Manage

Security and users

Who can sign in, who can see and do what, and two-step login.
{{ cur }}
OS
Update{{ msg }}
Access control{{ mode }}
{{ meText }}
Sign in
{{ limited }}
Sign in to change your password or set up two-step login.

Change my password

At least 10 characters with capital and small letters, a number and a symbol.

Two-step login

After your password, the sign-in asks for a 6-digit code from an authenticator app on your phone. A stolen password alone is then useless.
Two-step login is on. {{ backupLeft }}
Your role must use two-step login, so it cannot be turned off.
1. Add this key in your authenticator app (type it in, or use the link below)
{{ tsSecret }}
{{ tsUri }}
2. Enter the 6-digit code it shows
Backup codes. Save them now. They are shown only once and each works once.
{{ c.c }}
Add a personGive someone a sign-in with a role.
{{ __mmsg }}

Add a person

They sign in with this email and the password you set, and must choose their own password at the first sign-in.

People

{{ tempShown }}
{{ u.name }} {{ u.email }}
{{ u.last }}
{{ u.role }}{{ u.ts }}{{ u.status }}LockedMust change password

What each role can do

View only: can see. View and change: can enter and edit. Change and approve: can also do the second-person steps (approvals, refunds, payroll, write-offs, merges).
The Owner always has full access and cannot be changed.
{{ m.label }}
Add a roleCopy a role and adjust it.
{{ __mmsg }}

Add a role

Copy an existing role, then adjust it. A new role starts with no security rights.

Turn access control on

While it is OFF the software is in open demo mode: nobody needs to sign in. When it is ON, every screen needs a sign-in and each person only sees what their role allows. Only the Owner can turn it on, and only after turning on their own two-step login, so a stolen password cannot lock you out.
It is ON

Rules

Two-step login is required for
Required: Owner

Restricted records

Staff, VIP or sensitive patients. Anyone opening the record must write a reason, which is saved with their name.
{{ r.t }}

Security log

Every sign-in, failed try, lock, password change and permission change.
{{ e.a }}{{ e.t }}
{{ e.d }}