About
Generating a new account is mainly done within your hospitals Active Directory system. We’ll cover they key points to generating a new account.
Steps
Refer to your internal instructions for account creation if available as your health system may have adjustments to the provisioning process.
Creating the user in AD
As the user accounts within the IQ platform require integration to your Identity Provider, we’ll first focus in on creating these accounts within your AD.
Create a new record within your AD, or use an existing AD account.
Key fields that integrate over are FirstName, LastName, and Email.
Attaching Groups
Within the Operations IQ® Platform, the roles/permissions for your account are assigned by a related AD group within your system.
Refer to your hospitals list of AD Groups to determine what permissions the user would need.
If there isn’t a comparable list, compare to an existing user with proper access to see what AD groups are needed.
Once you’ve determined the proper permissions, associate them with the account.
Create the account within the platform
You can chose to fill out the account manually before the active directory sync, or after the sync.
Manually
Navigate to Admin > Users
Click on Create Account
Flush out additional fields that are not controlled by the Active directory.
LastName, FirstName, Email, and UserRoles will be overwritten by the sync once the account is authenticated into the IQ platform.
Automatic
Have the user login to test their AD account within the system, or login with the account once yourself to generate a default account.
Once the account has logged in once, you’re able to confirm what information synchronized from the AD account.
Navigate to Admin > Users
Search for the account using the filters
Opening the account you should see all of the fields are not aligned with those from the AD object.
Populating additional fields
Once you have your account created you can add the specifics to the account
Depending on what role has, you may need to:
Add facilities to the Associated Facilities Field
Add/Adjust Capacity IQ® or Capacity Management Suite® settings within the User Management Integration
Once you added all the appropriate settings, the account is properly provisioned.
Best Practices
Although there are different ways you can provision accounts, it’s important to remember that the AD and the AD Groups drive the account. They solely determine what the user is able to see in the application.
Related
Upcoming