EPCS Access Management

The DEA requires two people to set or change who may prescribe controlled substances: one enters the change, and another approves it with two-factor authentication. The ePrescription module lets each location appoint its own access managers for this job:

• An administrator access manager nominates EPCS approvers and lists access permissions at the location.
• An EPCS approver approves access changes with two-factor authentication.

Each role applies to an Aidbox User at a Location. A nomination invites a user to become an EPCS approver at that location.

The Aidbox App exposes the operations under /e-prescription/access/epcs:

• Configure Access Policies: decide who may call each operation. Do this first.
• Bootstrap the First Administrator: grant a location's first administrator during deployment.
• Approver Nominations: nominate the first approver, accept or cancel a nomination, and list nominations.
• List Permissions: list your own permissions and those at the locations you administer.

The operations work whether or not controlled-substance prescribing is enabled, so you can set up access managers ahead of time.