Role Based Access Control

Role Based Access Control (RBAC) became a compulsory part of Vision 3 once EPS2 was enabled at your practice. This means that when you login to Vision 3 with your Smartcard, your access to related Vision 3 modules and functions is dictated by the roles and activities that are stored on your Smartcard.

Please note the following:

• RBAC and Vision 3 Offline Access - When you login with your Smartcard, a copy of the role profile access rights is saved to Vision 3. When you next access Vision 3 offline (without your Smartcard), this information is used to determine your system access rights. Where a Vision 3 user has never authenticated their Smartcard, the usual Vision 3 security access applies.
• RBAC and Mail Manager - When RBAC is fully implemented, you can only allocate messages in Mail Manager to users that have logged in at least once since compulsory RBAC was switched on.
• New Cegedim Healthcare Solutions Functionality – When new applications and functionality are introduced, you may need your Smartcard updated to gain access.

Your Smartcard defines your role and business activities. Within your practice, you should have an allocated sponsor who is responsible for managing your practice’s Smartcards. Sponsors should identify the correct role for each member of staff or GP, and the activities they need to use, particularly within your clinical system and liaise with the Registration Authority(RA) if necessary.

Sponsors should familiarise themselves with the roles established on the system and the sort of access that this gives a user to correlate with the tasks that the user's job requires them to undertake.

Identity Agent is the software that is used to read and authenticate Smartcards. You must ensure that you have the latest version of Identity Agent installed on your practice's workstations. Please contact your CCG if you have any queries or issues with the Identity Agent settings at your practice.