Access grants
Who can do what, on which practice, until when. A grant is held by one named administrator and can be withdrawn at any moment by the clinician who gave it.
Not connected to a database
This is where grants are issued, listed, and withdrawn. FeelOrganized has no Supabase project behind it yet, so there is nothing to read and nothing to save to. The schema and the access rules this screen runs on are written and tested, in sql/. Adding the environment variables switches this screen on with no code change.
The permission catalog
20 permissions across 6 systemsThis is the full vocabulary a grant can be built from. Grants store these keys, and the audit log records the one that was exercised. The integrations behind them are not connected yet, and the catalog is what they will be built against.
Practice management
Scheduling and front desk work, without handing over the login that also opens the chart.
- Read onlyView the schedule
See appointment times, locations, and availability.
practice.schedule.read - Write accessBook and move appointments
Create, reschedule, and cancel appointments.
practice.schedule.write - SensitiveView client contact details
Name and contact information only. Clinical records are never in scope.
practice.client.contact.read - Write accessManage intake
Send intake forms, chase completion, mark intake done.
practice.intake.manage
Billing
Enough to keep claims and balances moving, and nothing that moves money on its own.
- Read onlyView balances and claims
Read the current ledger, claim status, and aging.
billing.ledger.read - Write accessSubmit and resubmit claims
File claims and work rejections on the clinician's behalf.
billing.claim.submit - Read onlyView capitated spenddown
Track contracted spend against the cap in the current period.
billing.spenddown.read - Read onlyView payouts
Read deposits and remittances. No ability to initiate one.
billing.payout.read
Workspace
The most over shared credential in a small practice, reduced to the parts an admin actually needs.
- Write accessManage the calendar
Read and edit the clinician's working calendar.
workspace.calendar.manage - SensitiveSend on behalf of
Send from the practice address with the sending admin recorded on every message.
workspace.mail.send_as - Write accessAccess a named folder
One folder, granted by name. Not the whole drive.
workspace.drive.folder - Write accessManage the practice line
Answer, route, and return calls on the practice number.
workspace.voice.manage
Marketing
Drafting is delegated. Publishing stays behind the clinician's approval.
- Write accessDraft posts
Write and queue social content for review.
social.post.draft - Write accessPublish approved posts
Schedule and publish only what the clinician has already approved.
social.post.publish - SensitiveConnect social accounts
Attach and detach the practice's social profiles.
social.account.connect
People and payroll
The employment record, separated from the clinical record it usually sits next to.
- Write accessManage timesheets
Record, correct, and approve hours for the practice.
people.timesheet.manage - SensitiveView employment records
Roles, start dates, and status for staff at the practice.
people.record.read - SensitiveFile people actions
Record promotions, remediations, and terminations with their paperwork.
people.action.file
Feel Family
One integration among several. FeelOrganized manages the stack a practice already runs on.
- Write accessProvision Feel accounts
Create FeelCharts, FeelGuide, FeelSuper, and FeelConnected accounts on the clinician's behalf.
feel.account.provision - Write accessMaintain the directory listing
Keep the clinician's public profile and openings current.
feel.directory.manage