> ## Documentation Index
> Fetch the complete documentation index at: https://docs.voxhealth.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and permissions

> Who can see and do what.

Access splits into two bands:

* **Operate**: running the practice day to day: calls, messages, campaigns, documents, patients, scheduling, verifications, waitlist.
* **Configure**: setting the practice up: org settings, locations, phone and routing, integrations, AI agents, notification templates, billing, audit log.

Everything below super admin is scoped to your own organization.

## The roles

| Role          | Who                                                               | What they get                                                                                                                        |
| ------------- | ----------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
| `admin`       | Practice owner, office manager                                    | All of Operate **and** Configure, within their organization. The only staff role that can manage staff and settings.                 |
| `front_desk`  | Receptionist, scheduler, coordinator, insurance and billing staff | All of Operate. No settings, no billing, no audit log. Can create and edit **patients**, not staff.                                  |
| `provider`    | Clinician                                                         | Carries clinical identity (NPI, appointment assignment) and is selectable by staff. Has no operational data access in the app today. |
| `patient`     | The patient                                                       | Only their own records, through the patient-facing surface. Not a staff role.                                                        |
| `super_admin` | VoxHealth internal                                                | Access across all organizations. Not assigned to customers.                                                                          |

## The matrix

✅ read and write · 👁️ read-only · ◐ own records only · — no access

| Area                                             | admin | front\_desk | provider | patient |
| ------------------------------------------------ | :---: | :---------: | :------: | :-----: |
| **Operate**                                      |       |             |          |         |
| Dashboard, Reports, Huddle                       |   ✅   |      ✅      |     —    |    —    |
| Calls, Follow-ups                                |   ✅   |      ✅      |     —    |    —    |
| Messages                                         |   ✅   |      ✅      |     —    |    —    |
| Campaigns                                        |   ✅   |      ✅      |     —    |    —    |
| Fax, documents                                   |   ✅   |      ✅      |     —    |    —    |
| Patients                                         |   ✅   |      ✅      |     —    |    ◐    |
| Insurance                                        |   ✅   |      ✅      |     —    |    —    |
| Scheduling, appointments                         |   ✅   |      ✅      |     —    |    ◐    |
| Locations, operatories, appointment types, hours |   ✅   |     👁️     |     —    |    —    |
| Verifications                                    |   ✅   |      ✅      |     —    |    ◐    |
| Waitlist                                         |   ✅   |      ✅      |     —    |    —    |
| **Team**                                         |       |             |          |         |
| Staff list                                       |   ✅   |     👁️     |     —    |    —    |
| Create, invite, edit staff                       |   ✅   |      —      |     —    |    —    |
| **Configure**                                    |       |             |          |         |
| Practice details and settings                    |   ✅   |      —      |     —    |    ◐    |
| Locations, operatories, hours (write)            |   ✅   |      —      |     —    |    —    |
| Phone numbers, call routing                      |   ✅   |      —      |     —    |    —    |
| Integrations and API keys                        |   ✅   |      —      |     —    |    —    |
| AI agents, assistants, knowledge base            |   ✅   |      —      |     —    |    —    |
| Notification templates                           |   ✅   |      —      |     —    |    —    |
| Billing                                          |   ✅   |      —      |     —    |    —    |
| Audit log                                        |  👁️  |      —      |     —    |    ◐    |

Every user can read their own audit entries; organization-wide audit is admin read-only.

## How it is enforced

Permissions are enforced in the database, on every row, not by hiding menu items. A user who reaches a page they should not have, by typing the URL for example, gets an empty page, because the data layer refuses to return rows they are not entitled to.

Hiding navigation is a convenience. The database is the boundary.

<Note>
  Providers currently have no operational access in the web app. This is deliberate today rather than an oversight. A provider who needs to work the schedule should be given `front_desk`.
</Note>

## Related

* [Staff](/team/staff): adding people and assigning roles
* [Security overview](/security/overview)