ReferenceRoles and permissions

Reference

Roles and permissions

What standard users, practice admins and the Signposting Toolkit team can each see and do.

  • Practice admins
  • Clinical reviewers

Each person has a role at each practice they belong to: Standard User or Practice admin. The Signposting Toolkit team are system administrators across every practice. Practice admins set roles in ☰ MenuPractice settingsUsers & access

Anyone who approves cards in Clinical Review needs the Practice admin role at that practice.

What each role can do

“If switched on” means the Signposting Toolkit team has switched the feature on for your practice (see Optional features). For improved wording and suggested questions, a practice admin can also switch it off for an individual. The Signposting Toolkit team can try smart visuals on any practice before they are switched on.

Signposting

ActionStandard UserPractice adminSignposting Toolkit team
Search and read your practice’s switched-on cards, including ones awaiting reviewYesYesYes
Use high-risk and quick access buttonsYesYesYes
See What’s changedYesYesYes
Get suggested questions (Get Questions to Ask)If switched onIf switched onIf switched on
Ask for improved wording (Suggest improved wording (AI))If switched on (they can read the suggestion but not apply it)If switched onIf switched on
Apply improved wording to a cardNoIf switched onIf switched on
View an approved smart visualYesYesYes
Generate, save or remove a symptom smart visualNoIf switched onYes
Add cards, customise shared cards, hide cards, switch cards on or offNoYesYes
Approve cards, request changes, bulk approve, request re-reviewNoYesYes
Run AI customisationNoIf switched onIf switched on
Set up highlight rules, the built-in highlights and image icons switches, high-risk buttons and quick access buttonsNoYesYes
Change the shared library, shared image icons or the default high-risk setNoNoYes

Appointments and workflows

ActionStandard UserPractice adminSignposting Toolkit team
Search the appointments directoryYesYesYes
Add, edit or import appointments; manage staff teamsNoYesYes
Use published workflowsIf switched onYesYes
See draft and hidden workflows; create, duplicate, edit, Publish and delete your practice’s workflows; customise shared workflowsNoYesYes
See workflow EngagementNoYesYes
Change or delete the shared workflows every practice starts fromNoNoYes

Practice admins can use Workflow Guidance before it’s switched on for your practice, to prepare your workflows. Staff can’t use it until it’s switched on. See Workflows.

Practice Handbook

The handbook has its own editing permissions, set per page and per category. In the table, a handbook editor is a standard user named under Who can edit in a page’s editor, or any standard user where the page is set to All standard users can edit. A category editor is a standard user named under Who can edit on a category, who looks after it and its subcategories.

ActionStandard UserHandbook editorCategory editorPractice adminSignposting Toolkit team
Read handbook pagesIn categories visible to themIn categories visible to themIn categories visible to them, and always in their own categoriesAllAll
Edit a page or list (including list rows such as the rota)NoThe pages they’re an editor ofEvery page in their categoriesAllAll
Add a page or listNoNoIn their categoriesAnywhereAnywhere
Move a page to another categoryNoNoBetween their categoriesYesYes
Show a page in other categories tooNoNoBetween their categoriesYesYes
Take a page shown from another category out of a categoryNoNoOut of their categoriesYesYes
Set when a page was last reviewed, and its review reminderNoThe pages they’re an editor ofEvery page in their categoriesAllAll
Report a problem with a pageYesOn pages they can’t editOn pages they can’t editNo: they can edit every pageNo
Delete a page or list (with Undo straight after)NoNoNoYesYes
Generate or remove a handbook smart visualNoOn pages they can edit, if switched onOn pages they can edit, if switched onIf switched onYes
Open Manage handbook: Needs attention, categories, who can see and edit them, templates for new pages, menu, quick access buttons, pinned panel, on-take rota, engagement and auditNoNoNoYesYes

All of this needs the Practice Handbook to be switched on for your practice. There’s no handbook switch for each person: Users & access shows what each person can read and edit. Being named as an editor of a page or category doesn’t count while someone views the toolkit as a standard user. See Letting a team look after a category.

Feedback, settings and your account

ActionStandard UserPractice adminSignposting Toolkit team
Suggest an improvement, Suggest a feature and My suggestionsYesYesYes
Deal with suggestions about your practice’s cards (Suggestions tab)NoYesYes
Respond to feature requests and bug reportsNoNoYes
Set display preferences and change your own passwordYesYesYes
Add, edit and remove staff in Users & accessNoYes, with the limits belowYes
See the toolkit as a standard user sees it, with View as Standard User (how)NoYes, at their practiceYes, as either role at any practice
See which features your practice has in Module accessNoYesYes
Switch improved wording or suggested questions off or on for a personNoYesYes
Switch an optional feature on or off for the practiceNoNoYes
Use Setup & onboarding and Surgery HealthNoYesYes
See Analytics and the Engagement tabNoYesYes

Staff at several practices

One account can belong to several practices, with a different role at each: for example, Practice admin at one practice and Standard User at another. Everything a person can do depends on their role at the practice they’re viewing, and each practice sees only its own cards and settings.

A few things follow the person rather than the practice:

  • Their password and name. Changing either changes it everywhere.
  • Their individual AI settings. Switching improved wording or suggested questions off for someone at one practice switches it off at every practice they belong to.
  • Which practice’s features the AI tools check. The AI tools check whether the feature is switched on at the person’s default practice, not the one they’re viewing. If the AI buttons show but return an access error, check the feature at their default practice.

Staff who work at more than one practice should check the practice name at the top of the screen before they start.

Default practice

Each account has a default practice. It’s where the person lands after signing in, and the practice the AI tools check (see above).

Practice admins can set their practice as someone’s default from the member’s panel in Users & access, with Set as default surgery, as long as the account doesn’t also belong to a practice they don’t administer. Otherwise, the Signposting Toolkit team can change it.

Managing accounts across practices

An account is shared across every practice it belongs to. A practice admin looks after their practice’s membership, not the account itself. So a practice admin can:

  • add an existing account to their practice by entering its email address (its existing password is kept)
  • set its role at their practice, and remove it from their practice

But a practice admin can’t:

  • add or manage a system administrator’s account
  • reset the password, change the name or set the default practice of an account that also belongs to a practice they don’t administer. The person changes their own password, or the Signposting Toolkit team does it.

These limits stop an admin at one practice from taking over an account that has access somewhere else. Each of these actions, and each sign-in, is recorded in an account audit trail. See Data and security.

Removing someone from your practice takes effect on their next page or action. It keeps their account, and doesn’t affect their access to other practices.

Related: Team and access · Optional features