---
title: "Roles and Permissions"
description: "Complete guide to NICE HMS role-based access control — 12+ roles, permission matrix per module, and how to configure user access levels."
date: 2026-07-19
lastModified: 2026-07-19
category: "admin"
author: "Dr. Umesh Bilagi"
beta: true
---

## Overview

NICE HMS uses role-based access control (RBAC) to manage what each user can see and do. Each user is assigned one role. Permissions are configured per role, per module, per action (view, create, edit, delete, print).

## Available Roles

<dl>
<dt><strong>Admin</strong></dt>
<dd>Hospital administrator, owner — full access</dd>

<dt><strong>Director</strong></dt>
<dd>Senior management — most modules, reports</dd>

<dt><strong>Doctor</strong></dt>
<dd>Consultant — patients, prescriptions, OPD/IPD</dd>

<dt><strong>Nurse</strong></dt>
<dd>Ward nurse — IPD charting, vitals, bed view</dd>

<dt><strong>Receptionist</strong></dt>
<dd>Front desk — registration, OPD, search</dd>

<dt><strong>Receptionist + Accountant</strong></dt>
<dd>Front desk + billing</dd>

<dt><strong>Accountant</strong></dt>
<dd>Finance — billing, accounts, reports</dd>

<dt><strong>Pharmacist</strong></dt>
<dd>Pharmacy inventory and dispensing</dd>

<dt><strong>Lab Technician</strong></dt>
<dd>Test orders, sample collection, results</dd>

<dt><strong>HR</strong></dt>
<dd>Human resources module</dd>

<dt><strong>Insurance Lead</strong></dt>
<dd>Insurance coordination</dd>

<dt><strong>Insurance Executive</strong></dt>
<dd>Insurance operations (limited)</dd>

<dt><strong>Marketing Lead</strong></dt>
<dd>CRM, campaigns</dd>

<dt><strong>Marketing Executive</strong></dt>
<dd>CRM (limited)</dd>

<dt><strong>Visitor</strong></dt>
<dd>Read-only observer</dd>
</dl>

## Changing a User's Role

1. Go to **Admin > Users**.
2. Find the user, click **Edit**.
3. Change the **Role** dropdown.
4. Save. Changes take effect immediately.

## Deactivating Users

Setting a user to Inactive:
- Removes login access
- Frees their seat for billing purposes
- Keeps their name in historical records
- Does not delete any data

## FAQ

**Q: Can I create custom roles?**
A: Roles are pre-defined. Granular permissions within roles can be configured. Contact support for custom requirements.

**Q: What can the Visitor role see?**
A: Read-only access to permitted modules. Cannot create, edit, or delete. Useful for auditors.