Skip to main content
Access splits into two bands:
  • Operate: running the practice day to day: calls, messages, campaigns, documents, patients, scheduling, verifications, waitlist.
  • Configure: setting the practice up: org settings, locations, phone and routing, integrations, AI agents, notification templates, billing, audit log.
Everything below super admin is scoped to your own organization.

​
The roles

​
The matrix

✅ read and write · 👁️ read-only · ◐ own records only · — no access Every user can read their own audit entries; organization-wide audit is admin read-only.

​
How it is enforced

Permissions are enforced in the database, on every row, not by hiding menu items. A user who reaches a page they should not have, by typing the URL for example, gets an empty page, because the data layer refuses to return rows they are not entitled to. Hiding navigation is a convenience. The database is the boundary.
Providers currently have no operational access in the web app. This is deliberate today rather than an oversight. A provider who needs to work the schedule should be given front_desk.