Roles and permissions

Veona controls access by role. Your role grants a set of permissions, and every screen and action checks for the permission it needs. This page explains the model and lists what the main clinical roles can do.

Two principles

Deny-by-default. Nothing is allowed unless your role explicitly grants it. If your role does not hold the permission a screen requires, you do not see the screen. (A module also has to be part of your facility’s edition — see Editions.)

Order versus fulfil. Veona keeps ordering and fulfilling separate:

Prescribers order, they do not fulfil. A clinician or nurse can order labs and imaging and a clinician can prescribe — but they cannot enter a lab result, author a radiology report, or dispense a medication.
Fulfillers fulfil, they do not order. A lab scientist enters and verifies results, a radiologist authors and signs reports, and a pharmacist dispenses — but none of them place the order.

This separation is enforced everywhere: in the navigation you see, and again on every action you take.

The Administrator role

A facility’s Administrator is a super-role that holds every permission across every module. It exists so a provisioned facility always has someone who can reach every screen. Most staff hold a focused, least-privilege role instead.

What the main clinical roles can do

The capabilities below are verified against Veona’s canonical role definitions.

Role	What this role can do
Front Desk	Register patients, operate the queue, and book appointments. Reads patient demographics.
Scheduler	Book appointments and create referrals. Reads patient registration.
Queue Operator	Operate the patient queue. Reads patient registration.
Clinician	Order labs and imaging, prescribe medications, and override a flagged drug interaction at order time (signed with the eSign PIN). Writes clinical notes and reads patient records. Does not enter results or dispense.
Nurse	Read charts, write notes, record medication administration, and order labs and imaging. Reads patient records. Does not prescribe, enter results, or dispense.
ED Physician	Triage, treat, and decide disposition (admit, refer, discharge) in the emergency department.
ED Nurse	Triage and treat in the emergency department.
Ward Consultant	Admit patients and manage the ward.
Ward Nurse	Record nursing observations and administer medications on the ward.
Surgeon	Schedule theatre cases and sign theatre records. Reads patient demographics so the case picker works.
Anaesthetist	Record anaesthesia during theatre cases.
Theatre Nurse	Support peri-operative work in theatre.
Lab Scientist	Enter and verify lab results and sign them out. Does not order tests.
Lab Admin	Manage the lab catalogue and providers, and enter and verify results.
Radiologist	Author and sign imaging reports and manage critical findings. Does not order studies.
Radiographer	Acquire and store imaging studies (the modality technician).
Pharmacist	Dispense medications, run the controlled-drug register and returns, and override an interaction at dispense time. Does not prescribe.
Pharmacy Technician	Read prescriptions and dispense.
Pharmacy Admin	Manage the pharmacy (formulary and settings), dispense, and run the controlled-drug register. Does not prescribe.
Storekeeper	Move stock and read inventory.
Stock Admin	Manage inventory and run procurement.
Billing Clerk	Capture charges and create invoices.
Cashier	Capture charges and take payments.
Billing Manager	Configure billing, take payments, and submit claims.
Midwife	Record antenatal care and deliveries.
Obstetrician	Manage maternity and certify births.
Vital Registrar	Manage vital records and issue birth and death certificates.
Data Protection Officer	Raise data-subject requests and run retention.
Facility Admin	Manage facility settings and assets.
HR Manager	Manage staff, payroll, and rostering.
Pulse Admin	Manage analytics dashboards and read the audit trail.
Integration Admin	Manage Connect devices and integration settings.
Portal Coordinator	Manage the patient portal and reply to patient messages.