docs.healthdata.beAccess Manager actions using the EAM interface
Table of contents
How to add an own EAM account using the EAM interface?
How to add an EAM account for another user using the EAM interface?
How to approve an EAM account approval request using the EAM interface?
How to create a new user inside EAM manually?
How to add an existing user to EAM and your organization manually?
How to disable an EAM account using the EAM interface?
How to enable an EAM account using the EAM interface?
How to restore an EAM account using the EAM interface?
How to block / unblock an EAM user using the EAM interface?
How to promote an Authenticated User to Access manager using the EAM interface?
How to demote an Access manager to Authenticated user using the EAM interface?
How to view all users within the own organization(s) using the EAM interface?
This documentation is being updated regularly. We try to provide as correct, complete and clear as possible information on these pages. Nevertheless, if you see anything in the documentation that is not correct, does not match your experience or requires further clarification, please create a support ticket via our portal (https://healthdatabe.atlassian.net/servicedesk/customer/portals) or send us an e-mail via support.healthdata@sciensano.be to report this documentation issue. Please, do not forget to mention the URL or web address of the page with the documentation issue. We will then adjust the documentation as soon as possible. Thank you!How to add an own EAM account using the EAM interface?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
To log into our Entity Access Management system, you need to navigate to the https://eam.healthdata.be URL.
Logging in with itsme, eID
To log into the HD EAM Portal you need to click on the Login button on the top left of your screen.
Then select the Log in with eID button.
You will be redirected to the government's Federal Authentication Service (FAS), where you can log in with multiple digital keys with eID or digital identity.
If you choose to connect via itsme, you will need to enter your cell phone number.
Follow the instructions on your mobile device via the itsme application.
Once the itsme login procedure has been completed, confirm by clicking the green profile validation button ("Profiel bevestigen" or "Confirmer le profil") to log in into the HD EAM system (see image below).
| NL | FR |
 |  |
You are now directed to the profile page of an Access Manager which displays the data you have shared by eID, itsme or another digital key.
The Access Manager profile page
The main My Profile screen shows the Personal information of the Access Manager as well as the Linked accounts of this profile. You can sort this overview by Account, Email or State.
Attention:
The accounts listed in Linked accounts are the Access Manager's OWN accounts, NOT the accounts to be managed by an Access Manager.
With the release of EAM 3.1 the Organisations item was added to the Personal information section, indicating the organization(s) the Access Manager is affiliated with. In this way, users can be traced back and managed by the Access Manager more easily.
Creating an own account
Selecting one of the accounts in the Linked accounts window enables you to manage grants for your own accounts and to carry out several advanced actions.
Clicking your name and e-mail address on the top left of the screen toggles a toolbar with the tabs View profile, Edit profile, My Accounts and Log out.
Select the My Accounts tab if you want to create an account.
Click on the Add new Account button at the bottom to create and provision a new account.
To provision the account, you complete the Account e-mail address and select an Organisation/Application. Click on the Save button.
The created account is automatically added to the list of accounts.
It will also appear in the Linked accounts section of the profile page.
Return to the User Matrix (recommended)
How to add an EAM account for another user using the EAM interface?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
Go here to learn how to login via the Federal Authentication Service (FAS) with eID or itsme.
Adding an EAM account for a another user
Click on Manage on the top left of the screen in order to reveal the EAM menu. Click on EAM Users.
Select the user you want to create an account for by clicking on first name, last name or SSIN.
Click on the Add new Account button.
To provision the account, you complete the Account e-mail address and select an Organisation/Application. Click on the Save button.
Upon returning to the User Details page you will see that the account has been added.
Next step: Request approval of the added EAM account here.
Return to the User Matrix (recommended)
How to approve an EAM account approval request using the EAM interface?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
Go here to learn how to login via the Federal Authentication Service (FAS) with eID or itsme.
Approving an EAM account approval request
Click on Manage on the top left of the screen in order to reveal the EAM menu.
Select EAM Accounts followed by Approval.
Click on Approval to open the page with end-user accounts that are waiting to be approved:
There are two ways to approve these account approval requests:
- Check the selection box of the relevant approval request and select the Approve action in the drop-down menu. Then, click on the Apply to selected item button to perform the action.
