The acronym CUI refers to Controlled Unclassified Information. It is a feature in Kahua that can be used to identify records that will require sensitive handling by users in your domain and records that will be redacted for users who have not been granted permission to view the data. The feature is available on many apps in Kahua.
CUI must be enabled in your domain by the Kahua Support team. If you are interested in using CUI in your domain, reach out to Kahua Support or your account representative.
When CUI is enabled in your domain, users with the appropriate permissions can label records in one of the following ways:
- None - The content has no CUI label and there are no restrictions on its visibility in Kahua beyond the standard app permissions.
- Sensitive - The content has been labeled as Sensitive. There are no restrictions on its visibility in Kahua beyond the standard app permissions. Flagging the content as Sensitive is intended to alert users that care should be taken in how the data is handled and distributed.
- Restricted - The content has been labeled as Restricted. For each application, a pre-defined set of fields on each record will be redacted and replaced with asterisks when viewed by users who have not been granted access to restricted information.
Note that your organization may use different terms for the CUI labels in your domain. Contact your domain administrator for more information if the labels in your domain are different than the defaults described here. The functionality remains the same when labels are modified.
TABLE OF CONTENTS
Apply a CUI label to a record
Only users who are members of a group with CUI Admin Access Level permissions for the app in use are able to apply a CUI label to a record.
In an app where CUI is available, the CUI label is applied as follows:
- Select the record from the log view to open the detail page.
- If the CUI label does not appear, select Edit to open the record in Edit mode.
- In the upper right corner, click the CUI selector.
- Select the appropriate option. Note that when reducing the sensitivity level of a record, a warning message will appear.
- Click Save to save your changes.
View CUI status in a log view
In all apps that have CUI enabled, a Clearance column is available for log views. The CUI values of Sensitive or Restricted appear in this column. Log views can be modified to include this column. For more information on how to modify a log view to include additional columns, refer to Log Views and Log Reporting.
Note that your organization may use a different term for this column. Contact your domain administrator for more information if the default value of Clearance does not appear as an option in your log views.
Manage CUI permissions
CUI security is managed in the Groups application by your domain administrator. In each app that is capable of using CUI, two roles appear on the Permissions tab in the Groups app, alongside the usual roles of Moderator, Observer, Contributor, etc.
The two CUI-related roles are as follows:
- Admin Access Level - Users assigned this role can do the following:
- Modify the sensitivity setting for records in this app
- View redacted information for records in this app
- Standard Access Level - Users assigned this role can do the following:
- View redacted information for records in this app
Note that your organization may use different terms for these roles.
You can add CUI permissions to existing groups or create new groups to apply these permissions. If you need assistance setting up groups and permissions, reach out to Kahua Support or your account representative.
