RBAC & organizations
Multi-tenant organization model with role-based access, invitations, MFA requirements, and row-level data isolation on the Curably Platform.
Last updated June 2026
Organization model
Every institution on Curably operates inside an organization (org). Resources — patients, records, kiosks, webhooks, audit logs — are org-scoped. Users join orgs via memberships with a single role per org.
- orgs — legal entity, type (hospital, pharmacy, HMO, NGO, enterprise), settings
- memberships — user_id, org_id, role, created_at
- invitations — email, role, token, expiry; accepted via
/api/invitations/accept
Roles
| Role | Permissions summary |
|---|---|
| Admin | Org settings, memberships, API keys, webhooks, fleet, EHR, full reports |
| Manager | Team roster, shifts, operational reports; no API key management |
| Provider | Clinical modules: verify, intake, charts, billing, AI tools |
| Nurse | Intake, vitals, consent assist; limited billing |
| Clerk | Check-in, queue, verification; no clinical notes |
Platform-level admin roles (superadmin, platform_admin) are separate from org roles and govern the Curably operator console only.
Invitations
- Admins invite via email with role pre-assignment
- Invite links expire (default 7 days); resend generates new token
- Accept flow creates membership and audit event
- Access requests: external users can request org access; admin approves via
/api/orgs/access-requests/approve
MFA requirements
Sensitive operations
requireOrgAdminWithMfa).Enforce MFA for all admin-tier users at onboarding. TOTP and WebAuthn supported. See security hardening QA in operator runbooks.
Data isolation
- Row-level security partitions data by
org_id - API handlers verify membership before returning org data
- Cross-org reads require explicit beneficiary consent captured at point of care or via approved request flow
- Audit logs are org-scoped and immutable
Workspace types
Specialized workspaces share the same RBAC primitives with tailored navigation:
| Workspace | Path | Primary users |
|---|---|---|
| Provider | /provider | Hospitals, clinics |
| Pharmacy | /pharmacy | Retail and hospital pharmacies |
| HMO | /hmo | Health plans, TPAs |
| NGO | /ngo | Community health programs |
| Enterprise | /enterprise | Employer-sponsored care |
| Admin | /admin | Curably platform operators |
Provider portal details: Provider portal docs