Salesforce

Patient Chart Guide - Limiting access to patient charts based on patient criteria (Premium)

« Go Back
Information
Patient Chart Guide - Limiting access to patient charts based on patient criteria (Premium)

Contents

 



Overview

What is the Patient Cohort feature?

The Patient Cohort feature, available with the Premium EHR, allows Admin Level Users to group patients based on chart data and restrict access to those cohorts. 

Once Patient Cohort restrictions are enabled:

  • Assigned users can access charts within their cohorts without restriction.
  • The Provider assigned in practice (as listed in Patient Demographics) always has full access to their patients’ charts.
  • All other users may either be completely blocked or granted limited access—any limited access is logged in the patient’s chronological record.



What are the benefits of the Patient Cohort feature?

The Patient Cohort feature offers several key benefits:

  • Enables targeted privacy controls for specific patient groups—such as behavioral health, employees, or high-profile individuals—while maintaining general chart access for the rest of the practice.
  • Allows you to align access permissions with your practice’s privacy standards.
  • Logs all limited access attempts for visibility and accountability.




Setup

Requesting the feature

The Patient Cohorts feature is for Premium EHR customers only.

  • If you are interested in upgrading to the Premium EHR subscription to use this feature, click the I need help button to notify Elation and a member of the Elation Team will reach out to assist you.
  • If you are already a Premium EHR user and you are interested in using this feature, click the I need help button to notify Elation and a member of the Elation Team will turn this feature on for you.



Specifying Chart Access Settings 

An Admin Level User can specify the level of access granted to non-assigned users by:

1Go to Settings -> Security & Privacy.
2

Go to the Chart Access section and specify which of the following settings you prefer:

  • Warning & Optional Bypass
    • Users without direct access will see a warning message and can choose to proceed, triggering temporary access that is logged.
  • Strict Access Control
    • Restricted charts are completely inaccessible to unauthorized users.




Workflow Instructions

Creating new Patient Cohorts and assigning access permissions

ℹ️   NOTE
Only Admin Level Users can manage Patient Cohorts.

 

1

Click Reports -> Patient Cohorts.

2Click Create a Patient Cohort.
3

Apply the necessary filters for the cohort. A minimum of one patient criteria must be selected in order to create a cohort. Criteria include:

  • Provider assigned in practice
  • Patient Passport Status
  • Sex at Birth
  • Race
  • Ethnicity
  • Preferred Language
  • Preferred Contact Method
  • Patient Status
  • State
  • Patient Tags
  • Document Tags
4Click Preview List to see the patients that meet the selected criteria.
5

Click Save as Patient Cohort once you have verified the list of patients is accurate.

6Enter a name for your Patient Cohort in the Patient Cohort Name field. We recommend using a descriptive name to distinguish multiple cohorts. 
7

Click + Add User Group to select the User Groups that can have access to the patients in this cohort. If no user groups are added, the cohort can still be created, but no access restrictions will be applied. 

8Click Save to save the new Patient Cohort.
9Once a Patient Cohort is created, any patient who meets the criteria will be automatically added.

 

ℹ️  NOTE
  • New Patient Cohort restrictions take effect the next time users log into Elation. After creating cohorts, ask all users to log out and log back in to apply the updated settings.
  • The Provider assigned in practice always has access, even if not part of the Patient Cohort. Be sure each patient has the correct provider assigned.




Managing existing Patient Cohorts

Viewing Cohort Criteria

To view a cohort’s criteria, click the Actions -> Cohort Criteria next to the Patient Cohort name. Criteria and User Groups cannot be edited for existing cohorts. To make changes, create a new Patient Cohort with the updated details and delete the outdated one.

 

Deleting a Patient Cohort

Removing a Patient Cohort lifts the access restrictions applied to its patients. To delete a Patient Cohort:

1Click the Actions -> Delete to the right of the Patient Cohort name.
2Confirm by clicking Delete.



Accessing patient charts that are part of Patient Cohorts

The Provider assigned in practice always has full access to their patients’ charts and assigned users can access charts within their cohorts without restriction.

 

When any other user attempts to access a restricted chart, they will see one of the following depending on your practice’s Chart Access Settings

  • Warning & Optional Bypass - An Access Restricted warning will appear and the user must select a reason in order to gain access to the restricted chart. If they enter then their name will be recorded in the Unauthorized Access Log.

  • Strict Access Controls - An Access Not Authorized pop-up will appear to block the user from entering the chart. The user will be redirected back to the Practice Home page.

 



Viewing the Unauthorized Access Log

If the Warning & Optional Bypass setting is enabled, Admin Level Users can use the Unauthorized Access Log to track access: 

1Click Reports -> Patient Cohorts.
2Click Unauthorized Access Log.
3

Select the date range you want to view.

💡  USER TIP
You can only search for a maximum of 90 days at a time. If the date range you are searching for exceeds 90 days, separate the dates into ‘90 day’ segments and run multiple reports. For example, if you want to look at a report for January 1st to May 31st, you will need to run one report from January 1st to March 31st and then a second report from April 1st to May 31st.
4Click Download CSV.
5Open the file using a spreadsheet compatible software like Google© Sheets or Excel©. 

 




Frequently Asked Questions

What happens if a patient no longer meets the defined criteria of a Patient Cohort?

When a patient in a Patient Cohort no longer meets the defined criteria, that patient will automatically be removed from the Patient Cohort.

 

How do I edit cohort rules or user group access for an existing Patient Cohort? 

Patient Cohorts currently cannot be modified after they are created. If cohort criteria or User Groups need to be changed, create a new Patient Cohort with the updated details and delete the outdated one.



How is the Patient Cohort feature different from the VIP Chart feature?

The Patient Cohort feature limits access based on User Groups defined by an Admin Level User, while the VIP Chart feature restricts access for all users except the  Provider assigned in practice.

 

What happens if I am using both the Patient Cohort feature and the VIP Chart feature?

If you are using both the Patient Cohort feature and the VIP Chart feature, rules of both features will be in effect. This means when a user is trying to access an unauthorized chart that is also a VIP patient, they will see both the Unauthorized Access warning as well as the VIP Chart warning.



© Microsoft 2023
© 2023 Google


 

Related Articles

Properties
Patient-Chart-Guide-Restricting-access-to-patient-charts-based-on-patient-criteria

Powered by