- Click on the Edit button in the Operations column for the relevant account ...
... and subsequently on the Approve button in the Account: Manage grants screen.
The Account State changes to Approved.
After this, a fulfilment process will start to run in the background, resulting in an Account State change to Published.
Performing a push action
If this change does not take place within a reasonable amount of time - usually up to three hours - the account could be updated by means of a "push".
Therefore, return to the accounts overview screen.
First, check the Approved account that needs to be pushed (1). Then, open the Action drop-down menu and select the Update account (push) option (2). Finally, validate this action by clicking on the Apply to selected items button (3).
In case the push action does not trigger the expected result, you need to contact our Support service.
Return to the User Matrix (recommended)
How to create a new user inside EAM manually?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
Go here to learn how to login via the Federal Authentication Service (FAS) with eID or itsme.
Creating an EAM User manually
In case the Access Manager needs to upload just a few users, thereby not requiring the creation of a csv file for bulk upload, there is an option available to easily add new users to their own organization(s) and thus to the EAM system.
Click on Manage on the top left of the screen in order to reveal the EAM menu. Go to EAM Users and select Create user in the menu that pops up.
Fill out the requested information in the Create a new user screen.
Under Organisations on top of the screen you will find the organizations you, as an Access Manager, are currently managing. Select the organization for which you want to create a user by ticking the appropriate checkbox.
Furthermore, if you want to make this new user an Access Manager, you can activate the relevant setting.
Click on the Create button to submit the completed information. Next, when you return to the EAM Users overview via the EAM menu, you will see that the new user has been created and added to the list.
Return to the User Matrix (recommended)
How to add an existing user to EAM and your organization manually?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
Go here to learn how to login via the Federal Authentication Service (FAS) with eID or itsme.
Adding an existing user manually
In case a user already exists in the EAM system, but is not yet connected to the organization, the Access Manager is not able to see this user in the Users overview. This is, for example, the case if a user has logged into the system via eID or itsme, but has not created an account yet.
These users are skipped when the Access Manager carries out a user bulk upload, and an error message ("user already exists") will be returned by the system.
To add the existing user manually, click on Manage on the top left of the screen and then on EAM Users. Select Add existing user in the menu that pops up.
In the Add an existing user screen fill out the requested information.
Under Organisations on top of the screen you need to select the organisation you manage as an Access Manager.
Then you need to provide the Primary Email and/or the Social Security Information Number (SSIN) of the existing user. The primary e-mail address should be the one that has been provided by the user when creating an account.
Click on the Add button to submit. Upon returning to the EAM Users overview via the EAM menu, you will notice that the existing user has retrieved and added to the list.
Return to the User Matrix (recommended)
How to disable an EAM account using the EAM interface?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
Go here to learn how to login via the Federal Authentication Service (FAS) with eID or itsme.
Disabling an EAM account
Click on Manage on the top left of the screen in order to reveal the EAM menu. Select EAM Accounts.
Scroll down the displayed list of accounts and tick the selection box of the account(s) you want to disable. Go to the bottom of the page and click on the Action toggle button to select Disable account. Then, click on the Apply to selected items button.
Confirm with the Execute action button
This action triggers an email notification for the Authenticated User to inform about the account being disabled. The user is no longer able to login with the credentials at hand, and needs to contact the Access Manager to have the account enabled again.
Return to the User Matrix (recommended)
How to enable an EAM account using the EAM interface?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
Go here to learn how to login via the Federal Authentication Service (FAS) with eID or itsme.
Enabling an EAM account
Click on Manage on the top left of the screen in order to reveal the EAM menu. Select EAM Accounts.
Scroll down the displayed list of accounts and tick the selection box of the account(s) you want to enable. Go to the bottom of the page and click on the Action toggle button to select Enable Account.
To complete the action, you need to click on the Execute action button.
This action triggers an email being submitted to the Authenticated User with new credentials. All previously approved accesses will be restored.
Return to the User Matrix (recommended)
How to restore an EAM account using the EAM interface?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
Go here to learn how to login via the Federal Authentication Service (FAS) with eID or itsme.
