Roles & permissions

Every login has a role, and the role decides which menus appear and which actions are allowed.

Two gates on everything

What you can see is the intersection of your role's permissions and the modules in your hospital's plan. If something's missing, check both — a whole module absent is usually the plan; one action missing inside a module you can otherwise see is usually the role.

The built-in roles

RoleWhat they do
Hospital administratorRuns the whole hospital — every module and setting. The first (and, until HRM, only) account.
DoctorTheir own workspace: appointments, consultations, prescriptions, earnings. Uniquely can start/complete OPD consultations and discharge inpatients.
ReceptionistFront desk: register patients, book appointments, check walk-ins into OPD, collect payments.
NurseClinical support around patients, triage, and the wards.
Lab technicianThe lab worklist — collect samples, enter results.
PharmacistPharmacy — stock, purchasing, and dispensing.
AccountantFinance — invoices, payments, expenses, payouts, reports.
Center operatorA telemedicine center's front desk — registers walk-ins and books online visits.
Super administratorZenhCare-side, not a hospital login — manages hospitals, doctors, centers, subscriptions, and processes online refunds.

Custom roles

Beyond the built-ins, an administrator can create custom roles under Administration → Access & Security — a named bundle of permissions layered on a base role. Assign one to grant exactly the access a staffer needs.

The platform ships one ready-made: the "Admin" custom role — a near-full-access deputy that can view clinical records and run day-to-day operations, but with a few sensitive things (like writing prescriptions) held back. It's a good template to copy.

Actions restricted on purpose

Some things aren't just permissions — they're designed to sit with one role:

  • Discharging an inpatient — doctors only.
  • Finalising a manually recorded payment — a verifier (administrator/accountant with the permission); others' payments wait in the verification queue.
  • Starting/completing a consultation — the attending doctor.

If you hit one of these, it's the system working as intended — not a bug.

Administration

The Administration area is where an administrator manages Access & Security (users, roles, custom roles), Compliance & Licensing (renewable records so nothing lapses), Organization, and System & Governance (policy and staff announcements) — plus the read-only Audit Log of who did what.