Custom roles

Platform

Create organization-specific roles by composing approved permissions and scopes.

Identity

One user identity

Membership

Tenant affiliation

Role

Functional access

Context

Tenant + membership

Overview

Custom roles let approved organizations group permissions around organization-specific job functions.

Field	Description
name	Tenant-unique role name
display_name	Human-readable label
permissions	Approved permission identifiers
description	Role purpose and intended users

Custom roles may compose only permissions approved for the customer and tenant. They cannot grant Mediloop-internal capabilities.

Custom roleCopy

{
  "name": "radiology_coordinator",
  "permissions": [
    "appointments.read",
    "imaging.read",
    "imaging.coordinate"
  ]
}

Role changes should be reviewed, audited and aligned with least-privilege policies.