Platform Administrator
System role · Platform scope
Full control-plane administration. Membership requires phishing-resistant MFA and recurrent review.
DoctorStar Control Plane
Roller & permissions
RBAC + scope + policy conditions. Högriskrättigheter kräver explicit approval, fresh step-up och audit.
Privileged
Billing Administrator
Platform scope
Billing, credits, payment reconciliation and tax. No clinical or identity management.
Tenant Support Analyst
Tenant-scoped JIT
Ticket-, tenant- och tidsbegränsad supportåtkomst med reason code.
Permission matrix
Systemlåsta permissions kan inte ändras direkt. Export- och approve-rättigheter granskas separat.