Available
Permissions
Permissions tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.permissions.manage
- Unavailable to
- clinic_admin, patient, support_operator, service_account, integration_client
Platform Admin
Platform Admin workspace
A cohesive Patient Portal control plane for tenant lifecycle, release communications, white-label, users, permissions, audit review, emergency access, and API cataloging. This demo uses synthetic data only.
Platform AdminCross-clinic standalone Patient Portal operationsNo raw PHI, credentials, tokens, live IdP/SCIM/KMS, DNS/TLS, sender, app-store provisioning, or shared runtime sessions.
Portal clinics4 demo orgs
Live credential exposure0
Cross-clinic PHINot displayed
Open onboarding reviews2
Enterprise controls14 mapped
Support reasons100% captured
Admin areas12 mapped
PHI readinessBlocked
Platform Admin
Every admin area has a dedicated page, access rule, and safe action model
Readiness states stay explicit so demo data is not confused with approved production PHI use.
Available
Audit Logs
Audit Logs tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.audit.read
- Unavailable to
- clinic_admin, patient, service_account, integration_client
Available
Clinics / Businesses
Clinics / Businesses tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.clinics.manage
- Unavailable to
- clinic_admin, patient, support_operator, service_account, integration_client
Available
Platform Users
Platform Users tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.users.manage
- Unavailable to
- clinic_admin, patient, service_account, integration_client
Available
Audit Review
Audit Review tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.audit.review
- Unavailable to
- clinic_admin, patient, service_account, integration_client
Available
Break-glass
Break-glass tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.break_glass.manage
- Unavailable to
- clinic_admin, patient, support_operator, service_account, integration_client
Available
White-label
White-label tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.white_label.review
- Unavailable to
- clinic_admin, patient, service_account, integration_client
Available
Release Comms
Release Comms tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.release_comms.review
- Unavailable to
- clinic_admin, patient, service_account, integration_client
Available
API Contracts
API Contracts tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.api_contracts.read
- Unavailable to
- clinic_admin, patient, support_operator
Available
Docs Readiness
Docs Readiness tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.docs_readiness.review
- Unavailable to
- clinic_admin, patient, service_account, integration_client
Available
Customer Readiness
Customer Readiness tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.customer_readiness.review
- Unavailable to
- clinic_admin, patient, service_account, integration_client
Available
Platform Admin account tabs
Platform Admin account tabs tools for synthetic demo tenants, role boundaries, and safe actions.
- Required access
- platform.account_tabs.review
- Unavailable to
- clinic_admin, patient
Checklist
Shared controls
- Platform Admin session + MFA
- Clinic Admin/Patient direct URL/API denial
- CSRF/origin/idempotency for mutations
- rate limits
- metadata-only audit
- no raw PHI/secrets/tokens
- demo-only production readiness labels
Checklist
Data safeguards
- Synthetic demo records only
- No raw PHI display
- No secrets or tokens displayed