Security Groups

Security groups determine the rights that individual users have when using the PopMedNet software. Security groups are a combination of a role (e.g. investigator) and the network entity that the user has the permission to act upon or within (e.g. project, DataMart). For example, a user belonging to the security group of Demonstration Project Investigators would have permission to act as an investigator within the Demonstration Project.

Roles

Roles are highly customizable and new roles may be defined and developed. Below are the preset PopMedNet roles.

• Investigator: may submit requests and review results. Limited Investigators may only view aggregate request results. Enhanced Investigators may view disaggregated (site-specific) results.
• DataMart Administrator: review and respond to requests via the DataMart Client. DataMart Administrators may also submit requests to their own organization.
• Group Administrator: review, aggregate, and release results for a data partner or group of data partners from the network Portal. Data partners may designate a user as a Group Administrator and require that their results are first approved by the Group Administrator before being released to a requestor. Group Administrators may release site-specific results or group them into aggregate result sets.
• Query Administrator: review requests before they are released to the data partners. After an Investigator submits a request, a project or network may require that a Query Administrator approve the request before it is submitted to the data partners.
• Observer: view and audit network activity. Limited Observers may not view request results. Enhanced Observers may view select request results; for example, the results of requests submitted by a network coordinating center.
• System Administrator: manage the network, including creating network entities, setting permissions, and approving users.
  
  

Network Entities

Below are the network entities that users may be a member of.

• Project: a collection of Organizations, DataMarts, and activities that represent a research project or sub-network. Projects belong to a single Group. Organizations and DataMarts may belong to multiple Projects.
• Organization: an organization (e.g. data partner, coordinating center) participating in the network. Organizations may contain sub-organizations. Organizations may be part of multiple Groups and Projects and may contain zero, one, or more DataMarts.