1200, Application Security for CLASS and IMPACT

Revision 23-3; Effective Sept. 22, 2023

To preserve the integrity of confidential information within the Child Care Licensing Automation Support System (CLASS) and Information Management Protecting Adults and Children in Texas (IMPACT) system, CCR employees and certain stakeholders:

  • follow HHSC and DFPS policy for application security;
  • are assigned security roles in CLASS; and
  • are granted access to IMPACT by DFPS as needed.

1210 Assigning Security Roles in CLASS

Revision 23-3; Effective Sept. 22, 2023

Each HHSC employee and stakeholder who has approval to use the CLASS is assigned a core security role. The role is based on the employee's job classification, title and duties.

See Appendix 1000-2: Security Roles and Functions in CLASS for:

  1. a list of the core security roles;
  2. the functions performed by persons in those roles; and
  3. the pages in CLASS used to perform the functions associated with the roles.

Requests for roles that require additional security permissions are considered individually, based on the business need.

Examples of tasks that require additional security permissions include:

  1. updating CLASS to reflect changes in the minimum standards;
  2. maintaining information in the Administrators' Licensing System (ALS) in CLASS; and
  3. maintaining the Technical Assistance Library in CLASS.

Additional Roles

Requests for additional security roles are considered individually, based on the business need.

Additional RoleSummaryCLASS Functions
District Director or ManagerProvides all the functionality assigned to the role of Supervisor, plus the District Director or Manager provides the functions described in the CLASS Functions column to the right.
  • Provider Adverse Action Revocation or Denial – Access the Voluntary/Relinquish Withdrawal check box and Reason text box
  • Operation Main – Reopen a closed operation
  • Operation Main – Access the Do not display on the public/provider website check box
  • Application/Closure – Change the decision made on an application
  • User Request Reports – View an At Risk Facilities Report
State Office StaffProvides the functionality assigned to the role of Licensing Representative, plus the functions described in the CLASS Functions column, to the right.CLASS Document Library – view, upload and edit files.
Administrators’ Licensing System (ALS) in CLASSProvides all the functionality assigned to the role of Licensing Inspector, plus the functions described in the CLASS Functions column to the rightAdd and modify information about a licensed administrator.

CLASS Document Library – View all documents. Upload, edit and delete only files on ALS CLASS pages

1220 Assigning a Designee in CLASS

September 28, 2018

An employee may be assigned to perform functions for another employee in the CLASS. Employees assigned designee status are accountable for the responsibilities they are assigned while serving as designees.

If the designee performs casework for another employee, the designee is expected to produce the same quality of work that would be produced if the designee were working on his or her own caseload.

1221 Maximum Number of Designees in CLASS

September 28, 2018

Managers and Directors

Managers and directors may assign up to three designees each in CLASS.

Supervisors

Supervisors may assign up to two designees in CLASS.

Inspectors

A Child Care Licensing inspector may assign designee status to another Licensing inspector only for the purposes of:

  • completing a specific task; or
  • temporarily covering a caseload.

Once the specific task is completed, the designee status must be deactivated.

Examples of the tasks appropriate for assignment to a designee include:

  1. conducting courtesy interviews during an investigation;
  2. sharing inspection responsibilities, temporarily, for a vacant caseload; or
  3. completing other specific tasks assigned by a supervisor, manager, or district director.

Designees

A Licensing staff person may be appointed as a designee for up to five people.

1222 Time Limitations for Designees in CLASS

September 28, 2018

Child Care Licensing staff may only assign a designee in the CLASS for up to 90 days.

1230 Reassigning Cases, Deactivating Accounts, and Removing Roles in CLASS and IMPACT

September 28, 2018

Directors, managers, and supervisors manage and monitor the workloads of Child Care Licensing employees.

When the employment status of a Licensing employee changes, the employee's director, manager, or supervisor submits a Move, Add, or Change form (known as an eMAC) to request a change in the employee's access to systems such as CLASS and IMPACT.

To maintain security, the eMAC form must be submitted in a timely manner.

1231 Reassigning Cases in CLASS

September 28, 2018

Before an employee's access to CLASS may be removed, all of the employee's cases must be transferred to other employees.

Procedure

When possible, an employee's cases must be reassigned in CLASS before the employee's position is vacated. This includes the reassigning of operations, agency homes, and investigations.

When cases cannot be reassigned before an employee's position is vacated, the cases must be transferred in CLASS no later than five days after the position is vacated.

1232 Removing Rights to CLASS When an Employee Transfers Within HHSC

September 28, 2018

When a Child Care Licensing employee transfers to a new position within HHSC, the employee's rights to the CLASS must be removed at the time of the transfer.

Procedure

No later than the day after a Licensing employee transfers to a new position within HHSC, the employee's supervisor submits a Move, Add, or Change form (known as an eMAC) to request that the employee's rights to CLASS be removed.

1233 Removing Rights to CLASS When an Employee Voluntarily Leaves HHSC Employment

September 28, 2018

When a Child Care Licensing employee voluntarily leaves HHSC employment, all of the employee's rights to the network, including rights to CLASS, must be removed unless the employee is transferring to DFPS and needs to maintain access to CLASS.

Procedure

No later than the day after a Licensing employee voluntarily leaves HHSC employment, the employee's supervisor submits an eMAC (Move, Add, or Change form) to request that the employee's rights to CLASS be removed.

If the employee is transferring to DFPS and needs to maintain access to CLASS as part of the employee's DFPS job duties, the employee's supervisor reviews the employee's assigned security roles and submits an eMAC to request a different security role, if needed.

1234 Removing Rights to CLASS and IMPACT When an Employee is Involuntarily Terminated

September 28, 2018

When an employee is involuntarily terminated from HHSC employment, all of the employee's rights to the network, including rights to the CLASS and IMPACT systems, must be removed immediately.

Procedure

When an employee is involuntarily terminated, the supervisor immediately takes the following actions:

  • Transfers all of the open cases assigned to the former employee in CLASS to another Licensing employee
  • Submits an eMAC (Move, Add, or Change form) to request that all of the former employee's rights to any HHSC and DFPS systems (including CLASS and IMPACT) be removed
  • Requests the former employee's rights be removed immediately by contacting:
    • CLASS Program Support; and
    • IMPACT Application Security Administrator.

If the employee's cases cannot be transferred to another employee immediately in order to terminate the employee's rights to all systems:

  • the employee's supervisor requests that the employee's access to the CLASS and IMPACT systems be suspended by contacting:
    • CLASS Program Support; and
    • IMPACT Application Security Administrator.