Skip to Content
Miraa produces draft content. A clinician must review and approve everything before it enters a patient record.
Admin & settingsUsers & permissions

Users & permissions

🛡️

Admin only. Managing users requires admin access, and clinic-wide user management is available on multi-seat plans.

Admins control who’s in the clinic and what each person can do. Access in Miraa is layered — see User roles & access for how roles, access levels, permissions, and plan gating combine.

Inviting a user

Send an invitation

Invite the person by their work email from the user management area.

Assign a role

Give them the role that matches their job — clinician, admin, or staff.

Set access level and permissions

On multi-seat plans, set their clinic access level and any specific permissions. Grant the minimum they need.

Confirm they’ve joined

Check they accepted the invitation and appear with the correct role.

Adjusting access

You can change a person’s role, access level, or permissions as their responsibilities change. Review access periodically so it stays appropriate.

🔒

Least privilege. Don’t make everyone an admin. Give each person only the access their role requires — it limits risk if an account is misused.

Removing a user

When someone leaves the clinic or no longer needs access, remove it promptly.

Remove or disable access

Revoke the person’s access so they can no longer sign in to the clinic.

Reassign their work

Reassign any open tasks, recalls, or follow-ups they owned so nothing is dropped. See Overdue items.

Confirm removal

Verify the account no longer has access.

🔒

Offboarding promptly is a security control. A lingering active account is a risk. User management actions are recorded in the audit trail. See Audit trail.

Common mistakes

  • Over-granting admin access.
  • Forgetting to reassign a departing user’s open follow-ups.
  • Leaving inactive accounts enabled.

Troubleshooting

  • Invitation not received? Ask the user to check spam, then resend.
  • User can’t access something they should? Re-check their role, access level, and permissions, and confirm the feature is included in your plan.
  • User can access something they shouldn’t? Tighten their permissions and review the audit trail.