Administration
Roles and permissions
ArkCloud has five fixed roles. You change what someone can do by changing their role on their user record. Roles cannot be created, renamed or edited.
Written for: Organisation administrators · Security reviewers
The screens
| Field or control | What it means |
|---|---|
| Roles & Permissions (RCM) / Roles (Rehab) | Role Management. Lists the roles. Creating, duplicating, editing or deleting a role here is a preview: the screen says so above the controls, and nothing is saved. |
| Permission Matrix (RCM) / Permissions (Rehab) | Read-only view of which role holds which permission. |
| Workforce → Roles | Not access control. It counts Workforce staff records by job role and department. |
RCM: Administration → Roles & Permissions · Rehab: Administration → Roles
Role Management in ArkCloud Rehab. The notice at the top states that changes on this screen are not saved.
/rehab/admin/roles
The five roles
| Field or control | What it means |
|---|---|
| Agent | Works accounts, notes, payments and payment plans in RCM; clinical work in Rehab. Enters RCM, Rehab and Access. |
| Supervisor | Agent permissions plus reports, team performance, queue assignment, data export and viewing users. Supervisor and Admin are the roles that may enter Clinical, Care, Insights and Workforce (Access also admits Agents); whether an organisation can open each of those is decided separately by its entitlement and by whether the application is switched on for it. |
| Admin | Everything above plus user administration, settings, refunds, workflows, SSO and portal administration - and the permissions in the next section. |
| Client Admin | Client portal: one client's accounts and reports, plus managing that client's portal users. |
| Client Viewer | Client portal, read-only. |
Permissions held only by Admin
| Field or control | What it means |
|---|---|
| Assemble and submit claims | submit_claims - claim assembly, claim submission and 837 conversion. |
| Set fee-schedule rates | manage_payments - creating and superseding fee schedules. |
| Create or change facilities and payers | edit_settings. |
| Manage and view integrations | manage_integrations, view_integrations - the HL7 parse / validate / generate API and the EHR APIs (which answer "EHR sync is not available"). Granted to Admin on 2026-10-02. |
What a role does not decide
Whether a Rehab note can release a visit for billing is not a role question. It depends on the signer's discipline grant, Workforce record and credentials - see Clinician billing. Super Admin appears in some permission lists but cannot be assigned to anyone, so a permission only it holds (for example deleting documents through the API) is refused for every user.