Requesting the login
Whoever administers your record system needs six facts to build the account: the student's legal name, their program, the rotation start and end dates, the supervising clinician, the access level, and confirmation that HIPAA training is complete. Send all six in one message. A request that arrives in pieces sits in a queue, and access granted in week three of a nine-week block wastes the part of the rotation where a student learns the most about your documentation.
Ask for the account to expire on the last day of the block. Automatic expiry is safer than a note in your calendar, and it saves the awkward audit finding where a student from last spring still has an active login. If your system offers a training environment, ask for that too. A student who has clicked through the templates once arrives on day one able to find the problem list.
Why shadow logins are the wrong shortcut
The tempting alternative is to sit the student at your open session and let them work under your credentials. Do not. Every action taken in that session is attributed to you in the audit log, including anything entered while you were in another room. If a note or an order is later questioned, there is no record separating your work from a learner's, and the person holding the credential answers for all of it.
Credential sharing is also prohibited by most organisations' own access policies and by the terms your practice signed with its vendor, so the exposure is not only clinical. Where a system genuinely offers no student role, the alternative is supervised viewing: the student reads the chart with you present, on your session, and documents nothing. That is slower than a real login and it is still the correct answer.
What a student may write and what you must sign
A student's note is a draft until a licensed clinician takes responsibility for it. In most configurations the student types into an unsigned encounter and you review it line by line, correct it, add your own findings, and sign. Your signature is not a countersignature on someone else's work; it is your attestation that you saw the patient, that the record reflects what you found, and that the plan is yours.
What may be reused for billing is a separate question with organisation-specific answers, and it is one to put to your compliance or coding lead rather than to settle from an article. The practical rule that keeps you safe is to document your own history, examination and decision-making in your own words, and to treat the student's text as material you have verified rather than as a shortcut.
The audit trail is watching both of you
Every chart a student opens is logged with a timestamp and a user. That is a feature, not a threat, but it means a curious student who looks up a neighbour or a former colleague creates a permanent record of doing so. Say this out loud on day one, in one sentence: open the charts on today's schedule and nothing else. Students almost never breach deliberately; they browse because nobody told them not to.
Set the panel boundary explicitly. If your clinic shares a database with an urgent care or a specialty group, the student's account may reach far beyond the patients you are teaching with. Ask the administrator to scope access to your department if the system supports it, and check the log once in the first fortnight so any misunderstanding is corrected while it is still small.
Systems differ, so ask rather than assume
Record systems handle learners differently. Some ship a student role template with view rights and unsigned documentation already configured. Some have only a generic read-only role, which means no note practice at all. Some require a training module or a course completion before an account is issued, and some restrict outside network access, which matters if any of the block is delivered from your home office by video.
Because these behaviours change between versions and between local builds, treat any general claim about a named product with suspicion, including a claim made by a colleague at another clinic. Ask your own administrator two questions: what learner roles exist in our build, and what does the request process require. The answers to those, in writing, are the only reliable version of this section.
When no access is possible
Sometimes the answer is no. A hospital-owned system with a hard policy, a rotation too short to justify the account, a video-only block on a network that does not permit outside logins. The rotation still works. The student documents on a structured worksheet you provide, presents from it, and records the encounter in the program's own clinical log, which is where the hours are counted anyway.
You lose the documentation teaching, so replace it deliberately: read one of your own signed notes aloud with the student at the end of a session and explain why each line is there. For video blocks, the question of what the student can see and from where is worth settling before day one, and the setup sequence sits on the teleprecepting setup page.
Apply to open your teaching hours and you will be told which access request to send, and when, well before a student arrives.
Apply to preceptQuestions
Do NP students need their own EMR login?
They need one to practise documentation, and their own named account is the only safe way to provide it. A named read-only login with unsigned documentation rights keeps the audit trail honest and lets the student draft notes you review and sign. A rotation can proceed without access, with the student using a worksheet and the program's clinical log instead.
Can a student use my EMR login if the system has no student role?
No. Every action in that session is recorded as yours, which removes any record separating your work from a learner's, and credential sharing generally breaches both organisational policy and vendor terms. The alternative is supervised viewing: the student reads the chart while you are present and documents nothing in the system.
Who signs the note when a student writes it?
You do, and your signature attests to your own work rather than approving someone else's. Review the draft line by line, correct what is wrong, add your history, examination and decision-making in your own words, then sign. What portions of student documentation may support billing varies by organisation, so ask your compliance or coding lead.
How long does it take to get a student EMR account?
Plan on two weeks from a complete request. Administrators need the student's legal name, program, rotation dates, supervising clinician, access level and confirmation of HIPAA training. Incomplete requests wait in a queue. Ask for the account to expire automatically on the last day of the block so nobody has to remember to close it.
What HIPAA training does the student need before access?
Programs train students on privacy and confidentiality before placement and can send an attestation confirming completion, which is usually what an administrator wants on file. Many practices also require their own onboarding module, badge or safety training. Ask early which local modules apply, because a missing module is a common reason an account request stalls.
Sources: AANP Precepting With Purpose
Halvard N.
Runs the 90-minute orientation and the teleprecepting setup. Has connected preceptors on eleven different EMRs to a student login that shows what it should and nothing else.
