User Access & Permissions

Action Required: Identify Net New CWS-CARES Production User Permissions

CARES SPOCs, Technical Contacts, Implementation Coordinators, OCM Coordinators, County Leadership, Tribe Leadership, Probation Leadership, and State Leadership:

In preparation for CWS-CARES Production Go-Live on December 7, 2026, we request that all counties and organizations identify the net new permissions required for their users by October 30, 2026, at 1:00 PM.

We are also offering an optional opportunity for organizations to preview these net new permissions in the Production Simulation (CARES100) environment along with the data refresh scheduled for October 11, 2026. Organizations opting to participate in this early review must submit their completed spreadsheets by Friday, October 9, 2026, at 1:00 PM.

Key Deadlines & Submission Process

  • Optional Early Review Deadline: Friday, October 9, 2026, at 1:00 PM
    • Submitting by this date allows net new permissions to be converted and reviewed along with refreshed data in the Production Simulation (CARES100) environment.
    • Note: No extensions can be granted for the optional deadline.
  • Final Submission Deadline: Friday, October 30, 2026, at 1:00 PM
  • Submission Guidelines:
    • Email submissions will not be accepted.
    • Counties will use a single spreadsheet (CountyName_CARESPermission.xlsx) for both deadlines.
    • Spreadsheets will be retrieved from the “CARES User Onboarding Preparation Microsoft Teams channel at 1:00 PM on October 9, 2026, for the Prod Sim (CARES100) build.
Template and Permission Rules
  • Please use your county’s assigned template (CountyName_CARESPermission.xlsx), located in your county’s folder within the CARES User Onboarding Preparation Microsoft Teams channel. Membership in this channel is required for access.
    • Child Welfare and Probation teams must use the same county or organization file.
  • This request will only add NEW CARES-specific permissions and override authorities to existing CWS/CMS profiles. Refer to the New Permissions tab in the template for available options.
  • Core user attributes (offices, units, caseloads, assignment desks, unit inboxes, CWS/CMS permissions, and records) will migrate automatically during data conversion. Any manual edits made to these specific fields in the template will be discarded since the source of truth is CWS/CMS.

Action Requested:

Please update and save your county’s CountyName_CARESPermission.xlsx spreadsheet in the designated Microsoft Teams channel according to the schedule below:

  • Optional Production Simulation (CARES 100) Deadline: Friday, October 9, 2026 by 1PM.
  • Final Submission Deadline: Friday, October 30, 2026, by 1:00 PM

Formatting Instructions

  1. Include one user per row with First Name, Last Name, and Email Address.
  2. Enter only new CWS-CARES Worker permissions and override access
  3. Separate multiple permissions using a semicolon (;) and no spaces before or after the semicolon.
  4. Avoid duplicate access levels. Higher-level roles override lower ones - do not list both (e.g., Supervisor permission supersedes Worker; Read/Write override supersedes Read).

Formatting Examples

  • Worker Permission: CalSAWS Readonly User;form author;RFA worker
  • Override Access: AAP County-wide read;Adoption County-wide read/write

Kickoff and Office Hours Schedule

Two Permission Kickoff meetings and office hour sessions will be conducted via Microsoft Teams. To protect sensitive and production-level data, these sessions will NOT be recorded. Direct calendar invitations will not be distributed; counties and organizations should review the schedule and determine which sessions their staff should attend.

Net New Permission Kickoff Meetings:

Office Hours:

Office hours for the following week will be posted on the “CARES User Onboarding Preparation” Microsoft Teams channel: CARES User Onboarding Preparation | CWDS Org Share

Office Hours for September 28, 2026 – October 2, 2026

To protect sensitive and production-level data, these sessions will NOT be recorded.

Thank you for your continued collaboration as we transition to CWS-CARES.

Please contact Customer Relations for questions.

____________________________________________________________________________________

Security Protocols for Prod Sim Case Data

The Prod Sim environment contains converted CWS/CMS cases reflecting actual system data as of April 17, 2026. Because this includes real, sensitive Personally Identifiable Information (PII), all case information must be strictly protected or redacted.

To protect CWS-CARES case data, please follow these important security guidelines when working with our support teams:

  • Redact Ticket Info: Do not send Protected Health Information (PHI), PII, or confidential case details to the Service Desk via email or ticket. Sensitive and confidential data cannot be stored in the ticketing system.
  • Secure Screen Shares: During support-requested screen shares, limit attendees to essential personnel only. Recording of sensitive information is strictly prohibited.
  • Consult for Tier 3 Transfers: If Tier 3 support needs sensitive data, use secure transmission methods. Contact your county Privacy Officer or the CWDS ISO if you need assistance with secure routing.

We appreciate your dedication to protecting the safety and privacy of vulnerable children and families while we work together to support your needs.

CWS-CARES Security Standard - User Accounts in Prod Sim (CARES 100)

County Security Administrators, System Administrators, Authorized Provisioning Leads, CARES SPOCs, Implementation Coordinators, OCM Coordinators, County Leadership, Tribe Leadership, and State Leadership:

It has come to our attention that generic, test login credentials (e.g., generic training logins, shared Prod Sim, or Training credentials) are being created or requested within the CWS-CARES Prod Sim (CARES 100) environment.

This communication serves as an official notice that the creation, use, or facilitation of unauthorized or generic accounts in any environment with production data is strictly prohibited.

Unlike legacy systems (such as CWS/CMS), CWS-CARES relies strictly on individual identity authentication for user auditing, system logging, and access control. Per the California SAM (State Administrative Manual) and SIMM (Statewide Information Management Manual) policies (SAM 5300-5, SAM 5360, NIST 80-53 Rev5 (IA-2)), every account in Prod Sim (CARES 100) or any technical environment with production data must map directly to an authorized, authentic individual.

County or office administrators must not attempt to bypass local directory integration, change automated email attributes, or establish dummy accounts to shortcut provisioning processes.

Any unauthorized, shared, or generic accounts identified in Prod Sim (CARES 100) or any technical environment with production data will be revoked immediately to protect system security and data integrity.

Required Actions for County Administrators

  1. Immediately discontinue creating or requesting generic or placeholder user profiles within CARES 100 / Prod Sim.
  1. Verify that all active user profiles assigned within your county or administrative scope correspond to valid, single-user identities.
  1. If your county encounters onboarding delays or permission mapping issues, do not implement unauthorized workarounds. Instead, submit a ticket through the standard Tier 2 Help Desk so the project team can assist you directly.

We appreciate your prompt attention to maintaining the security standards of the CWS-CARES environment. Please reach out to the project help desk if you have any questions regarding proper provisioning workflows.

If you have questions, please contact the CWDS Information Security mailbox.

Action Requested:

Please share this communication with all staff who should be aware of these details.  

CWDS Customer Relations