Skip to content

Security & access

Roles and permissions

What clinicians, assistants and administrators can do, and what the separate management permission adds.

Updated · 1 min read

On this page (4 sections)

Each person has one role in a practice, plus an optional permission to manage it. Roles are checked on every request, so a change takes effect straight away.

The three roles

ClinicianAssistantAdministrator
Read patient chartsYesYesNo
Write context, intake and draft textYesYesNo
Prepare AI drafts and code suggestionsYesNoNo
Sign notes and approve documentsYesNoNo
Approve coding worksheetsYesNoNo
Use evidence researchYesNoNo
See organisation settings and usage totalsWith managementWith managementYes

Administrators are for practice managers and billing staff who should not see clinical records.

The management permission

Anyone can also be given Manage organization and member access. A manager can:

  • edit the practice profile, logo and login address,
  • invite, change and remove members,
  • maintain sites and care teams,
  • publish practice templates and shared shortcuts,
  • set practice-wide writing style,
  • manage billing and spending limits,
  • read the audit history.

Management does not grant chart access. An administrator who manages the practice still cannot open a chart. Some actions need both, for example a clinician who manages the practice is required to restrict a patient's access, review duplicate records or apply audio retention.

Safeguards

  • A manager cannot change their own clinical role.
  • The last active manager cannot be removed or demoted.
  • Removing a member immediately detaches the membership from all of their sessions.

Audit history

Managers can open Settings → Practice → Audit history to filter recorded actions, such as sign-ins, invitations, signatures, amendments and access changes, and to export a verified JSON snapshot. Managers only see clinical events for patients they can currently read.

Something not match what you see? Tell us

Next: Sites, care teams and patient access