EPCS: Activate EPCS/Logical Access Control (Web)

This article provides instructions on how to complete Logical Access Control (LAC).  Users who completed Experian identity proofing must complete this final step with their Admin to activate EPCS.


  • This article does not apply to iPrescribe self-registered users
  • The Logical Access Control (LAC) is to be completed once a provider has completed the identity proofing process through the EPCS Gold Invite.
  • You must have Administrator privileges to access LAC via Utilities in the Rcopia menu. 
  • Only providers who have reach an EPCS "Enrolled" status will appear in the LAC screen.  If a provider does not show on the LAC screen, their EPCS account is not in "Enrolled" status with the practice organization or practice location.
  • The Last Change field in the LAC column will update based on any activity on the EPCS account (e.g., email change, grant change, DEA change, name change).

Completing Logical Access Control (LAC)

Step 1: The designated practice administrator must log in to their Rcopia account by navigating to Rcopia's Login Page.

Step 2: In the menu under Utilities, click Logical Access Control.


(click to enlarge)

Note: Only an Administrator will have the capability of performing LAC. The Administrator must be logged into their own DrFirst Account and must be a staff user, not a provider. Users with an NPI on their own profile may function as Administrators but do not have access to LAC.

Step 3: Enter provider information in one or more of the appropriate fields, then click Search.

  • First Name
  • Last Name
  • NPI


(click to enlarge)

Step 4: Click the Active radio button for the appropriate/desired prescriber.

  • Admins will grant access by selecting Active.
  • To disable EPCS prescription permissions, Admins can click Inactive.

Step 5: Under Granting Administrator, the Admin will enter their own first and last name as it appears on their user account.


(click to enlarge)

Step 6: Under Authorizing Prescriber, the Admin will populate the Enter NPI field with the provider's NPI number, then click Validate.

Step 7: The Provider will complete the remaining fields, then click Authorize.

  • Choose a Device from list: This field should auto-populate all active registered tokens.
      • Please ensure the token being used is selected.
  • Enter the signing passphrase: The provider should have already set the signing passphrase (controlled substance password) during EPCS enrollment.
  • Enter the One Time Pin (OTP) from the selected token: This six-digit code generates every 30 seconds.


(click to enlarge)

Step 8: You will be redirected to a page that will prompt you to click Refresh. Doing so will reload the LAC page with the desired grant change(s) applied. 
Note:  If you receive the error "Your Logical Access Control session has ended. No changes were made" please repeat this process and be sure the Active button is selected in Step 4.


(click to enlarge)

Congratulations, the EPCS grant has now been activated, and you can now start prescribing controlled substances electronically!

Was this article helpful?
3 out of 6 found this helpful
  • We looked in our LAC table in our software and we don't see the provider listed as an option to select so we are unable to authorize them.

  • Good afternoon Meghan, to escalate this issue please Submit a request to DrFirst Support. The article, How to Submit a Request provides more details on this process.