Roles and permissions

---

title: "Roles and permissions" description: "Five roles, ordered by authority. Here's what each can and can't do, and how to change someone's role." order: 4 category: "getting-started" updated_at: "2026-04-24"

Rounds uses five roles. Each has a fixed rank. Higher rank = more authority.

The five roles

Role	Rank	What they can do
Owner	5	Everything. One per practice. Can change other users' roles + manage all settings + issue API tokens + export data.
Admin	4	Everything except transferring ownership or demoting the owner. Manages users, integrations, webhooks, audit log.
Clinician	3	Read and write clinical + operational data (Patient Flow, Billables, Analytics). No admin surfaces.
Staff	2	Read and write Patient Flow + Billables. Limited Analytics. No admin surfaces.
Viewer	1	Read-only across the modules they've been granted. No writes.

The actual numeric rank shows up in the codebase as ROLE_RANK; for UI purposes think of it as the ladder above.

Module access

Each module in the sidebar has a minimum role defaulted at install:

• Admin modules (Users, Integrations, Audit, Webhooks, Settings) — admin or higher
• Patient Flow, Billables, Calendar, Email, Teams — staff or higher default; configurable per user
• Insights (Analytics) — clinician or higher default; configurable per user

Your admin can override the default on a per-user basis via /admin/users → the user's row → "Manage Modules."

Changing someone's role

Only owners and admins can change roles. An admin cannot demote the owner or assign another owner — there's exactly one owner per practice.

1. Admin goes to /admin/users
2. Clicks the user's row
3. Selects the new role from the dropdown
4. Change is immediate; the user's next request uses the new role
5. Action writes to the audit log

Owner transfer

Not self-serve in v1. Email support@ralthealth.com from the current owner's email — we'll coordinate the transfer + verify identity via out-of-band phone call.

If you hit a problem

• "Access denied" when you expected access: ask your admin to check your role + module toggles at /admin/users
• Role change didn't stick: refresh the page; changes propagate on the next request
• Other: support@ralthealth.com