> ## Documentation Index
> Fetch the complete documentation index at: https://help.visualcare.com.au/llms.txt
> Use this file to discover all available pages before exploring further.

# User access control

> Restrict the visibility of sensitive records to specific user groups

User Access Control (UAC) restricts the visibility of individual records to specific user groups. Where [User group security](/getting-started/user-group-security) controls what areas and functions a user group can access, UAC works record by record - marking a record as sensitive so only authorised groups see it.

## User Access Control on incidents

The **User Access Control** option on the incident form lets you restrict an incident to specific user groups - making the incident sensitive so only authorised users, for example the Administration group, view it.

### The option isn't visible

If a user does not see the **User Access Control** option when creating or editing an incident, their user group has the **User Groups** permission set to **Hide**. The UAC dropdown on incidents is directly tied to the **User Groups** option under the **Settings** section within User Group Security.

To enable it:

1. Log in to Visualcare with an admin account
2. Click the **Settings** icon (top right) → **User Group Security**
3. Select the relevant user group from the list, for example Care Coordinator
4. Scroll to the **Settings** section within the permissions panel
5. Set the **User Groups** permission:

| Setting  | Effect                                                  |
| -------- | ------------------------------------------------------- |
| **Show** | The group views and uses the User Access Control option |
| **Edit** | The group views, uses, and manages User Group settings  |
| **Hide** | The User Access Control option is removed entirely      |

6. Click **Save**

Users in the updated group need to log out and log back in for the change to take effect.

### Using it

Once the permission is enabled, the **User Access Control** field on incidents shows the available user groups. Mark an incident as sensitive by assigning it to a specific user group - visibility of that incident is then restricted to members of that group only.

<Note>UAC also affects task visibility: if a user cannot view the client profile associated with a task, UAC restrictions on the client are the likely cause. See [General troubleshooting](/troubleshooting/general#unable-to-see-other-users-tasks).</Note>

## Running into issues?

See [Login and access troubleshooting](/troubleshooting/login-and-access) for common errors and fixes.

## Related articles

<CardGroup cols={2}>
  <Card title="User group security" icon="shield-halved" href="/getting-started/user-group-security">
    Configuring permissions for user groups in Visualcare
  </Card>

  <Card title="Incident settings and configuration" icon="gear" href="/incidents/incident-settings-configuration">
    Restricting incident visibility and configuring incident behaviour
  </Card>
</CardGroup>