Role guides
Every staff member signs in with one account. What they can see is controlled by their role plus their branch and department assignments. Give the smallest role that lets the person do the work.
Role table
| Guide | Role code | Typical person | Main access |
|---|---|---|---|
| Owner | SUPER_ADMIN | Clinic owner / medical director | Setup, staff, branches, subscription, finance approvals, export and restricted records |
| Admin | BRANCH_MANAGER; legacy ADMIN only for branding/subscription | Branch manager | Operations, services, reviews, refunds, cash closing approval and UPI reconciliation |
| Receptionist | RECEPTIONIST | Front desk / cashier | Patients, appointments, queue, bills, vault upload and consent capture |
| Practitioner | PRACTITIONER or DOCTOR; THERAPIST is an alias | Doctor, dentist, therapist, optometrist | Encounters, vitals, Rx, clinical documents, vaccination, teleconsult and care plans |
| Nurse | No separate nurse role today | Nurse / clinical assistant | Choose Practitioner for vitals or vaccines; Receptionist for non-clinical assistance |
| Accountant | ACCOUNTANT | CA / finance staff | Finance dashboard, reports and UPI reconciliation |
| Patient | Patient portal | Patient / guardian | Own appointments, bills, prescriptions, vaccinations, care plan and privacy requests |
Which role should I give?
| Need | Give | Why |
|---|---|---|
| Own the workspace, plan, data export and all branches | SUPER_ADMIN | Has settings.manage, users.manage, branches.manage, subscription.manage, data.export, finance approvals and restricted-patient control. |
| Run one branch day to day | BRANCH_MANAGER | Has patient, appointment, queue, billing/refund, services, reviews, document intake and finance.reconcile. |
| Register patients and take payments | RECEPTIONIST | Has patient.create, appointment.manage, queue.manage, billing.create, vault upload and consent.capture. |
| Examine patients or sign notes | PRACTITIONER / DOCTOR | Has encounter.write, vitals.write, rx.write, clinical.document.sign, immunization.write and teleconsult.conduct. |
| Only reconcile accounts | ACCOUNTANT | Has finance.read, reports.financial and finance.reconcile; no clinical write access. |
| Only needs a basic login | STAFF | Today it only has settings.read; upgrade before assigning work. |
| Is a patient or parent | Patient portal | Use /patient/magic-login; do not create staff users for patients. |
Terminology
"Practitioner" is the neutral clinical role. Specialty packs may show Dentist, Doctor, Therapist, sitting, session or visit. Legacy THERAPIST users are treated as Practitioner.