Implementation: to be completed by March 28/ 2020 in data.psi-mis.org and dev.psi-mis.org
Users roles in DHIS2 are a collection of authorities, which allow users to access and perform generic dhis2 action - do data entry, manage org units, manage users, create forms, etc. Granular control of what data (country, program) a user can access is achieved using User Groups. A user should have at least one user role assigned.
At PSI user roles are pre-defined - no one should create new user roles. They are assigned to users in accordance to their needs. It is suggested that you always assign the user - Analytics role to all users, and then those that are required for the user to perform his/her work. The user roles are organised in two types: Admin and Users.
| Typ | SubType | PSI DHIS2 role | description | key DHIS2 authorities |
|---|---|---|---|---|
| A D M I N | Programs & Datasets | Admin - Config - DataSets | Allows creation of Datasets and their related metadata (except categories) | Private DataSets, Programs, Prg Indicators, Prg Rules, DEs, OptionSets, CatOptions and CatGroups. Validation Rules |
| Admin - Config - Programs | Allows creation of event and tracker programs and their related metadata | Private DataSets, Programs, Prg Indicators, Prg Rules, DEs, OptionSets | ||
| Admin - Config - basic (OptionSets) | Allows management of OptionSets | Private OptionsSet management. View other metadata | ||
| Admin - Config - advanced | Management of Categories & GroupSets | Category and DE and CatOption GroupSets management | ||
| OUs and Users | Admin - Users | Management of users and user groups | User and user group management. View Roles | |
| Admin - Org Units - basic | Management of Org Units (except Org Unit GroupSets) | OUs, OUGs management. View OUGS | ||
| Admin - Org Units - advanced | Management of Org Unit GroupSets | OUGS management | ||
| Analytics | Admin - Analytics - basic | Management of Indicators, Program Indicators and Legends | Private Prg Indicators and Indicators, Legends | |
| Admin - Analytics - advanced | Management of Predictors and Min& Max values | Predictors, Min & Max values | ||
| Import & Export | Admin - Import/ Export MetaData | Metadata Import/ Export | ||
| Admin - Import/ Export Data | Data Import/ Export | |||
| SuperUser | Admin - Superuser | All. System-wide access | ||
| U S E R | Capture | User - Data Capture/ Aggregate | Allows to capture aggregate data | Aggregate data capture. incl. Cache Cleaner |
| User - Data Capture/ Events | Allows to capture events (no uncomplete or delete) | Event data capture. No delete, no uncomplete. incl. Cache Cleaner. | ||
| User - Data Capture/ Tracker | Allows to capture tracker data (no uncomplete or delete) | Tracker data capture. No delete, no uncomplete. incl. Cache Cleaner | ||
| User - Data Capture/ uncomplete events | Allows to uncomplete events | Uncompletion of events | ||
| User - Data Capture/ delete TEI/ events | Allows to delete events & TEIs | Deletion of events and TEIs | ||
| User - Data Acceptance | Allows to accept data | Accept data | ||
| User - Data Approval | Allows to approve data | Approve data | ||
| User - Data Approval at lower levels | Allows to approve data at lower levels | Approve data at lower levels | ||
| Analytics | User - Dashboard only | Basic access to dashboard, interpretations and messages | Dashboard, Interpretations, Messages, Reports. | |
| User - Analytics | Access to full analytical suite (no data quality) | Dashboard, Interpretations, Messages, Pivot, Visualizer, Maps, Event Rpt & Vzlrs, Reports, Run SQL views, Cache Cleaner | ||
| User - Data Quality | Allows to run validations | Run data quality | ||
| User - Data Export | Allows export of data for use in other system | Download of personal data | ||
| User - Analytics Run Predictors | not in use | future use | ||
| Apps | App - App name | Allows to use specific custom app | one per custom app |