Administration of Restricted Access 104-06020000
This document outlines the processes that the National Restricted Access Team (NRAT) and Restricted Access Manager undertake to manage a Restricted Access customer and their record.
On this page:
Changing the RA Manager within the same service centre
Temporary access to a Restricted Access customer's record
Transfer of a Restricted Access customer from one service centre to another
Removal of Restricted Access from a customer's record
Restricted Access (RA) work items
Recording a Restricted Access application
Assessment of application by Restricted Access manager/APS6 Business administrator
Access for authorised users
Table 1: this table describes the process for the National Restricted Access Team (NRAT) and Restricted Access Managers to set up a team of authorised users of Restricted Access.
Item |
Description |
1 |
Request the required security roles + Read more ... New Restricted Access Managers Submit a request for RESTRICTED ACCESS MANAGER within ESSentials. This request must be approved by their line manager and the role owner. See Accessing and personalising Customer First for more information. Access and Temporary Officers At least one and up to 3 Access Officers are required to be assigned to a Restricted Access customer. All users must have CSO or CSO.DIRECT business role beforehand. Submit a request for RESTRICTED ACCESS OFFICER L1 within ESSentials for staff who will be authorised to access any restricted customer records under their control. This request must be approved by their line manager and the role owner. Note: once approved, provisioning of these resources is undertaken overnight. These officers will be known as Temporary Officers and must be APS3 or above, in line with current business practice. See Accessing and personalising Customer First for more information. |
2 |
Request the required Skill Tags + Read more ... Restricted Access Managers Restricted Access Managers who do not have a Restricted Access Skill Tag approved must submit a request in ESSentials for the RA_MAN (RA Manager) Skill Tag for approval by their line manager. This allows search results of restricted records assigned to the Restricted Access Manager to be viewed while the search results will be hidden for other users. Note: the user must not have both RA_MAN and RA_O_L_1 assigned at the same time. Temporary Officers Temporary Officers who did not have a Restricted Access Skill Tag approved before 4 September 2015 require the RA_O_L_1 (RA Officer Level 1) Skill Tag assigned to them in ESSentials. Specify the required start and end dates, remembering that Temporary Officers should not be given access for more than 7 days. The approving officer for RA Officer Level 1 Skill Tag is their line manager. This will allow search results of restricted records to be displayed to authorised officers while the results will be hidden for other users. Note: other Restricted Access Skill Tags are not to be assigned to staff, as they are to be used for Child Support implementation of Restricted Access. The 'Create Skill tag' task card in ESSentials is available for guidance on requesting Skill Tags for staff. The Resources page contains a link to the task card. From the task card:
Once the RA Officer Level 1 Skill Tag has been approved, the NRAT or Restricted Access Manager must link the Temporary Officer to all relevant Restricted Access customer records. Note: once approved, provisioning of these resources happens overnight. When the request is approved in ESS, send an email to NRAT for temporary access to be coded on the customer record. |
Changing the RA Manager within the same service centre
Table 2: This table outlines how to replace an existing Restricted Access (RA) Manager with another RA. Only staff with RA Business Administrator access can do the update
Step |
Action |
1 |
Access the customer's record + Read more ... If the customer's moves to another site or the RA manager role is going to another staff member a change of contacts is required. If using:
|
2 |
Process Direct – update RA Manager + Read more ...
|
3 |
Customer First - Locate the current Restricted Access Manager in the record + Read more ... In the customer's record go to the Sensitive Customer Information assignment block in Workspace.
|
4 |
Customer First - Remove the current Restricted Access Manager from the customer's record + Read more ...
|
5 |
Customer First -Add the new Restricted Access Manager to the customer's record + Read more ...
|
6 |
Finalise record + Read more ... Clear out of the customer’s record and wait a couple of minutes before accessing the customer’s record again. This is required to ensure a record locking conflict does not prevent the Centrelink system record from being updated. |
Temporary access to a Restricted Access customer's record
Table 3
Step |
Action |
1 |
Staff requirements for temporary access to a Restricted Access customer's record + Read more ... Temporary access is not granted to Irregular and Intermittent (IIE) and Contractor staff. To be granted temporary access to a Restricted Access customer record staff must:
Does the staff member have a specialist role, is APS3 or higher and have the required Security Roles and Skill Tags?
|
2 |
Access the Restricted Access customer's record + Read more ... Select the system being used: Process Direct + Read more ...
