Permissions matrix
Every role against every permission: manager screens, patients, each diagnostics step, equipment, deleting records, and company types.
This table is taken directly from CareList's role definitions. ✓ means the role can do it; a blank means it can't. For what each column unlocks on screen, see the notes below the tables.
Access by role
| Role | Manager screens | Patients: view | Patients: manage | Dx: view | Dx: register | Dx: collect | Dx: process | Dx: verify lab | Dx: verify imaging | Dx: deliver | Equipment: manage |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Administrator | ✓ (admin) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Medical director / superintendent | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Quality manager (NABH / NABL) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Nursing superintendent | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | |||||
| Head of department | ✓ | ✓ | ✓ | ||||||||
| Lab manager / chief pathologist | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | |||
| Doctor / consultant | ✓ | ✓ | ✓ | ✓ | |||||||
| Pathologist | ✓ | ✓ | ✓ | ||||||||
| Radiologist | ✓ | ✓ | ✓ | ||||||||
| Staff nurse | ✓ | ✓ | ✓ | ✓ | |||||||
| Lab technician | ✓ | ✓ | ✓ | ✓ | ✓ | ||||||
| Phlebotomist / sample collector | ✓ | ✓ | ✓ | ||||||||
| Radiographer / imaging technologist | ✓ | ✓ | ✓ | ✓ | |||||||
| Pharmacist | ✓ | ||||||||||
| Front office / reception | ✓ | ✓ | ✓ | ✓ | ✓ | ||||||
| Biomedical engineer | ✓ | ||||||||||
| Housekeeping / facility staff | |||||||||||
| Manager (older role) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Staff / auditor (older role) |
Patient capabilities only take effect in hospitals. Diagnostic centres have no Patients module.
Deleting records
Deleting is limited to manager-access roles, and some deletions also need a capability:
| Record | Who can delete |
|---|---|
| Checklists, tasks (assignments), corrective actions, equipment, work orders, teams, locations, employees | Any manager-access role |
| Patient record (Delete patient record) | Manager access and Patients: manage: Administrator, Medical director, Quality manager, Nursing superintendent (and Manager) |
| Diagnostic order (Delete order) | Manager access and Dx: view: Administrator, Medical director, Quality manager, Nursing superintendent, Head of department, Lab manager (and Manager) |
Prefer Cancel order, Override… or Deactivate where possible, because they keep the trail.
Company types
| Role | Hospital | Diagnostic centre |
|---|---|---|
| Administrator | ✓ (created by the platform owner) | ✓ (created by the platform owner) |
| Medical director / superintendent | ✓ | |
| Quality manager (NABH / NABL) | ✓ | ✓ |
| Nursing superintendent | ✓ | |
| Head of department | ✓ | ✓ |
| Lab manager / chief pathologist | ✓ | ✓ |
| Doctor / consultant | ✓ | |
| Pathologist | ✓ | ✓ |
| Radiologist | ✓ | ✓ |
| Staff nurse | ✓ | |
| Lab technician | ✓ | ✓ |
| Phlebotomist / sample collector | ✓ | ✓ |
| Radiographer / imaging technologist | ✓ | ✓ |
| Pharmacist | ✓ | |
| Front office / reception | ✓ | ✓ |
| Biomedical engineer | ✓ | ✓ |
| Housekeeping / facility staff | ✓ | ✓ |
| Staff / auditor | ✓ | ✓ |
What each column means
Manager screens. The Manage section of the More sheet: Checklists, QR codes, Template library, Approvals, Deviations, Override Histories, DPR Reports, Analytics, Automation, Campus & Locations, Teams, Employees, Export data, Audit log and Settings. It also includes + Assign and Override… on Tasks, and seeing everyone's tasks, histories, corrective actions and work orders. Without it you see only your own (or ones you created). Only the Administrator role is protected from role changes and can't be created by other managers.
Patients. View opens Patients, patient pages and bedside QR codes. Manage adds + Admit, Edit, care plans (Start standard care plan, Add checklist to care plan), Discharge and Re-admit.
Diagnostics (Dx).
| Step on a test order | Capability needed |
|---|---|
| See Diagnostics and orders, scan sample labels | view |
| Register, Edit, Cancel order | register |
| Mark as sample collected (imaging: scan done) | collect |
| Mark as received in lab, processing, reported; Reject sample (recollect); Save critical value call | process |
| Add a protocol checklist to an order | register or process |
| Mark as verified, lab order | verify lab |
| Mark as verified, imaging order | verify imaging |
| Mark as delivered | deliver |
Verifying is also blocked while a critical result has no logged call. See Critical value.
Equipment: manage. + Add / edit equipment, Print QR labels, Maintenance schedules and Consumables & spares. Everyone else can still view Equipment, scan tags, start an equipment inspection, record meter readings and report faults with Work orders.
Things every role can do
- Complete tasks assigned to them, and start checklists from QR codes and equipment pages.
- Create Corrective Actions and Work orders, and update ones assigned to them.
- My History, My Team Dashboard, Notifications, Search, My account.
Related
Find your role · Staff and roles · Roles and permissions (help center)