The Incident Security Group is a group that can be assigned to Users with access to certain Incident data, all other Users are restricted from seeing the data.
There are 3 ways to assign Incident data to Security Groups.
Add rules in the Security Group itself Incident > Configuration > Security Groups
Add the Potentially Notifiable setting for an account Incident > Configuration > Incident Settings
Staff Users with permission to create, edit, and manage Incidents (Incident Admin and Incident RW) can manage this feature.
3. Assign a Question Response (Tag) to a Security Group. Comply Flow Access Only
Adding a new Security Group
All 3 scenarios above will require a Security Group to be created. To create a new Security Group please follow the steps below:
1.Navigate to the Incident Module, and select Configuration > Security Groups > Add.
2. Next, fill in the Security Group Name and select Add button.
3. The following screen displays all Security Groups listed under the List Security Group table. You’ll be able to manage them here by selecting an action from the Actions dropdown.
Select Edit if you wish to make changes to a Security Group
Select View if you need to check details about a Security Group
Select Add Rules if you wish to add rules to a Security Group (below)
Select Delete if you would like to remove a Security Group
Adding Rules to a Security Group
Incident Types, Section or Questions can be hidden from users outside the Security Group using rules.
If a user is not in the Security Group, they are unable to access or view the data.
To configure new rules select Actions > Add Rules from the Security Groups list (above).
When adding rules to a Security Group, the following screen will be displayed:
State - Please note this is superseded and not functional at this time
Question - Only Users in the Security Group will be prompted to answer this question when it is selected
Incident Type - Only Users in the Security Group will be able to start or see this Incident type
Section - Only Users in the Security Group will be prompted to answer questions in this section when it is selected
Then, select Add to apply the rules you have added to the Security Group.
Potentially Notifiable Security Groups
To assign the Security Group that can see Potentially Notifiable Incidents, navigate to Incident > Configuration > Incident Settings
Assign a Security Group Based on a Question Response (Tag)
A User response to a question can restrict an Incident to a Security Group. This is done via assigning a Tag to the question response then assigning the Security Group to the Tag. Reach out to Comply Flow if you think this is required.
Assigning Staff to a Security Group
Once Security Groups are set up, Staff members can be assigned. Go to Incident > Configuration > Staff search for the Staff Member, then select Actions > Edit Security Group.