Roles and permissions

Every account has one role. The role decides which pages appear in the sidebar and which buttons you see. The server checks it again on every action, so hiding a button is never the only protection.

Everyone only ever sees their own clinic's data. A user at one clinic can never open another clinic's patients, even by typing a link.

The three clinic roles

• Clinic Admin — the owner or manager. Can do almost everything, including settings, staff and money.
• Doctor — clinical work: visits, notes, charts, plans, prescriptions, procedures and consent.
• Receptionist — front desk: enquiries, patients, appointments, check-in, invoices and payments.

The Clinic Admin chooses each person's role when adding them (Users → Add User) and can change it later.

What each role can do

✓ = can do it · — = can't

Front desk

Visits and clinical records

Billing

Administration

Plan features vs. permissions

Some features also depend on your plan. If the clinic's plan doesn't include a feature, the page shows "This feature isn't included in your current plan", even for a Clinic Admin. Examples are AI drafting in Quick Visit and the AI history summary. Quick Visit itself (filling it in by hand) is available to everyone. See Subscription and renewal.

Changing someone's role

1. Go to Users and open the person.
2. Click Edit, change Role, and save.

The change applies the next time they load a page. A clinic must always keep at least one active Clinic Admin, so the last one can't be deactivated or demoted.