Customer First + Read more ...
|
3 |
Update the Relationship details + Read more ... Select the system being used: Process Direct + Read more ...
Procedure ends here Customer First + Read more ...
Procedure ends here |
Transfer of a Restricted Access customer from one service centre to another
Table 4
Step |
Action |
1 |
Restricted Access customer changes address + Read more ... The losing Restricted Access Manager must firstly action the record when a Restricted Access customer:
Is the customer moving temporarily?
|
2 |
Customer moving permanently + Read more ... Is the customer moving interstate?
|
3 |
Contact the new Service Centre Manager and update the customer's record + Read more ... Check the customer's new address and contact the relevant Service Centre Manager for the service centre responsible for the customer's new location by phone. Send an email to National Restricted Access Team with the relevant details. Complete the steps below while on the phone with the gaining Service Centre Manager. Select the system being used: Process Direct + Read more ...
Customer First + Read more ...
|
4 |
Gaining Service Centre Manager action + Read more ... Remain on the phone with the losing Restricted Access Manager until completion of the following steps. If using:
|
5 |
Determine if Restricted Access is suitable at new address + Read more ... Assess if Restricted Access is suitable for the customer as a change of location may remove the requirement. Check Notes and the Document List (DL) screen on the customer's record for any Notes/DOCs related to the change of address and view the customer's previous Restricted Access Application for the reason Restricted Access was approved. Is Restricted Access appropriate for the customer at the new address?
|
6 |
Restricted Access is rejected + Read more ... Select the system being used: Process Direct + Read more ...
Customer First + Read more ...
|
7 |
Restricted Access is to continue accepted + Read more ... The customer's record will remain restricted and can only be access by the National Restricted Access team and the nominated Temporary Officers
Note: if the customer has a partner or other customers live with the protected customer, Restricted Access is to be applied to their records to protect the customer's whereabouts. Advise losing Restricted Access Manager that Restricted Access is accepted. Losing Restricted Access Manager, go to Step 8 Gaining Restricted Access Manager, go to Step 9. |
8 |
Losing Restricted Access Manager + Read more ... Transfer of customer's paper file If the customer's Restricted Access application is:
Contact the customer to confirm their record has been transferred to the service centre for their new location, their Restricted Access status is being/has been assessed by the gaining Restricted Access Manager and that the gaining Restricted Access Manager will provide their new contact details. Procedure ends here. |
9 |
Gaining Restricted Access Manager + Read more ... Contact the customer to confirm their record has been transferred to their service centre. If the customer's Restricted Access application is:
Once the customer's paper file is received, securely store the file in a lockable cabinet, safe or other suitable location. |
Removal of Restricted Access from a customer's record
Table 5: this table describes the process for the National Restricted Access Team (NRAT) or a Restricted Access Manager to remove Restricted Access from a Restricted Access customer record.
Step |
Action |
1 |
Access the customer's record + Read more ... A Restricted Access customer's circumstances have changed and they no longer require Restricted Access to their record. Select the system being used Process Direct: + Read more ...
Customer First: + Read more ...
|
2 |
Update the Restricted Access Application + Read more ... On the Restricted Access Application screen, change the Status field to RA Removed Select Save and Back Clear out of the customer’s record and wait a couple of minutes before accessing the customer’s record again. This is required to ensure a record locking conflict does not prevent the Centrelink system record from being updated. |
3 |
Check delivery of mail and messages for the customer + Read more ... Check if the customer receives their letters online.
