Role Based Access

Scalable Organizational Security (RBAC)

Role-Based Access Control (RBAC) is the safest way to manage a growing team. Instead of managing permissions for each individual, you manage the "Role," and the individuals inherit those rights.

Standard Alphatic Roles

We have pre-configured five core roles based on industry best practices:

1. Owner/Super-Admin: Unrestricted access. The only role that can delete the clinic.
2. Lead Clinician: Full clinical access, review junior notes, limited financial view.
3. Associate Doctor: Clinical charting and prescribing for their own patients only. No financial access.
4. Front Desk Manager: Full calendar management, billing, and patient demographics. No clinical note access.
5. Nursing/Support: Appointment check-in, vital sign entry, and consent form preparation.

Custom Role Engine

Need something specific? Create a new role (e.g., "Intern" or "Billing Auditor").

• Pick an existing role to "Clone" as a starting point.
• Toggle the hundreds of granular permissions using our easy "Permission Matrix".

Auditing the Roles

The Security Audit Log shows every time a role's permissions were changed and by whom. This is critical for meeting international data governance standards.

Batch Updates

If you hire 10 new dentists, you simply assign them the "Associate Doctor" role. If you later decide all associate doctors should be able to view X-rays but not download them, you change the role ONCE, and all 10 accounts are updated instantly.