Staff

Bring in your team.Keep the keys.

Invite your receptionist, your nurse, your billing clerk — and tick exactly what each of them can do. Every permission is enforced on the server, not merely hidden in a menu, with tasks, a private line to you and an audit log of every change.

Default deny · Checked on the server · Every refusal logged

curasim.app/staff/admin
AN
Anita Nair
Front desk · started from preset
2 tasks
Permissions
  • Patients
  • Register a new patient
  • Appointments
  • Book appointments
  • Check in and finish
  • Read the clinical record sensitive
  • Mental-health notes sensitive
  • Observation photographs sensitive
  • Billing
  • Create and issue an invoice
Saves as+3 granted−1 removedapplies to their next request
Access, done properly

A team that helps, without the master key

Your front desk can book, register and bill without ever opening a case. You decide where each line is drawn — and the server holds it.

Nothing until you tick it

Access is off by default. A new staff member starts with their own inbox and their own account — and nothing else, until you grant it.

Permission by permission

Forty-seven tick boxes, arranged as a tree — a child needs its parent. Start from Front desk, Billing only or Full clinical, then adjust.

Enforced on the server

Not hidden menus. Every request is checked on the server; a refusal is a real 403 in plain English, and it is logged. A revoke applies to their very next request — no sign-out needed.

Tasks to an inbox

Assign work with a priority, a due date and, if you like, a patient. If they cannot open that patient, the server withholds the name and the link.

A private line to the doctor

Each staff member has one private text thread with you, with read receipts — sent, delivered, seen — and a few quick reactions.

An audit log of everything

Every grant and revoke, invite, deactivation, password reset, task change, lockout and refused request — who did it, and when.

Sensitive things stay separate

Seeing the list is not reading the case

The person who books the appointment does not thereby need the case notes, the mental-health record or the photographs. Each is its own decision, and none comes bundled with another.

  • Sensitive permissions ask you to confirm before they are granted
  • Exporting patient data and deleting an invoice are their own permissions
  • Lock-screen notifications never show a patient’s name
Sensitive
Clinical record
Case-taking, notes, visits and family history — its own permission.
Sensitive
Mental-health notes
Separate from the clinical record; either can be granted without the other.
Sensitive
Observation photographs
Separate from the file shelf — files without faces, or the reverse.
Sensitive
Issue, sign and stamp
Preparing a document is one permission; issuing it under your name is another.
From invitation to inbox

Five steps, and you hold every one

Staff cannot open Staff Admin or grant themselves anything. A clinic always keeps at least one admin — you.

  1. 01
    Invite by email
    The invitation is valid for seven days; resend or cancel it at any time.
  2. 02
    They set their own password
    From a one-time link. You never see it and never choose it.
  3. 03
    Tick what they may do
    Start from a preset or from nothing. Save shows exactly what changes.
  4. 04
    Assign the work
    Tasks land in their inbox; they start, reply and mark them done.
  5. 05
    See it in the audit log
    Every change of access and every refused request, on the record.
Reminders that respect the evening

Staff can be reminded of upcoming appointments — their own or the whole clinic’s — with a snooze when the moment is not right.

Bell and web push for appointmentsPersonal lead timesQuiet hoursA morning summary
47
Permissions to tick
3
Editable presets
4
Task priorities
15 min
Lock after 5 wrong passwords
Good to know

Questions, answered

What can a new staff member see?

Nothing, until you tick it. Access is off by default and granted one permission at a time — patients, appointments, billing, prescriptions, documents, the clinical record and more — with presets such as Front desk and Billing only as a starting point.

Is it just hidden menus?

No. Every request is checked on the server. A staff member who types the address of a page they have not been given gets a refusal, and the refusal is logged. Revoking a permission takes effect on their very next click — no sign-out needed.

How do staff sign in?

You invite them by email; they set their own password from a one-time link. You never see or choose it. Five wrong passwords lock the account for fifteen minutes.

How do I give my receptionist work?

Assign a task — with a priority, a due date and, optionally, a patient — and it lands in their inbox. They can start it, reply and mark it done. Each staff member also has a private message thread with you.

Can I see who did what?

Yes. The audit log records every grant and revoke, invite, deactivation, password reset, task change and refused request — who, what and when.

More questions? See the full FAQ

Share the work, not the case

Start free — no card required. Invite your first staff member and decide, line by line, what they may open.