INFO: User Management: Read Only Permissions

CareHub supports Read‑Only user permissions to allow users to view information without the ability to make changes. This is commonly used for auditors, leadership, or external stakeholders who need visibility into CareHub without edit access.

This article outlines how Organization Admins can:

• Update existing users to Read‑Only access
• Request creation of new Read‑Only users

---

What Is Read‑Only Access?

Users with Read‑Only permissions can:

• View participant records and workflows
• Navigate through CareHub modules and Clinical EMR chart
• Review documentation and reports

Read‑Only users cannot:

• Create, edit, or delete records in CareHub or Clinical EMR
• Perform administrative or clinical actions

---

Who Can Manage Read‑Only Users?

Only users with Organization Admin privileges can:

• Update admin privileges for existing users
• Submit requests to create new Read‑Only users

---

Update an Existing User to Read‑Only Access

Organization Admins can update current users directly in CareHub.

Steps

1. Log in to CareHub.
2. Navigate to User Management.
3. Open the User List.
4. Locate the user you want to update.
5. Select the user to open their profile.
6. In the Set Privileges field, change the selection to Read Only.
7. Save your changes.
8. Use the "Go to EMR" link to open Elation.
9. From the Settings > Manage Accounts, edit the user's account to select "Read only access".  
   • The CareHub user access will enforce read-only in Elation, this is to ensure the configuration of the accounts remain aligned. 
   • It's recommended to create a security role to apply to read-only users

✅ The user’s access is updated; recommend user logs out for change to take effect. 

---

Request a New Read‑Only User

New Read‑Only users are created through the Shared User Roster and require submission to the IntusCare Support team.

Steps

1. Open the Shared User Roster for your PACE organization.
2. Add a new row for the user.
3. Complete all required user information.
4. In the Admin Privileges column:
   • Select Readonly from the dropdown list
5. Review your entry for accuracy.
6. Submit the your request to the IntusCare Support Team 

📌 Once processed, the user will be confirmed with Read‑Only access in CareHub/Clinical EMR. 

Note: the user will not be assigned a security role, and will only have access to Tasks, IDT Meeting, and Scheduling. Additional details on how to create a security role for read-only: HOW TO: User Permissions - Security Roles & Patient Cohorts

---

Best Practices & Tips

• ✅ Use Read‑Only access for users who need visibility but should not modify data.
• ✅ Review user permissions regularly to ensure appropriate access.
• ⚠️ If a user’s role changes, update their permissions promptly to maintain compliance.

---

Updated: June 8, 2026