Global Identity & Role Access Mapping

An explicit hierarchical matrix separating SaaS operational layers from clinical and administrative workspaces with zero-trust permissions.

Tier

Practice Executive Tier

Strategic oversight and global configuration for practice organizations and branches.

Org Owner

Full data ownership, billing strategies, key rotations, and global user management.

Admin

Structural platform access to deploy services, manage users, and modify billing templates.

Tier

Clinical Care Delivery Tier

Direct interaction with patient charts, diagnostic pipelines, and clinical operations.

Medical Provider

Direct interaction with clinical charts, prescription creation, diagnostic logs, and queues.

Medical Assistant

Pre-consultation operations, patient vitals, organizing chart queues, and digital file records.

Tier

Front-of-House & Operations Tier

Managing physical clinic flows, scheduling, and standard coordination tasks.

Front Desk

Core lifecycle scheduling, checking in arrivals, and primary patient registration.

Administrative Staff

Multi-department scheduling control, service fulfillment oversight, and coordination.

Tier

Financial & Growth Tier

Controlling revenue cycles, patient acquisition, and business intelligence metrics.

Finance Staff

Complete invoice lifecycle control, payment ledger settlement, and analytics.

Lead Manager

Strategic control over acquisition dashboards, macro lead assignments, and marketing performance.

Customer Relationship Exec

Individual pipeline execution, outbound calls, and granular prospect task logging.

Tier

Pharmaceutical Subsystem Tier

Command over inventory matrices, manufacturing batches, and drug catalogs.

Pharmacy Manager

Command over inventory matrices, batch configuration, and financial reconciliation.

Pharmacy Staff

Live dispensing requests, verifying batch numbers, and recording payments.

Unassailable Auditing

Every role assignment, permission check, and interaction is cryptographically logged to the system audit trail.