Access to Hand Hygiene is managed in the Users app in the Kio Cloud section of the Launchpad, not within Hand Hygiene itself. Each user who needs access must have a user profile and be assigned a role for each app they use. An app appears on a user's Kontakt.io Launchpad only if they are assigned a role for it.
Hand Hygiene work is done in three apps, and each app has its own roles:
- The Hand Hygiene web app has seven roles, under Roles for Apps > Hand Hygiene.
- The Kio Nurse Assistant mobile app uses the Hand Hygiene User role, under Kio Nurse (Mobile).
- The Kio Setup Manager mobile app, used to install Dispenser Beacons, uses the Device Management roles Administrator, Editor All, and Editor.
User profiles are created and managed by users assigned the User Management Administrator role, who also assign the roles. For organizations without single sign-on (SSO), Hand Hygiene Administrators are often also given the User Management Administrator role so they can manage users directly. For accounts with SSO, profiles and role assignments come from your identity provider and can only be viewed in the Users app. See Add a user and Assign roles and access to a user.
Who uses what
Web app
Hand Hygiene
Who: Infection prevention, managers, contact tracers, and nurses.
Roles (Hand Hygiene web app):
- Manage: Administrator
- Work in it: User, Contact tracer, Nurse Manager
- View, or own team: Viewer, Limited User, Nurse
Key requirement: The Nurse role needs a linked staff profile.
Mobile app
Kio Nurse Assistant
Who: Nurses and badge wearers.
Role (Kio Nurse (Mobile)): Hand Hygiene User
Key requirement: The Unique Ext. ID must match the Staff ID, and the staff profile needs a department.
Mobile app
Kio Setup Manager
Who: On-site installers.
Roles (Device Management): Administrator, Editor All, Editor
Key requirement: Dispenser Beacons must also be claimed in Device Management.
All access is set in the Users app by a User Management Administrator, along with campus access.
Using more than one app: Assign the mobile Hand Hygiene User role directly to everyone who uses Kio Nurse Assistant, including Hand Hygiene web Administrators and Users. Many nurses use both Team Dashboard in the web app and Kio Nurse Assistant, so they need a role in each. Hand Hygiene and Device Management each have their own Administrator role; one does not grant the other.
What makes up a user's access
Three things decide what a person can do and see in Hand Hygiene:
| Part of access | Where it is set | What it decides |
|---|---|---|
| Role | The Users app | The menus a person has access to and what they can do there. A user can hold more than one role, and has access to everything any of their roles allows. |
| Campus access | The Users app | Which campuses' data a person sees. It applies across Kio Cloud apps. Data is shown by the campus where the opportunity happened, not by the staff member's home location. Hand Hygiene roles are not limited by department. |
| Assigned Home Location | The person's staff profile in Hand Hygiene | The department, and its campus, that the person's Team Dashboard standings and rewards belong to. |
The role decides what a person can do, and campus access decides where. The Assigned Home Location does not change either one. It only tells Hand Hygiene which department is the person's own.
The Assigned Home Location comes from a staff profile, not from the user profile. Hand Hygiene finds it by matching the user's Unique Ext. ID in the Users app to a staff profile's Staff ID. Until the two are linked, Hand Hygiene cannot place the person in a department. See Link staff profiles to user accounts.
The user profile in the Users app also has an Assigned Home Location field. Hand Hygiene does not use it. Set the person's department on their staff profile in Hand Hygiene.
Hand Hygiene roles
Hand Hygiene has seven roles, assigned from Roles for Apps > Hand Hygiene in the Users app.
| Role | What it is for |
|---|---|
| Administrator | Full access to the web app, including everything under Settings, except Contact Tracing. The only role that has access to Settings (Rewards, Staff Roles, Staff, Dispenser Types, Dispensers, Room Types, Room Matching, Settings, Alert Rules, and Test Mode), and so the only role that can manage Rewards, import staff, and add, edit, or import dispensers. Typically infection prevention leads and program owners. |
| User | Access to every area except Settings and Contact Tracing. Can add and edit staff from Management > Staff. Cannot import staff, add or edit dispensers, or change Settings. |
| Contact tracer | Everything the User role can do, plus Contact Tracing. The only role that has access to Contact Tracing. |
| Viewer | Read-only access to Compliance, Dispensers Management, and Alerts. Cannot create, edit, or import. |
| Limited User | The same access as Viewer: Compliance, Dispensers Management, and Alerts, read-only. |
| Nurse Manager | Compliance, Reports (the Compliance and Dispenser Activations report types only), and Team Dashboard. No Management or Settings. |
| Nurse | Team Dashboard only, for the person's own department. Hand Hygiene opens on Team Dashboard at sign-in. The user account must be linked to a staff profile with an Assigned Home Location, or Team Dashboard shows an error instead of results. |
What each role can do
Yes means the role has access to the area; No means the menu item does not appear for that role.
