CareRight has three mechanisms to lock or disable a user account.
The first: CareRight supports a maximum of 20 failed password attempts. If this is exceeded, an account is temporarily locked for a 20 minute period.
The second: via Admin > Users and Groups > Staff Members, when an account is Disabled - this will prevent login and give the user a 'locked' message. To grant access, uncheck the control.
The third: via Admin > Users and Groups > User, when an account has no groups allowing access. To grant access, simply add the relevant group(s).
User unlocks own account: too many attempts
When an account is locked, instructions to unlock the account are emailed, provided an SMTP server is correctly configured. Users may resend instructions as required:
System Administrator unlocks
System Administrators can unlock an account. Simply navigate to System Adminstration > Users and Groups; then search for the relevant user.
