> ## Documentation Index
> Fetch the complete documentation index at: https://help.clinikehr.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles

> Every staff role in each edition, the access tiers that go with them, and how role-based navigation decides which pages a role can open.

export const Path = ({steps = []}) => <span className="ck-path">
    {steps.map((s, i) => <span key={i} className="ck-path__step">
        {i > 0 ? <span className="ck-path__sep" aria-hidden="true">
            ›
          </span> : null}
        {s}
      </span>)}
  </span>;

export const Availability = ({editions = ['all'], plans, roles, note}) => {
  const list = editions.includes('all') ? ['clinic', 'pharmacy', 'lims'] : editions;
  return <div className="ck-avail" role="note" aria-label="Feature availability">
      <span className="ck-avail__label">Available in</span>

      {list.map(e => <span key={e} className={`ck-pill ck-pill--${e}`}>
          {EDITION_LABELS[e] || e}
        </span>)}

      {plans ? <span className="ck-avail__label">Plan</span> : null}
      {plans ? <span className="ck-pill ck-pill--plan">{plans}</span> : null}

      {roles ? <span className="ck-avail__label">Who</span> : null}
      {roles ? <span className="ck-pill ck-pill--role">{roles}</span> : null}

      {note ? <span className="ck-avail__note">{note}</span> : null}
    </div>;
};

<Availability editions={['all']} plans="All plans; Role Navigation is enterprise only" roles="Owner, Manager" />

A role answers one question: **which pages does this person get?** What they may *do* on those pages is a separate setting — see [Permissions](/platform/team/permissions).

Roles come in two halves, and someone can hold both. A **clinical role** says what they are professionally — the **Specialty** you pick when you invite them. An **administrative role** says what they run. Alongside it sits an **access tier**, which says how far their view reaches.

<Path steps={['Settings', 'Staff & Teams']} />

## Owners and managers

**Owners bypass the permission system entirely** inside their own workspace: they can perform every act their edition and plan allow. Managers sit just below and can administer staff, roles and permissions.

Both are deliberately absent from the role-based navigation controls further down this page. There is no configuration that hides a page from an owner, and that is intentional — somebody has to be able to see everything.

Neither bypasses the edition gate, the plan gate, or a workspace's two-factor requirement on patient data.

## The roles, by edition

<Tabs>
  <Tab title="Clinic & Hospital">
    **Administrative roles**

    | Role                 | Runs                                                                                                      |
    | -------------------- | --------------------------------------------------------------------------------------------------------- |
    | **Clinic Manager**   | Create and delete client profiles, view documents, edit templates, add team members, send announcements   |
    | **Clinic Biller**    | Edit billing info, create billing documents, file insurance claims, view payment reports, refund payments |
    | **Clinic Scheduler** | Schedule and edit appointments, create client profiles, manage appointment requests, share documents      |

    **Access tiers**

    | Tier                 | Reaches                                                                              |
    | -------------------- | ------------------------------------------------------------------------------------ |
    | **Basic**            | Can schedule and add documentation for their clients                                 |
    | **Billing**          | Can bill, schedule, and add documentation for their clients                          |
    | **Full client list** | The above, plus profiles and appointments for all clients                            |
    | **Entire practice**  | Bill, schedule and document for all clients, plus most reports and practice settings |

    Biller and scheduler seats cost nothing and count toward no cap — as long as that person is not also clinical. See [Staff seats](/platform/plans/seats).
  </Tab>

  <Tab title="Pharmacy">
    **Administrative roles**

    | Role                        | Runs                                                                                                             |
    | --------------------------- | ---------------------------------------------------------------------------------------------------------------- |
    | **Pharmacy Manager**        | The branch: customer records, pricing and reports, staff accounts, announcements                                 |
    | **Cashier / Till Operator** | The till: rings up sales, takes payment, issues receipts, registers walk-in customers                            |
    | **Inventory & Purchasing**  | Stock: receives deliveries, adjusts counts, manages suppliers and purchase orders, watches cost and expiry       |
    | **Dispensing Supervisor**   | Dispensing oversight: checks a technician's work, authorises refunds and voided sales, reviews the day's takings |

    **Access tiers**

    | Tier             | Reaches                                                                            |
    | ---------------- | ---------------------------------------------------------------------------------- |
    | **Own till**     | Only the sales they rang up on their own till                                      |
    | **Whole branch** | Every sale, customer and stock movement at this branch, and refunds at the counter |
    | **All branches** | Every branch — sales, stock, pricing and takings across the whole business         |

    Every account takes a seat, and no role is free. The cap is a wall, not a charge.
  </Tab>

  <Tab title="Diagnostics">
    **Administrative roles**

    | Role                   | Runs                                                                                                        |
    | ---------------------- | ----------------------------------------------------------------------------------------------------------- |
    | **Lab Manager**        | The lab: patient records, report release, test pricing and reports, staff accounts, announcements           |
    | **Accessioning Clerk** | Front of house: registers patients, books collection slots, accessions incoming samples, raises the invoice |
    | **Referrer Liaison**   | Referring clinics: releases reports to them, handles their accounts and statements                          |
    | **QC Officer**         | Quality oversight: reviews QC runs, verified results and turnaround times. Read-only on patient records     |

