User Management

Overview

The Admin Portal allows project administrators to invite new admin users, manage their access levels, and remove them when needed. Each user's access is controlled by a combination of their role (admin or not) and their Access Policy (what data they can read or write).

---

Viewing All Users

1. In the left sidebar, go to Admin → Project
2. On the Project page, select the Users tab (or navigate directly to /admin/users)
3. A table shows all users in the project with their profile resource, admin status, and last updated date
4. Click any user's row to view their membership details

---

Inviting a New Admin User

1. In the left sidebar, go to Admin → Project, open the Users tab, and click the Invite link — or navigate directly to /admin/invite
2. Fill in the form:

Field	Description
Role	Choose Practitioner for staff/admin users (use Patient only for patient accounts)
First Name	User's first name
Last Name	User's last name
Email	The email address the invitation will be sent to
Access Policy	Optional — limit what this user can read/write (leave blank for full project access)
Send email	Checked by default — sends the invitation email with a password setup link
Admin	Check this to give the user project admin privileges
Project scoped	Check this to scope the user's account to this project only (recommended for staff)
MFA required	Check this to require MFA when this user signs in

3. Click Invite
4. The user will receive an email with a link to set their password and access the portal

If email sending fails (e.g., SES is not configured in your environment), the user is still created. You will see a message saying the email could not be sent. You can then manually share the set-password link or use Force Set Password to set their initial password.

---

Editing a User's Membership

To change a user's access policy, admin status, or user configuration:

1. Go to Admin → Project and open the Users tab (or navigate directly to /admin/users)
2. Click the user you want to edit
3. Click Edit Membership or navigate directly to /admin/members/:membershipId
4. Modify any of the following:

Field	Description
Access Policy	The set of read/write permissions for this user. See Access Policies.
User Configuration	Optional UI configuration resource for this user
Admin	Toggle whether this user is a project administrator

5. Click Save

---

Removing a User

1. Open the user's Edit Membership page (/admin/members/:membershipId)
2. Click Remove user (red button, bottom right)
3. Confirm the action in the dialog

This removes the user's access to this project but does not delete their account from the system. Their credentials remain valid for other projects they belong to.

---

Access Policies — Why They Matter

An Access Policy controls exactly which FHIR resources a user can see and edit. Without one, an admin user has full read/write access to all data in the project.

Always assign a restrictive Access Policy to:

• Support staff who only need to view support tickets
• Read-only auditors or analysts
• Any account that should not be able to modify clinical data

See the Access Policies guide for how to create policies and common examples.

---

Registering a Member Directly (Without Invitation Email)

If you want to create an account without sending an email:

1. Navigate to /admin/members/new
2. Fill in the user details and role
3. Click Register

The account is created immediately. You can then set a password for them using Force Set Password in /admin/super.

---

Troubleshooting

Problem	What to do
User did not receive invite email	Check SES is configured; use Force Set Password to give them access manually
User cannot sign in	Use Force Set Password at /admin/super to reset their password
User has too much or too little access	Edit their membership and assign or update their Access Policy
Need to give someone temporary access	Invite them, then remove them after they are done