HCS Admin roles and permissions

Description

Admin User Management encompasses creating accounts on TIS for new admins, roles management, admin authentication (login), password self management (password recovery) and leavers. It will include any advances in admin security such as two factor authentication.

There are 9 roles available in TIS

• HCS Trust Admin
  - can view/edit trainees associated with their Trust in either a training or employment capacity

• HCS Trust Observer
  - can view trainees associated with their Trust in either a training or employment capacity

• HCS Super Admin
  - can view/create/edit/delete all components except Revalidation, Sensitive Data (within People) and Reference data

• HCS Admin Sensitive?
  - can view/create/edit/delete all components except Revalidation and Reference data

• HCS TIS Admin1
  - can view/create/edit/delete everything

• HCS TIS Admin2
  - can view trainees associated with their Programme

• HCS TIS Admin3
  - can view/create/edit trainees associated with their Programme

(i) Hcs Trust Admin

• can view/edit People limited to Trainees and Trainers 'related' to their Trust - (Trainee → Placement - Post - Employing Body and/or Training body)

• can view/edit the People L3 tabs containing Personal Details, Placements and Programme Memberships, Sensitive Data (the 4 actual Sensitive Data fields are hidden)

• cannot view/edit the People L3 tabs containing Qualifications or Assessments

• can view only / not edit Posts, limited to posts 'related' to their Trust (Post → Employing Body and/or Training body)

• can view only / not edit all Programmes.

• For clarity, HEE Trust Admins will NOT have access to the TIS Admin section, Revalidation & Concerns

• For clarity, as the Trainee/trainer 'related' to their Trust includes 'All' Placements, historical, current and future. The HEE Trust Admin will therefore see Trainees across a range of Local Offices.

Users with this role would have specified permissions as above

(ii) HCS Trust Observer

• can view People 'related' to their Trust - (Trainee → Placement - Post - Employing Body and/or Training body)

• can view the People L3 tabs containing Personal Details, Placements and Programme Memberships, Sensitive Data (the 4 actual Sensitive Data fields are hidden)

• cannot view/edit the People L3 tabs containing Qualifications or Assessments

• can view Posts, limited to posts 'related' to their Trust (Post → Employing Body and/or Training body)

• can view only (not edit) all Programmes.

• For clarity, HEE Trust Users will NOT have access to the TIS Admin section (Reference data), Revalidation, Manage Connections & Concerns

• For clarity, as the Trainee/trainer 'related' to their Trust includes 'All' Placements, historical, current and future. The HEE Trust User will therefore see Trainees across a range of Local Offices.

(ii) HCS Super Admin

• can view/create/edit/delete the following components (People, Posts, Programmes, Placements, Assessments)

• cannot view/create/edit/delete Sensitive Data fields in the Sensitive Data L3 (in People)

• cannot view/create/edit/delete Admin L1

• cannot view/create/edit/delete Concerns, Revalidation and Manage Connections

Users with this role would have specified permissions as above

(iii) HCS Admin Sensitive

• can view/create/edit/delete the following components (People, Posts, Programmes, Placements, Assessments)

• can view/create/edit/delete Sensitive Data L3 (in person data fields in the Sensitive Data L3)

• cannot view/create/edit/delete Admin L1

• cannot view/create/edit/delete Concerns, manage connections and Revalidation

(iv) HCS Admin 1

(v) HCS Admin 2

(vi) HCS Admin 3

SERVICE DESK

Users will only be given access to the role/s the TIS Account Management form states they need. If no role is provided the user cannot be created.