Users and Security

In order to ensure system users only see data tied to the appropriate Provider ID and ePACES complies with HIPAA Privacy and Security role based access regulations the following rules have been put into place.

1. Submitters must work with Provider Relations to receive an Electronic Transmittal Identification Number (ETIN) which is the primary identification number established by the NYS MMIS.

2. A submitter may be a Provider or a Billing Service.

3. More than one ETIN may submit on behalf of a single Provider. This may be used when a Provider employs a Billing Service to process a portion of their claims.

4. A Billing Service may submit on behalf of multiple Providers under a single ETIN.

5. Provider Relations may associate an ETIN with one or more Provider IDs. Ultimately, a Provider ID may be associated with multiple ETIN.

6. Each Provider or Billing Service will receive a single User ID and Password for each ETIN to which they are assigned. This User ID will be the Primary Administrator and will be supplied by Provider Relations.

7. When the Provider or Billing Service log onto ePACES for the first time, they will be prompted to change the password for the User ID.

8. The Primary Administrator has the responsibility of setting up additional User ID's and assign the appropriate Application Security Profile to each User ID. The Primary Administrator also has the ability to inactivate or delete User IDs to properly maintain an accurate set of Users.

9. A unique User ID may not be logged into multiple ePACES sessions simultaneously.

10. If necessary, Provider Relations may reset a User's Password.