How to read this page
- Every step is one screen, or one moment, in a real run. The label under the title names where it happens, and the step reads in the same order each time: what is happening, the evidence, and then what to look for in it.
- Screenshots are real pictures of the Munitas console, the web app that people open in a browser. Click any picture to enlarge it.
- Every name of a person, patient or card holder in the example data is invented, and every screenshot is unedited apart from being cropped to the part that matters.
Words used on this page
- Organisation
- A company or hospital group that uses Munitas. Each organisation sees only its own data.
- Department
- A team inside an organisation that owns some of its data, such as Cardiology.
- Dataset
- A named collection of records, such as a table of patient admissions.
- Custodian
- A person who holds the data custodian role, which allows deciding who may read data. A custodian decides for the departments they are an approver for.
- Department approver
- A custodian who is listed for one department and may approve access to its data and confirm claims about it. A department can have several, and any one of them can act on their own.
- Claim
- A statement, made by the person who brings a dataset in, about how sensitive it is. A different approver of the owning department has to confirm it.
- Role
- A named set of permissions that a person can hold, such as the permission to decide who may read a department’s data.
Hartley names cover for Cardiology
A department is the part of an organisation that owns a set of datasets, such as Cardiology in the Health organisation. A dataset is a registered, owned collection of data. Each department has approvers: data custodians who decide who may read its data and who confirm claims about how sensitive it is. Any one approver can act, so a department is never stuck because one person is away.
Each card is one department of the Health organisation, with the number of datasets it owns and its approvers. Hartley is a data custodian, which is the role that allows a person to approve access to data. Hartley is also an approver of the Cardiology department, so the Cardiology card carries a form for adding another approver.
Mensah is the data custodian of the Oncology department. Only people who already hold the data custodian role can be chosen, because adding an approver never gives anybody the role. Hartley writes a reason, which is stored with the change, and an end date, so the cover stops by itself.
The Cardiology department now has two approvers. Hartley is permanent. Mensah is listed with the last day of the cover, after which the platform stops counting Mensah as an approver of Cardiology without anybody having to remove the entry.
The cover confirms a claim on their own
A claim is a statement, made by the person who brings a dataset in, about how sensitive it is. The person who made a claim may never confirm it, so a different approver of the owning department has to.
Devi, a data engineer, has registered a dataset for the Cardiology department and claimed its sensitivity. Mensah is a data custodian of Oncology and now also an approver of Cardiology, so the Cardiology claim appears on Mensah's home screen.
Pressing Agree with this records that Mensah, an approver of the owning department, confirmed the claim that Devi made. Hartley did not have to be present.
Hartley ends the cover and the platform keeps the record
Cover can end before its end date. Every change to who answers for a department is recorded with who made it and why, and the record is never edited.
Hartley is back, so Hartley presses Remove next to Mensah. The platform asks for a reason before it accepts the removal.
Only Hartley is listed again. From this moment Mensah can no longer confirm claims about Cardiology data or approve access to it, but Mensah is still the data custodian of Oncology.
Hartley now tries to remove Hartley's own entry, the only approver left. The platform refuses, because a department with nobody who answers for it could neither approve access nor confirm a claim. Another approver has to be added first.
Pressing Show history lists every approver the department has had, who added each one and why, and who ended it and why. Entries are never edited or deleted. Mensah's cover appears as one row, with the date and time it was added and ended.
