User roles and access

When a user is added the access permissions to the different REACT applications is dependent upon the role they have within the system.

When a user is added as a trained user, they will have access to the VA HUB component of REACT (if also granted permissions in Azure Enterprise)

This role has permissions to view the REACT Base Package views but in addition can be granted permissions to the Oncology Package views (see section: Controlling views in VA HUB for details)

A trained user can be assigned the Global Administrator if required, this role has additional permissions and in addition to VA HUB, can access ADMIN UI and VA Security components of REACT (if also granted permissions in Azure Enterprise)

The Global Administrator role has permissions to view both the Base Package and Oncology Package views.

The table below shows the access granted to a trained / authorised user vs. a global administrator

Access Privilege	Trained /Authorised User	Global Administrator
Access VA HUB
View Base Package
*View Oncology Package
Access VA Security
Add User Roles
Remove User Roles
Access ADMIN UI
Access to ETL Report
Add / Remove/ Edit Drug Programme
Add / Remove / Edit Dataset

*View Oncology Permissions: permissions to view the Oncology Package are granted separately for a trained / authorised user - they are not granted automatically when the role is created