Admin
Manage personas, role boundaries, field classification policy, and reset the local pilot state.
Personas
10
Field policy entries
63
CHRI prohibited
3
Roles & permissions
From the SRS Roles_Permissions sheet
10 personas
| Persona | Role summary | Allowed modules | Allowed actions | CHRI boundary |
|---|---|---|---|---|
| Project Director | Executive leadership | Home, Executive Tower, CMS Reporting, Approvals summary, Peek Chat | View approved boards, view recommendations, approve executive reports if assigned | No raw CHRI. Sanitized aggregate/drill only. |
| Operations Lead | Operations management | Operations, Provider/Owner Risk, Input Tables, Approvals, Peek Chat | Assign actions, edit SLA plan input tables, approve vendor recommendations | No raw CHRI. |
| QA Lead | Quality and control | QA Tower, Source Manager, Join Resolver, Audit Viewer, Peek Interact | Review quality metrics, validate joins, run templates | No raw CHRI; can see guardrail metadata. |
| Analyst | Ad hoc analysis | Analyst Workspace, Peek Interact, Peek Chat, Studio draft if granted | Run single-dataset analysis, pin safe widgets | No raw CHRI; cross-dataset blocked. |
| Board Composer | Dashboard creation | Studio, Source Manager, Input Tables | Create/edit/submit boards, configure widgets | No restricted fields in general boards. |
| CMS Reporting Viewer | External/approved reporting consumer | CMS Reporting | View/download approved reports | No drafts, no raw CHRI. |
| Compliance Lead | Controls and safety | QA Tower, Approvals, Audit Viewer, Agentic Controls, Admin field policy | Approve publication/report safety, review audit events | Restricted metadata; raw CHRI out of scope for analytics. |
| Data Steward | Data quality and joins | Source Manager, Upload Data, Join Resolver, Audit Viewer | Upload/validate data, resolve joins, manage data defects | No raw CHRI upload allowed. |
| Platform Admin | Configuration | Admin, Agentic Controls, Source Manager, Audit Viewer | Configure domains, personas, policies, feature flags | No raw CHRI by default. |
| Security Auditor | Independent audit | Audit Viewer, CMS Reporting | Read-only audit review | No raw CHRI. |
Field classification policy
73 fields| Dataset | Field | Type | Classification (effective) |
|---|---|---|---|
| provider_cases | run_id | string | |
| provider_cases | case_id | string | |
| provider_cases | provider_id | string | |
| provider_cases | npi | string | |
| provider_cases | tin_last4 | string | |
| provider_cases | provider_name | string | |
| provider_cases | program | enum | |
| provider_cases | state | enum | |
| provider_cases | provider_type | enum | |
| provider_cases | application_type | enum | |
| provider_cases | risk_level | enum | |
| provider_cases | case_status | enum | |
| provider_cases | cm_owner | string | |
| provider_cases | created_date | date | |
| provider_cases | target_due_date | date | |
| person_subjects | run_id | string | |
| person_subjects | person_id | string | |
| person_subjects | case_id | string | |
| person_subjects | provider_id | string | |
| person_subjects | person_role | enum |
1–20 of 73
1 / 4