(Updated 2/26/2022)
Is your team ready to deploy your Tableau dashboard and trying to sort out to whom the dashboard should be released?
Some factors to consider when evaluating who should have access to your dashboard are:
1. Determine the data classification level of your dashboard using the UCSF Data Classification Standard (https://it.ucsf.edu/standard-guideline/ucsf-policy-650-16-addendum-f-ucsf-data-classification-standard).
2. The dashboard should be available for use to the UCSF team members who have a business need to know.
3. Consider the sensitivity of the data exposed through your dashboard when determining who needs to view the dashboard. Consider whether your dashboard exposes a HIPAA small cell, a sensitive diagnosis, or other sensitive patient population.
4. Determine whether it is okay for external non-UCSF third parties to view your dashboard. If visibility needs to be limited to UCSF faculty, staff, house staff, students, volunteers, trainees, and/or contractors, then the Target Audience or All APeX Users access models may be most appropriate.
5. The rationale for the selection of data access model should be based upon a business driver that forwards the missions of UCSF.
6. For dashboards involving human subjects research, the data access model selected needs to be consistent with the data access that was approved in the associated Institutional Review Board (IRB) protocol.
The following data access models can be applied during the deployment of your dashboard. Please review the description of each data access model to determine which model will ensure that your dashboard is available for use to the audience that your dashboard was designed for.
Target Audience
Through this data access model, your dashboard will be released to a defined group of users. The group of users can be defined via a list of UCSF team members or through an existing grouping of users. Examples of groupings of users that can be leveraged to specify the current and future users who will need access to the dashboard are Active Directory (AD) groups, Outlook mailing lists, Human Resources roles, all members of a specific department, or application users. If you choose to use one of these grouping methods, then access to the dashboard will be granted to users who are currently a member of the grouping and access will be granted to new users who are added to the grouping in the future on a regular basis.
This data access model can be used for dashboards classified as P1-P4.
All APeX Users
Through this data access model, all users who currently have access to the UCSF APeX clinical application will be granted access to your dashboard. This model ensures that all current APeX users and any new users who obtain access to APeX in the future will maintain access to your dashboard. This model also ensures that access to your dashboard will be revoked for any users whose access to APeX is terminated. This data access model should be utilized when there is a business need for all APeX users to have access to your dashboard.
This data access model can be utilized for dashboards classified as P1-P4. Please note that approval will need to be obtained from the Enterprise Information & Analytics (EIA) Steering Committee to leverage this data access model for dashboards classified as P3 or P4 during the monthly EIA Steering Committee meeting. Please contact [email protected] to initiate a request to present your dashboard deployment request to the EIA Steering Committee.
Open Access
Through this data access model, your dashboard will be available for viewing to all users connected to the UCSF network, including internal UCSF team members and external third parties who have been granted access to the network.
This data access model can be leveraged for dashboards classified as P1 or P2 but cannot be applied to dashboards classified as P3 or P4. If the dashboard is classified as P2, then the target audience for the dashboard under the design of the system should be defined as any user connected to the UCSF network.
Public Access
Through this data access model, your dashboard will be available for viewing to the general public.
For the deployment of UCSF Health dashboards to the general public, please obtain approval from UCSF Health Leadership, the Chancellor’s Executive Team, and the Chancellor.
For UCSF Campus dashboards that will be deployed to the general public, please email the Tableau team at [email protected] to discuss the next steps for the approval of the deployment of your dashboard to the general public.
This data access model can be leveraged for dashboards classified as P1.