Skip to main content

Overview

The platform uses a role-based access control system with four distinct roles and 12 permission areas. Each role comes with sensible defaults, and Admins can customize individual staff permissions when needed.

Roles

The platform defines four roles, each designed for a specific function within the clinic:

Admin

Full clinic management including billing, staff, settings, and all clinical and operational features. Typically the clinic owner or practice manager.

Doctor

Clinical records, patient care, appointments, and most financial operations. Focused on the clinical workflow.

Receptionist

Scheduling, patient check-in, billing, and front-desk operations. Designed for non-clinical staff who manage day-to-day logistics.

Patient

Portal access to view their own records, appointments, invoices, and messages. Patients cannot access other patients’ data or clinic operations.

Permission areas

The platform defines 12 discrete permission areas that control what each user can see and do:
#Permission areaDescription
1View appointmentsSee appointment schedules and details
2Edit appointmentsCreate, modify, and cancel appointments
3View patientsAccess patient profiles and demographics
4Edit patientsCreate and modify patient records
5View billingSee invoices, payment history, and financial reports
6Process paymentsRecord payments, issue receipts, manage balances
7View reportsAccess clinic analytics and operational reports
8View clinical recordsSee treatment plans, dental charts, and clinical notes
9Edit clinical recordsCreate and modify clinical documentation
10Manage inventoryTrack supplies, stock levels, and procurement
11Send messagesCommunicate with patients and staff via messaging
12Manage lab casesCreate, track, and manage dental lab orders
Permission matrix by role

Default permissions by role

The following table shows which permissions are granted by default for each clinic-level role:
Permission areaAdminDoctorReceptionist
View appointmentsYesYesYes
Edit appointmentsYesYesYes
View patientsYesYesYes
Edit patientsYesYesYes
View billingYesYesYes
Process paymentsYesYesYes
View reportsYesYesYes
View clinical recordsYesYesNo
Edit clinical recordsYesYesNo
Manage inventoryYesNoYes
Send messagesYesYesYes
Manage lab casesYesYesNo
Summary by role:
  • Admin — All 12 permissions
  • Doctor — 11 permissions (excludes Manage inventory)
  • Receptionist — 9 permissions (excludes View clinical records, Edit clinical records, and Manage lab cases)
The Patient role has a separate, limited set of portal permissions. Patients can only view their own appointments, invoices, treatment history, and messages. They cannot access other patients’ data or any clinic management features.

Customizing permissions

Admin only — Admins can override default permissions for individual staff members.

Per-user overrides

Default role permissions serve as a starting point. Admins can grant or revoke specific permissions for any staff member, creating a custom permission set that differs from their role’s defaults.
1
Open the staff member’s profile
2
Navigate to Settings > Staff and click on the staff member you want to customize.
3
Edit permissions
4
In the Permissions section, toggle individual permissions on or off. Changes override the role defaults for this specific user only.
5
Save changes
6
Click Save. The updated permissions take effect on the staff member’s next page load or login.
Use per-user overrides sparingly. If you find yourself customizing permissions for most staff in a role, consider whether the role assignment itself should change.

Common customization examples

By default, Doctors cannot manage inventory. If a Doctor is also responsible for ordering supplies, grant them the Manage inventory permission from their profile.
If a Receptionist should only view billing but not record payments, revoke the Process payments permission from their profile.
If front-desk staff need to reference clinical notes (for example, to assist with insurance paperwork), grant View clinical records without Edit clinical records.

Role assignment

Roles are assigned when a user is invited or their account is created. To change a staff member’s role after the fact:
  1. Navigate to Settings > Staff
  2. Click on the staff member
  3. Update their Role from the dropdown
  4. Save changes
Changing a staff member’s role resets their permissions to the new role’s defaults. Any per-user overrides from the previous role are removed. Re-apply customizations if needed.

Frequently asked questions

The platform does not support custom role creation. However, the per-user permission override system lets you tailor access for any individual staff member beyond their role defaults.
Only Admins can view and modify staff permissions. Doctors and Receptionists cannot change their own or others’ permissions.
No. Each user has exactly one role per clinic. Use per-user permission overrides to expand or restrict access as needed.
Yes. Permission changes apply on the staff member’s next page load. They do not need to log out and back in.