| Capability | Administrator | User | Contact tracer | Viewer | Limited User | Nurse Manager | Nurse |
|---|---|---|---|---|---|---|---|
| Compliance | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Dispensers Management | Yes | Yes | Yes | Yes | Yes | No | No |
| Alerts | Yes | Yes | Yes | Yes | Yes | No | No |
| Acknowledge or resolve alerts | Yes | Yes | Yes | No | No | No | No |
| Reports | Yes | Yes | Yes | No | No | Yes | No |
| Team Dashboard | Yes | Yes | Yes | No | No | Yes | Yes |
| Management: Staff, Dispensers Telemetry, All Opportunities | Yes | Yes | Yes | No | No | No | No |
| Add and edit staff (Management > Staff) | Yes | Yes | Yes | No | No | No | No |
| Import staff; add, edit, or import dispensers | Yes | No | No | No | No | No | No |
| Contact Tracing | No | No | Yes | No | No | No | No |
| Settings, including Alert Rules, Rewards, and Test Mode | Yes | No | No | No | No | No | No |
Kio Nurse Assistant access and role requirements
Mobile access to Kio Nurse Assistant is assigned separately from the Hand Hygiene web roles, under Kio Nurse (Mobile) in the Users app, which has its own two roles: Hand Hygiene User and Asset Tracking User. A user can hold either or both. See About user access to Kio Nurse Assistant.
For a badge wearer to see their own Hand Hygiene results in Kio Nurse Assistant, they need all four of these:
| Requirement | Where it is set | Why it is needed |
|---|---|---|
| A user profile | The Users app | To sign in to Kio Nurse Assistant. |
| The Hand Hygiene User role, under Kio Nurse (Mobile) | The Users app | To open Hand Hygiene in the app. A person with no Kio Nurse (Mobile) role cannot use the app. |
| A Unique Ext. ID that exactly matches their Staff ID | The user profile in the Users app, or your identity provider for SSO users | To link the user who signs in to the staff profile their badge results are counted against. Case and leading zeros must match, and no two users can share a value: editing a user profile to a value already in use shows Unique Ext. ID is already used by another user. See Link staff profiles to user accounts. |
| A staff profile with an Assigned Home Location that includes a department | The staff profile in Hand Hygiene | To place the person in their department for their journey, race, and rewards. |
The first two let the person open the app. The last two let the app show their results.
Users who hold the Administrator or User web role may also have been given the mobile Hand Hygiene User role during a platform update, and it stays if the web role is later removed. To be sure, assign Hand Hygiene User directly to everyone who uses Kio Nurse Assistant, including most badge wearers. The Kio Nurse (Mobile) roles do not grant the web Team Dashboard.
Kio Setup Manager access for installers
Installing the Dispenser Beacons that Hand Hygiene relies on is done on site with the Kio Setup Manager mobile app. Kio Setup Manager access comes from Device Management roles, assigned under Roles for Apps > Device Management in the Users app. Dispenser Beacons are devices, so installers need a Device Management role rather than a Hand Hygiene role:
| Device Management role | What the installer has access to in Kio Setup Manager |
|---|---|
| Administrator | All devices in the account |
| Editor All | All devices in the account |
| Editor | The devices assigned to them |
See About user access to Kio Setup Manager.
The Dispenser Beacons and their gateways also need to be claimed in Device Management before Hand Hygiene can use them.
How users and Groups are managed
How users are created and maintained depends on whether your organization uses single sign-on (SSO):
- Managed users are created and maintained directly in the Users app. A Managed Group can assign roles and campus access to several users at once.
- SSO users sign in through your identity provider, which supplies their identity, roles, and campus access. These sync into the Users app as view-only — you change them in the identity provider.
Instead of setting roles and campus access in each person's profile, you can assign them to a Group and add members to it. Members inherit the Group's application roles and campus access in addition to anything set directly on their profile. See About Groups, Assign application roles to a Group, and Assign campuses to a Group.
The tasks for managing users are shared across all Kio apps and live in the Users app:
- Add a user — create a managed user.
- Assign roles and access to a user — give a person a Hand Hygiene role and set campus access.
- Enable, disable, or delete a user — change or remove a person's access.
Roles that live outside Hand Hygiene
The roles above control access inside the Hand Hygiene web app. The roles below affect Hand Hygiene indirectly by governing the platform resources it depends on, and are all assigned in the Users app.
| Role | Why it matters to Hand Hygiene |
|---|---|
| User Management Administrator | Required to create users and assign Hand Hygiene roles (and the Device Management roles Kio Setup Manager uses). |
| Smart Location Administrator | Required to create or change the rooms that Room Matching maps to Room Types. |
| Device Management Administrator | Required to claim and manage Smart Badges, Dispenser Beacons, and gateways. |