How To: Update User Access Permissions with Role Based Access Control (RBAC)

Summary

User access management in ProviderTrust is essential to maintaining information security and ensuring that only authorized individuals have access to sensitive data. This article explains how to review, update, and delete user accounts within the application, and highlights the importance of conducting regular access audits to preserve the confidentiality, integrity, and availability of your organization’s data.

Overview

User access control within the ProviderTrust application is a critical element of information security. Proper management ensures that only authorized users have access to the system, safeguarding the confidentiality, integrity, and availability of your organization’s data.

Performing regular access audits is recommended to maintain a secure environment and confirm that all active users possess appropriate permissions aligned with their responsibilities. 

Reviewing Existing Users

To review users currently active within your organization:

1. Select the User Management Tab from the navigation bar. 

2. All existing users will be displayed in a list on the screen.

3. Click an individual’s User Information to review their specific access permissions.

Updating User Permissions

If your account has user management privileges, you have the ability to update user permissions.

To modify a user’s access:

1. Select the User Management Tab from the navigation bar. 

2. Click an individual’s User Information to review their specific access permissions.

3. Click Edit 

Then adjust the permission settings by updating, or selecting/deselecting the appropriate areas under User Settings, Application Role, and Notification Settings. Your changes will take effect immediately once saved.

Deleting an Existing User

To remove a user account:

1. Select the User Management Tab from the navigation bar
2. Click the user account you want to delete
3. Select the vertical ellipses (⋮) menu
4. Click Delete

Important:
Only users with user management permissions can delete existing user accounts.

User Access Report

User Management roles can download a report of all users with access to the application. 

To download the report:

1. Navigate to User Management Tab 
2. Select Download CSV 

The report will include the following fields:

• First Name
• Last Name
• Email Address

The file will be downloaded in CSV format and can be opened in Excel or similar tools for review and tracking.

Best Practices

• Review user access at least quarterly to ensure proper role alignment.

• Immediately remove or disable accounts for users who no longer require access.

• Limit administrative privileges to designated personnel responsible for compliance oversight.

Note: To view definitions of each permission, refer to this article: How To: Add New User.