    **Access tiers**

    | Tier          | Reaches                                                                                    |
    | ------------- | ------------------------------------------------------------------------------------------ |
    | **Own bench** | Only the samples and results on the bench they work                                        |
    | **Whole lab** | Every sample, result and patient at this site, across all benches                          |
    | **All sites** | Every collection site and bench, plus test pricing, referrer accounts and lab-wide reports |

    Every account takes a seat, and no role is free. The cap is a wall, not a charge.
  </Tab>
</Tabs>

## Where a role lands after sign-in

ClinikEHR puts people where their work is rather than on a generic dashboard. A cashier opens on the till; a phlebotomist opens on intake. You do not configure this on most plans — it follows from the role.

## Role Navigation

<Availability editions={['clinic']} plans="Enterprise" roles="Owner, Manager" />

Hospitals can go further and state, per role, which parts of the building appear in the sidebar at all.

<Path steps={['Settings', 'Role Navigation']} />

<Steps>
  <Step title="Turn the master switch on">
    The **Role-based navigation** card — "Show each staff member only the parts of the hospital their role works in." — carries the switch **Scope navigation by role**. With it on, "a governed role sees only its own menus, is returned to its own area if it opens a direct link elsewhere, and lands there after signing in."

    Leave it off while you set the rules up. The editor below says so: "Role-scoped navigation is switched off, so these rules are not being applied yet."
  </Step>

  <Step title="Tick the modules each role may open">
    The **Role navigation** card lists each role with the sidebar sections underneath. Tick what that role works in.
  </Step>

  <Step title="Save">
    **Save** stores that role's list; **Reset to default** puts it back. A role you have customised is badged **Custom**; one you have not is badged **default**.
  </Step>
</Steps>

Two things about this screen are worth knowing before you use it.

**The first ticked module becomes the landing page.** The helper text under each role says which — "Lands on Front Desk after sign-in." — and if you tick nothing it tells you "Choose at least one section — the first becomes where this role lands." Order matters, so put the section they should open on first.

**The toggles work at the level the rule works at.** Switching off Insurance necessarily covers the insurance dashboard, pre-authorization and claims together, because they are one part of the building rather than three. You cannot grant one and withhold another from here — use [Permissions](/platform/team/permissions) for that finer cut.

<Info>
  **This is navigation, not security.** The card is explicit: "This changes navigation only — it is not a security control. What each person may read and write is still decided by their permissions." Owners, managers and clinicians are never restricted by it, and **Settings** and the audit log stay reachable for every role whatever you choose. Changes reach signed-in staff within five minutes.
</Info>

## Changing someone's role

From the row menu on **Staff Members**, **Change Specialty** updates the specialty for an existing member. Their administrative role and permissions are managed from the same menu under **Permissions**.

## Related

<Columns cols={2}>
  <Card title="Permissions" icon="https://mintcdn.com/clinikehr/nLyvBRumcl1Yk8z3/images/icons/sliders.svg?fit=max&auto=format&n=nLyvBRumcl1Yk8z3&q=85&s=beb6145918f561fc91f4eaa0aa591390" href="/platform/team/permissions" width="24" height="24" data-path="images/icons/sliders.svg">
    What an individual may do on the pages their role already opens.
  </Card>

  <Card title="Invite someone to your team" icon="https://mintcdn.com/clinikehr/nLyvBRumcl1Yk8z3/images/icons/user-plus.svg?fit=max&auto=format&n=nLyvBRumcl1Yk8z3&q=85&s=a3fbf78fb687cbc78acbe559e500b46f" href="/platform/team/invite-staff" width="24" height="24" data-path="images/icons/user-plus.svg">
    Pick the role in the first place.
  </Card>

  <Card title="Care areas" icon="https://mintcdn.com/clinikehr/gjlpJWWKqjyYNRzM/images/icons/hospital.svg?fit=max&auto=format&n=gjlpJWWKqjyYNRzM&q=85&s=9527bd2e20c0e54ab75827e6bfab3001" href="/platform/team/care-areas" width="24" height="24" data-path="images/icons/hospital.svg">
    Which departments exist at all, before any role sees them.
  </Card>

  <Card title="Who can see and do what" icon="https://mintcdn.com/clinikehr/nLyvBRumcl1Yk8z3/images/icons/user-lock.svg?fit=max&auto=format&n=nLyvBRumcl1Yk8z3&q=85&s=78326e0e1fa17dee027afd0c54b09dc9" href="/start/roles-and-access" width="24" height="24" data-path="images/icons/user-lock.svg">
    Which of the four gates is hiding your page.
  </Card>
</Columns>
