Users & permissions
Admin only. Managing users requires admin access, and clinic-wide user management is available on multi-seat plans.
Admins control who’s in the clinic and what each person can do. Access in Miraa is layered — see User roles & access for how roles, access levels, permissions, and plan gating combine.
Inviting a user
Send an invitation
Invite the person by their work email from the user management area.
Assign a role
Give them the role that matches their job — clinician, admin, or staff.
Set access level and permissions
On multi-seat plans, set their clinic access level and any specific permissions. Grant the minimum they need.
Confirm they’ve joined
Check they accepted the invitation and appear with the correct role.
Adjusting access
You can change a person’s role, access level, or permissions as their responsibilities change. Review access periodically so it stays appropriate.
Least privilege. Don’t make everyone an admin. Give each person only the access their role requires — it limits risk if an account is misused.
Removing a user
When someone leaves the clinic or no longer needs access, remove it promptly.
Remove or disable access
Revoke the person’s access so they can no longer sign in to the clinic.
Reassign their work
Reassign any open tasks, recalls, or follow-ups they owned so nothing is dropped. See Overdue items.
Confirm removal
Verify the account no longer has access.
Offboarding promptly is a security control. A lingering active account is a risk. User management actions are recorded in the audit trail. See Audit trail.
Common mistakes
- Over-granting admin access.
- Forgetting to reassign a departing user’s open follow-ups.
- Leaving inactive accounts enabled.
Troubleshooting
- Invitation not received? Ask the user to check spam, then resend.
- User can’t access something they should? Re-check their role, access level, and permissions, and confirm the feature is included in your plan.
- User can access something they shouldn’t? Tighten their permissions and review the audit trail.