Roles
PlatformUse functional roles to represent a member’s job or participation context inside a tenant.
Identity
One user identity
Membership
Tenant affiliation
Role
Functional access
Context
Tenant + membership
Overview
Roles describe a member’s functional profile. Permissions and scopes are evaluated separately in Permissions & Scopes.
Role model
| Role | Purpose | Context |
|---|---|---|
| patient | Personal healthcare participation | Personal |
| doctor | Clinical care and prescribing workflows | Professional tenant |
| pharmacist | Dispensing and pharmacy workflows | Professional tenant |
| pharmacy_owner | Pharmacy administration | Professional tenant |
| cabinet_owner | Practice / clinic administration | Professional tenant |
| organization_admin | Organization membership and configuration administration | Organization tenant |
Role categories
Clinical
Care delivery
Pharmacy
Dispensing & operations
Organization
Administration
Patient
Personal services
Effective access
A role is not an authorization shortcut. Effective access comes from the active membership, role mappings, permissions/scopes and resource policy.
Role assignment
Role assignmentCopy
PUT /v1/memberships/mbr_456/roles
{ "roles": ["doctor"] }