Is anyone successfully using active directory to create users and manage groups?
Hello,
We use AD to manage our security groups. We are building the users manually, but that is more because our workflow is to set everything up weeks before the user arrives. here is some basic info about each item:
Security Groups:
- You have to manually enter the security group name into Centricity after your have created it in AD.
- You then have to manually set up what security the group will have in Centricity
- once this is done, a user is added to the AD security group when their account is setup. then when they log into CPS, they will automatically be in the correct groups.
- If you change their AD security group, it will update in CPS the next time they log in.
- You can be in multiple AD security groups.
Users:
- If you do not create the user in Centricity manually, but put them in AD, they can log in to CPS with the AD account, and it will prompt the user to enter their name.
- Even if you let the user set up their name, they will not have Chart Access by default (even if their AD group has the chart security.) For this reason, we set up our staff ahead of time, and give them Chart Access so they can arrive and log in with full functionality.
- You can create proxy accounts with non-AD usernames, such as a Pharmacy inbox, or a referrals proxy. Since the passwords are nmanaged in AD, nobody can log in with these proxy user accounts. you will still need to put a login name in CPS to set this up however.
Hopefully this helps. please let me know if you would like some more details on either subject. We have an outsourced IT helpdesk that manages our AD, but they are on-site and I can pick their brains for any info I don't have.
Thanks,
Daniel Carpenter
We don't have any trouble using AD, we have been using it since we started using CPS. What problems are you having?
Steve
Daniel,
Is there a reason why you set up your groups in AD. We have our groups set up in CPS and ad our users there. In this way we have created groups based on users job description which matches well with HIPAA and HITECH requirements. Everyone seems to be functioning fine. This is a recent change for us as we always used to set up the users in AD in their groups that matched CPS groups.
Terry
With us already needing to set up users in AD I think it would be easier to add them to the group in AD instead of maintaining inside of CPS.
Now when we turn on AD and try to sync groups it locks us out of the test system. I have had tier 2 support trying to figure out what is going on.
Thanks for your reply. That is exactly want we want to do. I would find it very useful to just sync groups.