9
Demo data — synthetic patients onlyLast updated 12 s ago · UAT environment

Users & Access

Least privilege by default. Break-glass access is time-limited, requires a reason and is heavily audited.

Permission matrix

Role versus permission

RoleView masked patient identityView full patient identityAssign / replace tagConfirm transferPublish screen contentEmergency overrideExport reportsManage users & rolesView audit log
Registration staff— deny✓ allow✓ allow— deny✓ allow✓ allow— deny✓ allow✓ allow
Nurse✓ allow✓ allow— deny✓ allow✓ allow— deny✓ allow✓ allow— deny
OR coordinator✓ allow— deny✓ allow✓ allow— deny✓ allow✓ allow— deny✓ allow
Transfer coordinator— deny✓ allow✓ allow— deny✓ allow✓ allow— deny✓ allow✓ allow
Supervisor✓ allow✓ allow— deny✓ allow✓ allow— deny✓ allow✓ allow— deny
Management✓ allow— deny✓ allow✓ allow— deny✓ allow✓ allow— deny✓ allow
IT— deny✓ allow✓ allow— deny✓ allow✓ allow— deny✓ allow✓ allow
Biomedical engineer✓ allow✓ allow— deny✓ allow✓ allow— deny✓ allow✓ allow— deny
Screen editor✓ allow— deny✓ allow✓ allow— deny✓ allow✓ allow— deny✓ allow
Auditor— deny✓ allow✓ allow— deny✓ allow✓ allow— deny✓ allow✓ allow
System administrator✓ allow✓ allow— deny✓ allow✓ allow— deny✓ allow✓ allow— deny

Demo users

UserRoleScopeMFAStatus
n.mansourOR coordinatorNJR-01 · TheatresApp MFAActive
a.alyamiNurseNJR-01 · Day SurgeryApp MFAActive
s.alharbiSupervisorNJR-01, NJR-02Hardware keyActive
it.dutyITAll hospitalsHardware keyActive
biomed.engBiomedical engineerAll hospitals · devicesApp MFAActive
screen.editorScreen editorCluster screensApp MFAPassword reset due
auditor.govAuditorRead-only clusterHardware keyActive

Enterprise identity

  • Microsoft Entra ID (OIDC)

    Connected · 412 users synced

    Healthy
  • LDAP directory

    Configured · fallback only

    Standby
  • SAML 2.0

    Not configured

    Off
  • Privileged MFA policy

    Required for IT, admin and break-glass

    Healthy
  • Break-glass sessions (30 days)

    3 sessions · all reviewed

    Review