires and other communications appear on smartphones.
Data export	Allows users to export data from the CHR as CSV files.
Products settings	Allows users to add or modify products and inventory billed through third-party and private billing.
Setup Lab Integration	Allows users to set up lab integrations such as Excelleris and Dynacare in BC, MB and ON. 📌 Note: For this option to work, the User Contents Settings checkbox must also be selected.
User contents settings	Enables users to modify their associated user folder contents.
Data import	Allows users to import data into the CHR using CSV files.
Formulary updates	Allows users to manually add medications and treatments to the clinic-wide formulary database. Items in the formulary can be prescribed.
Patient Settings: Summary View	Allows users to customize their summary view when viewing patient charts. This includes adding, moving, modifying and removing widgets.
Scheduling: Vacation	Allows users to add vacation and off time to schedules via the Vacations tab of Settings > Schedule.
Case settings	Allows users to create case dashboards and statuses for patient cases.
Care team settings	Allows users to add and modify care teams for patients. 📌 Note: The user must also have the Patient Settings checkbox selected for this option to work.
Templates: Encounters	Allows users to create, modify, duplicate and delete encounter templates.
Templates: Letter	Allows users to create, modify, duplicate and delete letter templates.
Template: Forms	Allows users to create, modify, duplicate and archive form templates.
Templates: Cases	Allows users to Create and modify case templates, including case data properties.
Templates: Messages	Allows users to create, modify and delete their own message templates. Message templates are used for internal messages and for messaging patients via the patient portal.
Templates: Custom Header	Allows users to upload a custom header to their profile, without updating any other user's custom header settings.
Templates: Data Slice	Allows users to create, modify and delete data slice templates.
Templates: Cover Pages	Enables users to create, modify, duplicate and delete cover page templates.
Templates: Flowsheets	Enables users to create, modify, and delete flowsheet templates.
Templates: Schedules	Enables users to create, modify, and delete flexible schedule and vacation schedule templates.
Custom text settings	Allows users to create, modify and delete custom text for online booking and for the patient portal (i.e. for your patient-facing web sites).
Modify Embedded Views	Allows users to modify some patient analytic dashboards if your clinic has been enabled to do this (and has a user ID).
Integration Settings	Allows users to access the Integrations > My Integrations setting. This setting allows a user to configure an integration for their own CHR account (for example, a provincial eHealth viewer).
Integration Admin	Allows users to access the Integrations > Admin setting. This setting allows a user to configure an integration for the entire clinic (for example, a provincial eHealth viewer).
Referral Settings	Allows users to configure referral waitlists, priorities, statuses etc.
QHR	If QHR (Quebec Health Record) is enabled, allows users to register the clinic for QHR.

Updated November 1, 2024