EMR Security and Access Control (OpenMRS)

Bahmni has the ability to control the visibility of various applications within Bahmni (like access to Registration, Clinical modules, etc) using OpenMRS Privileges. In OpenMRS, a Role is a group of privileges.

To create a user that can login into Bahmni, one needs to create a user in OpenMRS. Bahmni re-uses the same session / credentials as of the underlying OpenMRS. Here are the steps needed to be performed for creating a login user for Bahmni:

1. Go to OpenMRS (http://<ip>/openmrs).
2. Open the Administration section (you should have admin rights to access this section in OpenMRS).
3. Create a User in OpenMRS, by going to&nbsp;Users&nbsp;&rarr; Manage Users&nbsp;&rarr; Add User
4. Give the user appropriate&nbsp;Roles&nbsp;based on what you would like them to access. At minimum you should choose&nbsp;Bahmni-User role, plus more depending on what types of access you want to give. See the table Built-in Roles below, to get an idea of the possible roles you can assign.&nbsp;
5. Save and exit the&nbsp;Manage Users&nbsp;section.
6. After adding the user, you also need to register the user as a&nbsp;Provider in OpenMRS. For that, you again go to the&nbsp;Administration section, and go to:&nbsp;Providers&nbsp;&rarr; Manage Providers&nbsp;&rarr; Add Provider. Add the above user, as a provider, by searching for the user by the "Name of the Person" in the Person field. You only need to enter a value in the&nbsp;Person&nbsp;field. You can leave others blank.
7. Now, you can login using the above specified credentials, into OpenMRS, and into Bahmni. Depending on the Roles assigned to a user in OpenMRS, you will see only certain modules / icons on the Home Dashboard of Bahmni.
8. When you change roles assigned to user. User have to logout and login for roles to be applied.

These are the built-in roles that come with Bahmni. The table below mentions the list of roles, and the access that the role provides. Roles are additive in OpenMRS. Which means, you can give multiple roles to a user, and all privileges mentioned in each role, will be available to the user. For more details you can read OpenMRS Documentation on Users/Roles/Privileges.

The below table shows new roles created as part of 0.86 release update. Some of the roles must not be assigned to the user directly because it is only for internal use. Please refer notes column.

1. If you are taking this/newer release for new implementation, thenYou will be using new db (or fresh db) and only these new roles will be available, the roles which are created earlier releases won&rsquo;t be available.
2. There are privileges changed for some of the clinical tabs. Please refer this table&nbsp;and it is taken care by these new roles. So, assign the applicable role(s) to the user and the user will have sufficient privileges to access the system.

1. New roles will be added apart from existing roles, the existing user will not affected and can use the system without any problem.
2. If you want to use the new roles after migrate to this new release then there are privileges changed for some of the clinical tabs and it is taken care by new roles . Please refer this table. So, change the config accordingly and assign these new role(s) to user. Then, the user will have sufficient privileges to access the system.관련 문서: EMR Security and Access Control (OpenMRS)

Please see for details관련 문서: User Roles and Privileges for Appointment Scheduling

Please see for details관련 문서: User roles and privileges for Operation Theatre Scheduling