Concept explainer
Identity and sign-in
Explains how staff identities are held, how sign-in works in the Chamber, and how Pensieve links each action to a named person.
Each member of staff has one identity in Pensieve. You sign in as yourself, land in the Chamber, and every action you take carries your name. This page explains how that identity is held, how sign-in works, and how the record stays tied to the person who acted.
One identity per person
An identity is the single account that stands for you across the organisation. It is held once in the hospital model, in Nexus Manager, and it travels with you to every site you work at.
You keep one identity through your time at the hospital. Your role and the teams you belong to can change around it, and your identity stays the same. That is what lets the record name you consistently, wherever you act.
Your identity is yours alone
One identity belongs to one person. If a colleague needs their own access, they receive their own identity rather than borrowing yours.
Ways to sign in
You sign in the way that suits where you are working. Each method proves you are the holder of your identity, and each lands you in the same place.
Landing in the Chamber
When you sign in, you land in the Chamber, the staff desktop. The dock shows the actions your role and your relationships allow, so the screen in front of you is the set of things you may do.
If an action you expect is absent from the dock, your role or your relationship to that patient settles it. Ask an administrator to check your access in Cirith Manager, and the dock updates once your access does.
Every action carries your name
Each read and each change you make names you and the moment you made it. This is attribution, and it is what keeps the record truthful about who acted.
Attribution follows the identity you signed in with, rather than the workstation. Two people at one machine produce two attributed accounts, because each signed in as themselves.
Attribution holds under pressure
On a shared ward workstation, each member of staff signs in as themselves, so the record stays truthful about who acted even when several people use one screen through a shift.
When your account changes
Your account is active while you work. If it is suspended or closed, sign-in stops and any open sessions end, so access matches your standing at the hospital.
If your account is suspended, your sessions end and you sign in again once it returns to active. An administrator manages that change in the hospital model.
Common questions
Do I need a separate account for each site?
You hold one identity, and it travels with you across the sites you work at. Your identity is held once in the hospital model, so your history reads the same at every site you work at.
Does my PIN work on any workstation?
Your PIN pairs with the enrolled workstation, so it signs you in on the machines an administrator has set up. Sign in with your passphrase on any other workstation.
Does signing in decide what I can see?
Signing in proves who you are. What you may see is decided from your role and your relationship to the patient in front of you, and the dock draws that decision.
A shared workstation applies the same identity to a quicker sign-in and a faster handover. Read how a shared workstation keeps each session separate at shared workstations, and how the dock is drawn from your permissions at the dock shows what you can do.