Restoring an EAM account
Sometimes the Access Manager disables an EAM account to perform corrective actions without the Authenticated User of that account being able to login to the account.
Click on Manage on the top left of the screen in order to reveal the EAM menu. Select EAM Accounts.
Next, in the overview with the accounts of the Authenticated Users, click on the Edit button of the disabled account you wish to restore.
Next, to undo the Disabled state, you need to click on the Create New Draft button.
The Account State is restored to Draft, so that the Access Manager is able to carry out the necessary corrections on this EAM account.
After having restored the Draft status, the Access Manager first needs to request for approval by clicking on the Request approval button. The approval request needs then to be approved. Click here to learn how to do this.
Return to the User Matrix (recommended)
How to block / unblock an EAM user using the EAM interface?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
Go here to learn how to login via the Federal Authentication Service (FAS) with eID or itsme.
Blocking an EAM user
Click on Manage on the top left of the screen in order to reveal the EAM menu. Select EAM Users.
In the displayed overview you check the box of the user(s) that you want to block. Select "Block the selected users" in the drop-down menu below the users overview. Finally, click on the Apply to selected items button.
If the action was carried out succesfully, you will see that the blocked users have the status disabled.
Unblocking an EAM user
In order to restore the status of the users to Enabled, the Access Manager needs to check the relevant boxes in the EAM Users overview, select the Unblock the selected users action and confirm with the Apply to selected items button.
The status of the unblocked users will have reset to Enabled.
Return to the User Matrix (recommended)
How to promote an Authenticated User to Access manager using the EAM interface?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
Go here to learn how to login via the Federal Authentication Service (FAS) with eID or itsme.
Promoting to Access Manager
Click on Manage on the top left of the screen in order to reveal the EAM menu. Click on EAM Users.
To promote a certain user to Access Manager, you need to select the relevant checkbox and go to the Action drop-down toggle at the bottom of the page.
Click on the toggle button and select Promote to Access Manager. Select Apply to selected items at the bottom right of the screen to perform the change of the user type to Access Manager.
In case the Authenticated User is associated with multiple organizations, you need to select the one for which the user needs to be promoted to Access manager and confirm as appropriate.
The change is published in the users overview.
Return to the User Matrix (recommended)
How to demote an Access Manager to Authenticated user using the EAM interface?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
Go here to learn how to login via the Federal Authentication Service (FAS) with eID or itsme.
Demoting to Authenticated User
Click on Manage on the top left of the screen in order to reveal the EAM menu. Click on EAM Users.
To demote an Access Manager (to user type of Authenticated User), you need to select the relevant checkbox in the displayed list and go to the Action drop-down toggle at the bottom of the page.
Click on the toggle button and select Demote Access Manager. Select Apply to selected items at the bottom right of the screen to perform the change of the user type to Access Manager.
On the security query screen you click on the Execute action button to perform the change.
The change is published in the users overview.
Return to the User Matrix (recommended)
How to view all users within the own organization(s) using the EAM interface?
End-to-end process:
Navigating to the HD EAM Portal and Access Manager profile
Go here to learn how to login via the Federal Authentication Service (FAS) with eID or itsme.
Viewing all users within own organization(s)
Click on Manage on the top left of the screen in order to reveal the EAM menu. Select EAM Users.
The page shown displays an overview of all users for the organization(s) that are within the scope of the Access Manager.
To support the Access Managers in their tasks, the Users overview has been improved on following aspects:
- the EAM Users overview can be sorted by First name, Last name, Primary email, SSIN, EAM role and Status;
- the EAM Users overview can be exported as a csv format file;
Return to the User Matrix (recommended)
This documentation is being updated regularly. We try to provide as correct, complete and clear as possible information on these pages. Nevertheless, if you see anything in the documentation that is not correct, does not match your experience or requires further clarification, please create a support ticket via our portal (https://healthdatabe.atlassian.net/servicedesk/customer/portals) or send us an e-mail via support.healthdata@sciensano.be to report this documentation issue. Please, do not forget to mention the URL or web address of the page with the documentation issue. We will then adjust the documentation as soon as possible. Thank you!