Ask the customer if they would like to subscribe to Centrelink Electronic Messaging. See Centrelink letters online and Electronic Messaging. Ensure that the customer’s contact details are current, including:
Record details of removal of Restricted Access and changes on a DOC. |
Restricted Access (RA) work items
Table 6
Item |
Description |
1 |
Process Direct - access and action RA work items + Read more ... Only staff with appropriate access will be able to search
|
2 |
Customer First - access and action RA work items + Read more ... This function is available to RA Managers and RA Administrators only.
|
Recording a Restricted Access application
Table 7
Step |
Action |
1 |
Restricted Access applications + Read more ... If the National Restricted Access Team determines that Restricted Access is appropriate for the customer, the Restricted Access officer submits a Restricted Access Application in either:
|
2 |
Creating a Restricted Access application - Process Direct + Read more ... In the customer's record:
|
3 |
Creating a Restricted Access application - Customer First + Read more ... In the customer's record:
The Restricted Access Application will workflow to the National Restricted Access Team as recorded on the Security Data Warning (SDW) screen. The National Restricted Access Team or the Restricted Access Business Administrator security role can select the application and finalise the application. |
4 |
Tell the customer their application will be considered and to expect phone contact + Read more ... Where an assessment cannot be made immediately, the National Restricted Access Team will contact the customer by phone (from a private number) to advise of the decision. Tell the customer if the Restricted Access is granted:
If the application is granted, the customer will be asked to provide a verbal declaration of their acceptance of Restricted Access Acknowledgement obligations. Remind the customer:
If the application is not successful, tell the customer they may discuss the decision with the National Restricted Access Team Manager or pursue other avenues such as the Commonwealth Ombudsman. To assess and finalise an application, go to Table 8. |
Assessment of application by Restricted Access manager/APS6 Business administrator
Table 8
Step |
Action |
1 |
Access Restricted Access Application + Read more ... Process Direct
Customer First
Check that a postal address is recorded for the customer. Determine if Restricted Access is suitable for the customer. Is Restricted Access suitable for the customer?
|
2 |
Read Restricted Access obligations and get verbal declaration from customer + Read more ... Phone the customer and read them the verbal declaration - Customer Restricted Access acknowledgement script: 'A computer access protection system has now been added to your computer record. It will restrict access to your computer records to all staff other than those authorised to access your record. You agree to undertake the following obligations:
Ask the Restricted Access customer if they live with other people. If so, tell them they may need to discuss the Restricted Access with the person/people they live with. Tell the customer, if they accept their Restricted Access obligations and their record is restricted, their partner's record will also be placed on Restricted Access. Ask the customer if they accept their Restricted Access obligations. Does the customer accept their Restricted Access obligations?
|
3 |
Restricted Access is granted + Read more ... Process Direct
Customer First
Clear out of the customer’s record and wait a couple of minutes before accessing the customer’s record again. For help to add a Restricted Access officer, see Administration of Restricted Access. |
4 |
Restricted Access is rejected + Read more ... Advise the customer their application for Restricted Access has been rejected and that they may discuss the decision with the Restricted Access manager or pursue other avenues such as the Commonwealth Ombudsman. Process Direct
Customer First
Procedure ends here. |
5 |
Create Note/DOC and tell customer their record is restricted + Read more ... Create a closed Note/DOC in either: Process Direct - use Notes Customer First - use Fast Note- select Auto text, use Generic > Restricted Access > Restricted Access verbal acceptance. Confirm Tell the customer their record is now restricted and can only be accessed by authorised officers and other authorised temporary officers. Does the customer have a partner?
|
6 |
Check partner's postal address + Read more ... In the partner's record, check if the partner has a current postal address (POS). If not recorded, add a postal address. Note: Restricted Access will not apply correctly to the partner's customer record if a postal address is not recorded. Create and grant Restricted Access in either:
|
7 |
Create and grant Restricted Access on partner's record - Process Direct + Read more ...
Procedure ends here. |
8 |
Create and grant Restricted Access on partner's record - Customer First + Read more ...
On the partner's Restricted Access Application screen:
|