Permission Matrix
Configure module-level and action-level permissions for each staff role
Overview
The Permission Matrix in SehaFile provides granular control over what each staff role can see and do within the system. Permissions are organized by module (patients, visits, appointments, financial, reports) and action (view, create, edit, delete). This ensures that a receptionist can book appointments but cannot view financial reports, while an accountant can manage payments but cannot access medical records.
Understanding the Permission Structure
Each permission follows the format module.action. Available modules and their actions:
- patients — view, create, edit, delete, merge, export
- visits — view, create, edit, delete
- appointments — view, create, edit, cancel
- financial — view, create, edit, refund, reports
- prescriptions — view, create, edit
- reports — view, export
- settings — view, edit
- inventory — view, manage
Configuring Permissions
- Go to Settings > Permissions — Click Settings in the sidebar, then select the Permissions tab.
- Select a role — Choose the role you want to configure from the role tabs at the top (admin, doctor, receptionist, accountant, nurse).
- Toggle permissions — The matrix displays modules as rows and actions as columns. Toggle each checkbox to grant or revoke access. Changes are saved automatically.
- Override for specific staff (optional) — Below the role matrix, you can set individual overrides for specific staff members who need extra or restricted permissions beyond their role defaults.
patients.view from a role means that staff member cannot see any patient data, including during appointment booking. Ensure at minimum that receptionists retain patients.view and appointments.view permissions.Permission matrix grid showing modules as rows and actions as columns with toggle switches
Default Role Permissions
Receptionist (Default)
patients.view, patients.create, appointments.view, appointments.create, appointments.edit, appointments.cancel
Accountant (Default)
financial.view, financial.create, financial.edit, financial.reports, patients.view, reports.view, reports.export
Nurse (Default)
patients.view, visits.view, visits.create, prescriptions.view, appointments.view, inventory.view
Frequently Asked Questions
Can I create custom roles beyond the defaults?
Yes. In the Permissions tab, click "Add Custom Role" and define a new role name. Then configure its permissions using the matrix.
Do permission changes take effect immediately?
Yes. When you toggle a permission, it applies immediately on the next page load for affected staff members. No logout/login required.
What happens if I accidentally remove all permissions from a role?
Staff with that role will see an empty dashboard with no navigation items. They can still access Settings to update their own profile. Use the "Reset to Defaults" button to restore standard permissions.
Was this article helpful?