Managing Internal Users

Creating and assigning internal users grants them permissions to access and manage ePRO Vault data and ePRO functionality.

Understanding Permissions

User permissions are comprised of the security profile and the study-specific application role (if applicable).

• Security Profiles: These profiles are assigned to the user when they are created in the Vault and are the potential set of actions a user can do in the Vault. This, combined with the user application role, determines the user’s complete permissions.
  • A user can only have one security profile.
• Application Role: These roles are intended to map to real-world study roles. The combination of the security profile and application role determines what a user is able to do for that study.
  • A user can be assigned to multiple studies with different application roles for each study.

Security Profiles

The following security profiles are available for the ePRO Vault:

• Vault Owner: This security profile enables full management access to all Vault records and settings. Veeva recommends assigning only one Vault Owner for each Vault.
• System Administrator: This security profile enables full management access to all Vault records and settings, including the ability to add a new user to the Vault.
• Clinical Administrator: This security profile enables the following for all studies:
  • Can create and manage studies, study countries, and study sites
  • Can assign internal users¹ and site users²
  • Can access Veeva ePRO Studio or Study Home - only if assigned to the study with an application role that has appropriate permissions
• Study Team User: This security profile enables the following for the study that the user is assigned to:
  • Can create studies, study countries, and sites Note: If the user creates a study, they are automatically assigned to the study.
  • Can manage study, study countries, and study sites
  • Can assign internal users¹ and site users² to the study
  • Can access Studio or Study Home if assigned with an application role that has appropriate permissions.
• Read-Only User: This security profile enables the following for the study that the user is assigned to:
  • Can view studies, study countries, study sites, internal users, site users
  • Can access Study Home if assigned with an application role that has appropriate permissions.

Application Roles

Application roles are intended to map to real-world study roles. The application roles you assign to users also determine whether they can access Study Home or Studio. See the following information to see which roles can access Study Home and Studio:

• The following roles allow users to access Study Home to view study data:
  • Data Manager
  • Monitor
  • Study Manager
  • Study Viewer
• The Study Builder role allows users to access Studio to build the study.

Creating a New User

Only Vault Owners and System Administrators can create new users. See How to Create New User Accounts on the Creating & Managing Users page for more information.

Assigning a User to a Study

1. Ensure that the user already exists in Vault.
2. Assign them to the study they are working on by creating an Internal Person record for that study and selecting the appropriate Application Role.
3. If the study has restricted data, ensure that you select the Access Restricted Data check box for any user who should be able to see the survey data that is restricted. If you select an incorrect value, you will need to inactivate the record and create a new one.

Looking for site user assignment information? See Creating and Assigning Site Users.

Edit Restricted Data Access

You must inactivate an internal person record and create a new one any time you want to change their access status. This is to ensure that the User Access report can accurately record the beginning and end of each user’s restriction access.

Inactivate Internal Users

To remove an internal user’s access to the study, select Change State to Inactive from the actions menu of the internal personnel record.