EpicCare Inpatient Fundamentals (INP100) Practice Test

Role-based access control restricts who can see or modify patient data by assigning permissions to roles rather than to individuals. In healthcare IT, this means each user is given a role (for example, clinician, nurse, coder, administrator), and the system only allows actions on the EHR that the role permits. This approach supports the principle of least privilege, helps prevent unnecessary exposure of sensitive information, and enables auditing of data access. The other items—care team task lists, discharge summaries, and imaging orders—each serve workflow or documentation purposes and do not enforce who can access or control patient data.