Never send: passwords, keys, raw logs, credentials
Privacy note: AI requests go through /api/* proxy. No PII is stored server-side. All patient data remains in client localStorage. AI providers receive only clinical context, never raw patient identifiers.
👤
RBAC & Admin Users
Role matrix, admin management, least privilege, audit trail
4 RolesLeast privilege
▼
Role-based access control matrix
Permission
Admin
Manager
Nurse
CHW
Admin Settings
✅
👁️
❌
❌
Patient Records
✅
✅
✅
👁️
Prescriptions
✅
✅
✅
❌
Lab Orders
✅
✅
✅
❌
Schedule Mgmt
✅
✅
✅
👁️
Finance/Billing
✅
✅
❌
❌
HR / Staff
✅
✅
❌
❌
Audit Logs
✅
👁️
❌
❌
Ko AI Chat
✅
✅
✅
✅
Community Health
✅
✅
👁️
✅
Data Export
✅
✅
❌
❌
Reset / Delete
✅
❌
❌
❌
✅ Full access 👁️ Read-only ❌ No access
Audit: All role changes logged to Store.actionLog with timestamp, actor, and previous value. Admin role changes require confirmation.