Skip to main content

Admin Guide

As a SecureHealth administrator, you have full system access and are responsible for managing users, configuring security settings, monitoring system activity, and ensuring HIPAA compliance.

Admin Dashboard Overview​

The admin dashboard provides comprehensive system management capabilities:

  • System Configuration: Configure encryption, audit settings, and security policies
  • Audit Logs: View all system activity and compliance reports
  • Security Monitoring: Monitor for security incidents and unusual activity
  • Demo Data Management: Manage demo data for testing and demonstrations
  • Medical Knowledge: Configure and manage medical knowledge base
  • Encryption Testing: Test and demonstrate encryption capabilities

User Management​

Note: User management interface is planned for future release. Currently, users are managed through database commands and configuration files.

Planned User Management Features​

Future Capabilities:

  • User Creation: Create new user accounts through admin interface
  • Role Assignment: Assign roles through UI
  • Password Management: Reset passwords and manage password policies
  • User Deactivation: Temporarily disable user access
  • Bulk Operations: Manage multiple users at once

Current User Management​

Database Management

  • Users are stored in MongoDB users collection
  • Roles are managed through Symfony Security configuration
  • Password resets require database access
  • User creation requires command-line tools

Available Roles

  • ROLE_ADMIN: Full system access
  • ROLE_DOCTOR: Complete patient data access
  • ROLE_NURSE: Medical data access only
  • ROLE_RECEPTIONIST: Basic information access
  • ROLE_PATIENT: Patient portal access

System Configuration​

Encryption Settings​

Key Management

  • View current encryption keys
  • Rotate encryption keys
  • Monitor key usage
  • Configure key policies

Encryption Configuration

  • Review encryption schema
  • Update field encryption types
  • Monitor encryption status
  • Test encryption functionality

Audit Configuration​

Audit Logging

  • Enable/disable audit logging
  • Configure audit log retention
  • Set audit log levels
  • Configure audit log storage

Compliance Settings

  • Configure HIPAA compliance features
  • Set retention policies
  • Configure breach notification
  • Set up compliance reporting

Security Policies​

Password Policies

  • Set password complexity requirements
  • Configure password expiration
  • Set account lockout policies
  • Enable multi-factor authentication

Session Management

  • Configure session timeout
  • Set concurrent session limits
  • Configure session security
  • Monitor active sessions

Audit Log Management​

Viewing Audit Logs​

Access Audit Logs

  • Go to Admin → Audit Logs
  • View comprehensive audit trail
  • Filter by date, user, action, or resource
  • Search for specific events

Audit Log Details

  • View detailed log entries
  • See user actions and data access
  • Review security events
  • Export audit data

Compliance Reporting​

Generate Reports

  • Create compliance reports
  • Export audit data
  • Generate breach reports
  • Create access summaries

Report Types

  • Access Reports: Who accessed what data
  • Security Reports: Security incidents and alerts
  • Compliance Reports: HIPAA compliance status
  • User Activity Reports: User behavior analysis

Security Monitoring​

Real-time Monitoring

  • Monitor system activity in real-time
  • View security alerts
  • Track failed login attempts
  • Monitor privilege escalation

Security Alerts

  • Configure alert thresholds
  • Set up notification rules
  • Review security incidents
  • Respond to security alerts

Backup and Recovery​

Note: Backup and recovery features are managed through MongoDB Atlas and Railway deployment platform.

Current Backup Management​

MongoDB Atlas Backups

  • Automated daily backups enabled
  • Point-in-time recovery available
  • Backup retention configured per Atlas settings
  • Backup encryption handled by Atlas

Railway Deployment

  • Application state managed by Railway
  • Environment variables backed up
  • Deployment history maintained
  • Rollback capabilities available

Planned Backup Features​

Future Capabilities:

  • Manual Backup Creation: Create on-demand backups
  • Backup Verification: Test backup integrity
  • Custom Retention Policies: Configure backup retention
  • Backup Monitoring: Monitor backup status and alerts

System Health Monitoring​

Note: System monitoring is primarily handled through Railway and MongoDB Atlas platforms.

Current Monitoring​

Railway Monitoring

  • Application performance metrics
  • Deployment status monitoring
  • Resource usage tracking
  • Error logging and alerts

MongoDB Atlas Monitoring

  • Database performance metrics
  • Query performance analysis
  • Connection monitoring
  • Storage usage tracking

Planned Monitoring Features​

Future Capabilities:

  • Custom Dashboards: Create custom monitoring dashboards
  • Advanced Metrics: Detailed application metrics
  • Health Checks: Automated system health checks
  • Alert Configuration: Custom alert rules and notifications

Security Best Practices​

Access Control​

User Access

  • Regularly review user access
  • Remove unused accounts
  • Monitor user activity
  • Implement least privilege

Administrative Access

  • Limit admin access
  • Use strong authentication
  • Monitor admin activities
  • Implement separation of duties

Data Protection​

Encryption

  • Ensure all data is encrypted
  • Monitor encryption status
  • Rotate encryption keys
  • Test encryption functionality

Audit Logging

  • Verify audit logging is active
  • Monitor audit log integrity
  • Review audit logs regularly
  • Maintain audit log retention

Compliance​

HIPAA Compliance

  • Regular compliance assessments
  • Update security policies
  • Train staff on compliance
  • Document compliance activities

Incident Response

  • Implement incident response procedures
  • Train staff on incident response
  • Test incident response procedures
  • Document security incidents

Troubleshooting​

Common Issues​

User Access Problems

  • Check user account status
  • Verify role permissions
  • Review audit logs
  • Reset user password

System Performance Issues

  • Monitor system resources
  • Check database performance
  • Review application logs
  • Optimize system configuration

Security Alerts

  • Investigate security alerts
  • Review audit logs
  • Check system configuration
  • Update security policies

Getting Help​

Documentation

  • Review system documentation
  • Check troubleshooting guides
  • Consult security best practices
  • Review compliance requirements

Support

  • Contact technical support
  • Escalate security issues
  • Report system problems
  • Request additional training

Admin Checklist​

Daily Tasks​

  • Review audit logs
  • Check system status on Railway
  • Monitor MongoDB Atlas metrics
  • Review security alerts

Weekly Tasks​

  • Review audit log patterns
  • Check backup status in Atlas
  • Monitor system performance
  • Review demo data integrity

Monthly Tasks​

  • Conduct security assessment
  • Review compliance status
  • Update medical knowledge base
  • Test encryption functionality

Quarterly Tasks​

  • Review encryption key status
  • Test disaster recovery procedures
  • Review user permissions
  • Update system documentation

Next Steps​